Privacy Policy – Miss Petty

Last updated: October 2026

This policy explains how Miss Petty (trading as Miss Petty, “we”, “us”) collects and uses your personal data when you use misspetty.com. We are the data controller. We comply with the UK GDPR and the Data Protection Act 2018.

What we collect

Order and account details: name, delivery and billing address, email, phone number, order history and, if you create an account, your login details.
Payment information: payments are handled by our payment providers. We do not store full card numbers. We receive confirmation of payment and limited details such as the card type and last four digits.
Messages and questions: anything you send through our contact form, by email, or via the “Ask a question” form on product pages (your name, email and question).
Marketing preferences: if you join our mailing list.
Technical and usage data: IP address, browser and device type, pages viewed, and how you arrived at our site.

How and why we use it

To fulfil your order (contract): process payment, deliver, handle returns and refunds, and send order updates.
To answer your questions (legitimate interests): reply to enquiries and product questions. If we publish an answer on a product page we show only your first name or a neutral label, never your email.
To keep our site secure and prevent fraud (legitimate interests and legal obligation), including spam filtering of comments and forms.
To meet legal and accounting obligations, such as keeping order records for tax purposes.
To send marketing (consent): only if you have opted in. You can unsubscribe at any time using the link in any email.
To understand and improve our site and advertising (consent where required) through the cookies described below.

Who we share it with

We only share data with service providers who help us run the shop, and only what they need:

Payment providers: WooPayments / Stripe, PayPal, Apple Pay, Google Pay, Amazon Pay, and buy-now-pay-later providers Klarna and Clearpay if you choose them. Those providers act as independent controllers of the information you give them, under their own privacy policies. Klarna and Clearpay carry out their own eligibility and credit checks.
Delivery carriers to deliver your parcel.
Our website host and technical services that store and secure our site and send our emails.
Google, through Google for WooCommerce, which may be used to show our products in Google listings and measure advertising performance.
Akismet (Automattic), which checks form and comment submissions for spam.
Instagram / Meta, when our Instagram feed is displayed on the site, which may involve your browser connecting to their servers.
Professional advisers, authorities and regulators where the law requires or to protect our legal rights.

We do not sell your personal data.

International transfers

Some of our providers are based outside the UK, for example in the United States. Where that happens we rely on UK-approved safeguards such as the UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement or Addendum.

Cookies and similar technologies

We use:

Essential cookies to keep your cart, checkout and login working and to keep the site secure.
Order attribution cookies from WooCommerce, which record how a customer reached the shop (for example from a search or social link) so we can understand what brings people to us.
Payment and fraud-prevention cookies set by our payment providers.
Marketing and analytics cookies from services such as Google, only where you have given consent.
Browser storage on your device (localStorage) to remember your wishlist, recently viewed products and products you are comparing. This stays in your own browser, is not sent to us, and is cleared if you clear your browsing data.

You can control cookies in your browser settings. Blocking essential cookies may stop the cart and checkout from working.

How long we keep it

Order and invoice records: 6 years after the order, to meet tax and accounting rules.
Account details: until you ask us to close your account.
Enquiries and product questions: as long as needed to deal with them and for a reasonable period afterwards.
Marketing: until you unsubscribe.

Your rights

You have the right to access your data, have it corrected or erased, restrict or object to our use of it, receive a portable copy, and withdraw consent at any time. To use these rights email concierge@misspetty.com. We will respond within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

Security

We use appropriate technical and organisational measures to protect your data, and payment details are processed over encrypted connections. No online service can be completely secure, so please keep your password private.

Children

Our shop is not aimed at children under 13 and we do not knowingly collect their data.

Changes

We may update this policy and will change the date above when we do.

Contact

Miss Petty

concierge@misspetty.com