Privacy policy

Last updated: November 10, 2026

Wibblewick ("we", "us" or "our") operates this store and website, including all related information, content, features, tools, products and services, to give you a curated shopping experience (the "Services"). Wibblewick is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase through the Services, or communicate with us. If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using any of the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use and disclose your information.

Personal information we collect or process

"Personal information" means information that identifies, or can reasonably be linked to, you or another individual. It does not include anonymous or de-identified information. Depending on how you interact with the Services, where you live and what the law permits or requires, we may collect or process the following categories of personal information:

Contact details, including your name, address, billing address, shipping address, phone number and email address.
Financial information, including payment card details, transaction details, payment method and payment confirmation. Card details are handled by our payment providers and we do not store full card numbers.
Account information, including your username, password, security questions, preferences and settings.
Transaction information, including items you viewed, added to your cart or wishlist, purchased, returned, exchanged or cancelled, and your past transactions.
Communications with us, including information you provide when you contact customer support.
Device information, including information about your device, browser or network connection, your IP address and other unique identifiers.
Usage information, including how and when you interact with or navigate the Services.

Sources of personal information

Directly from you, for example when you create an account, use the Services, communicate with us or otherwise give us your information.
Automatically through the Services, for example from your device when you visit our site, including through cookies and similar technologies.
From our service providers, who collect or process personal information on our behalf.
From our partners or other third parties.

How we use your personal information

Providing, personalising and improving the Services: processing payments, fulfilling orders, arranging shipping, handling returns and refunds, managing your account, remembering your preferences and recommending products.
Marketing and advertising: sending marketing communications by email, text message or post, and showing you ads on the Services or on other websites, including ads based on items you viewed, added to your cart or purchased.
Security and fraud prevention: authenticating accounts, keeping checkout secure, and detecting, investigating or acting on fraudulent, illegal, unsafe or malicious activity. If you create an account, you are responsible for keeping your login details secure and we recommend you never share them.
Communicating with you: providing customer support, responding to you and maintaining our business relationship with you.
Legal reasons: complying with applicable law and valid legal process, handling disputes and legal claims, and enforcing or investigating possible breaches of our terms or policies.

How we disclose personal information

We may disclose your personal information to third parties for legitimate purposes described in this Privacy Policy, including:

To Shopify and to vendors and other third parties who perform services for us, such as IT management, payment processing, data analytics, customer support, cloud storage, order fulfilment and shipping. This includes our fulfilment partners and suppliers, who receive your name, shipping address and contact details so they can deliver your order.
To advertising, analytics and marketing partners, to measure our marketing and show you relevant ads. Depending on where you live, you may have the right to ask us not to share information about you for targeted advertising based on your activity across different merchants and websites. You can exercise this right here.
When you direct, request or consent to us sharing certain information with a third party, for example through social media widgets or login integrations.
To our affiliates or within our corporate group.
In connection with a business transaction such as a merger or bankruptcy, to comply with legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce our terms or policies, and to protect our Services, our rights and the rights of our users or others.

Cookies and similar technologies

We and our partners use cookies, pixels and similar technologies to keep the store working, remember your cart, understand how the Services are used and measure and personalise advertising. You can control cookies through your browser settings, although some features of the Services may not work without them.

Our relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit to the Services will be transmitted to and shared with Shopify and third parties that may be located outside your country of residence. To protect, develop and improve our business, we also use certain Shopify features that combine data from your interactions with our store and with other merchants and Shopify. In these cases Shopify is responsible for processing your personal information, including responding to requests to exercise rights over that use. To learn more about how Shopify uses personal information and any rights you may have, visit Shopify's Consumer Privacy Policy. Depending on where you live, you may be able to exercise certain rights through Shopify's Privacy Portal.

Third-party websites and links

The Services may link to websites or platforms operated by third parties. If you click on a link to a site we do not control, please review its privacy policy and terms. We are not responsible for the privacy or security of those sites, or for the accuracy, completeness or reliability of the information on them. Information you share in public or semi-public places, including on third-party social media, may be viewed by others without restriction on our or their use of it. A link does not mean we endorse the content, owners or operators of that site unless we say so on the Services.

Children's data

The Services are not intended for children and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are a parent or guardian and believe your child has given us personal information, contact us using the details below to request deletion.

Security and retention

No security measure is perfect or impenetrable and we cannot guarantee absolute security. Information you send us may not be secure in transit, so we recommend not using insecure channels to send sensitive or confidential information.

How long we keep your personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes or enforce our agreements and policies.

Your rights and choices

Depending on where you live, you may have some or all of the rights below. These rights are not absolute, they apply only in certain circumstances, and in some cases we may decline your request as permitted by law.

Right to access / know: request access to the personal information we hold about you.
Right to delete: request that we delete personal information we hold about you.
Right to correct: request that we correct inaccurate personal information we hold about you.
Right to data portability: request a copy of your personal information and ask us to transmit it to a third party, in certain circumstances and with some exceptions.
Right to opt out of sale or sharing for targeted advertising: depending on where you live, you may opt out of the "sale" or "sharing" of personal information, or of processing for "targeted advertising". You can do this here. If you visit our site with a Global Privacy Control opt-out signal enabled, then depending on where you live we will treat it as an opt-out request for the device and browser you use to visit. Learn more at https://globalprivacycontrol.org/. Other "Do Not Track" signals sent by your browser or device are not recognised.
Managing communication preferences: we may send you promotional emails. You can opt out at any time using the unsubscribe link in those emails. If you opt out, we may still send you non-promotional emails, such as emails about your account or orders.

If you live in the United Kingdom or the European Economic Area, subject to exceptions and limitations under local law, you may also have these rights:

Objection and restriction of processing: ask us to stop or restrict processing your personal information for certain purposes.
Withdrawal of consent: where we rely on your consent, you may withdraw it. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.

If you live in Australia, you may also request access to, or correction of, your personal information, and you may complain to the Office of the Australian Information Commissioner (OAIC) if you are unhappy with how we handle it.

You can exercise these rights where indicated on the Services or by contacting us using the details below. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before responding, as permitted or required by law. Where applicable law allows, you may appoint an authorised agent to make a request for you; before accepting such a request we will ask for proof that you authorised the agent, and we may ask you to verify your identity directly with us. We will respond to your request promptly as required by applicable law.

Complaints

If you have a complaint about how we handle your personal information, please contact us using the details below. Depending on where you live, you may also complain to your local data protection authority. For the European Economic Area, a list of supervisory authorities is available here.

International transfers

We may transfer, store and process your personal information outside the country where you live. If we transfer personal information from the European Economic Area or the United Kingdom to another country, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or an equivalent contract issued by the relevant UK authority, unless the data is transferred to a country that has been determined to provide an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons. We will post the revised policy on this page, update the "Last updated" date and give notice where applicable law requires.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you want to exercise any of your rights, email us at hfordering24@gmail.com. Our other contact details are on our Contact Information page. For the purposes of applicable data protection law, Wibblewick is the controller of your personal information.