Privacy policy
Privacy policy
Who controls your data
Truelove Developments Ltd trading as The Cosy Hound. Registered in England and Wales, company no. 08188464. Registered office: The Office, 15 West Avenue, Filey, England, YO14 9AA. Email: jonathan@jonathantruelove.com.
What we collect
- Your name, address, email and phone number.
- Order details.
- Photos and text you upload for personalisation.
- Payment, which Shopify Payments processes. We do not see full card details.
Why we use it (our lawful bases)
- Contract: to take, make and deliver your order, and to handle returns and questions.
- Consent: for non-essential cookies and for marketing emails. We only use these if you say yes.
- Legitimate interests: to prevent fraud and keep the shop secure.
- Legal obligation: to keep order records for tax purposes.
Who we share it with
- Shopify, which hosts the store.
- Shopify Payments, which processes your payment and checks for fraud.
- Papello, our print partner, which acts as our processor. It receives your name, address, photo and text to make and send your ornament.
- Upload-Lift (Cloudlift), the app that receives and stores the photos you upload for your ornament. Cloudlift is based in Switzerland and stores uploads on Google Cloud servers in the United States.
- Dropship Mall (UK Shopping Mall Ltd), our toy and jumper supplier, which acts as our processor. It receives your name, address, email and phone number to send your order.
- The delivery companies our suppliers use (such as Evri and DPD), which receive your name, address and contact details so they can deliver and send tracking.
- Meta (Facebook and Instagram) and Google, for advertising and measurement, only if you accept cookies.
International transfers
Some of these companies, including Meta and Google, may process data in the United States. Where they do, the transfer is covered by the UK adequacy arrangements (the UK Extension to the EU-US Data Privacy Framework) or by contract safeguards approved for UK law, such as the UK International Data Transfer Addendum. Switzerland is recognised by the UK as giving adequate protection. US storage is with Google, which is certified under the UK Extension to the EU-US Data Privacy Framework.
Marketing and cookies
- We only use advertising cookies (Meta and Google) if you click Accept on our cookie banner. You can click Reject just as easily.
- We send marketing emails only if you join our email list or tick the box to opt in at checkout. Nothing is ticked for you.
- You can withdraw your consent at any time: change your cookie choice using the "Cookie preferences" link in our footer, click unsubscribe in any marketing email, or email us. This does not affect anything we did before you withdrew it.
Keeping your data
- Order records are kept for 6 years for tax purposes.
- Uploaded photos are deleted within 90 days of delivery.
Your rights
Under UK GDPR you have the right to access your data, correct it, have it deleted, restrict or object to how we use it, take a copy of it (portability), and withdraw consent at any time. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).