Privacy policy
How Darling Twigs Limited handles your personal information, in plain language, complying with the UK GDPR, the Data Protection Act 2018, PECR and, where it applies, the EU GDPR.
Who we are
The data controller is Darling Twigs Limited, company number 17208578, registered office Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA. ICO registration ZC179040. Contact: the form on our website.
What we collect and why
What you give us: name, delivery and billing address, email, optional phone number, order history, messages and marketing preferences. Collected automatically via cookies: device and usage data such as IP address, browser and pages viewed. We never store your full card details; payment is handled by PCI-compliant processors such as Shopify Payments.
We use it to fulfil your order and provide support (lawful basis: contract); to run, secure and improve the site (legitimate interests, plus consent for non-essential cookies); to send marketing you’ve signed up for, unsubscribe any time (consent, or the PECR soft opt-in); to keep tax records (legal obligation); and to prevent fraud (legitimate interests).
Who we share it with
We never sell your information. We share it only with the services that run the business: Shopify, payment processors, the print partner who makes and posts your order, delivery carriers, email, review, analytics and advertising tools such as Meta, professional advisors, and authorities where the law requires. All are bound by contract to use your data only as we instruct. Ask any time for the current list.
Some providers operate outside the UK. Any transfer is protected by UK GDPR safeguards: adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the UK IDTA / Addendum to the EU Standard Contractual Clauses.
How long we keep it
Order records at least 6 years (UK tax law); support messages up to 3 years; marketing data until you unsubscribe (then just a suppression record). After that, deleted or anonymised.
Cookies
A banner on your first visit lets you accept or reject non-essential cookies, changeable any time via the cookie settings link. Strictly necessary cookies (like your cart) don’t need consent; analytics and marketing cookies are set only if you agree.
Your rights
Under UK GDPR you can ask for a copy of your data, have it corrected or deleted, restrict or object to its use (including an absolute right to stop direct marketing), receive it in portable form, and withdraw consent at any time. EEA residents have equivalent EU GDPR rights; California residents may have CCPA rights. Message us and we’ll respond within one month.
The small print
We don’t knowingly collect data from anyone under 16. We protect data with HTTPS, access controls and PCI-compliant payment processing, though no internet system is completely secure. We may update this policy; the date above shows the latest version. Complaints: contact us first, or the Information Commissioner’s Office: ico.org.uk, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. EEA residents may contact their local authority.
Darling Twigs Limited, registered in England and Wales, company number 17208578. Paying attention to the small things.
Last updated: 8 October 2026