Privacy Policy

Who I am

Lois Young Creative is a sole trader based in the United Kingdom, and I’m the data controller for the information described here. The easiest way to reach me about anything on this page is through the contact form; my postal business details are in the business information section of my Terms & Conditions.

What I collect

Depending on how you use the site, I may collect your name and email address; your delivery and billing address, and a phone number if you give one; details of what you’ve ordered and paid; any message you send me through the contact form; and basic technical information about your visit that my website and payment providers record automatically as part of keeping the site secure and working.

I never see or store your full card details. Payments are handled by Shopify, which runs my checkout and processes your card information directly.

Why I use it, and my lawful basis

To take and deliver your order, and to help you with any questions about it, I use your details because they’re necessary to perform my contract with you. To reply to contact-form enquiries and to keep the website working securely, I rely on my legitimate interests in running my shop. To keep sales and tax records, I rely on my legal obligations. If I ever send marketing emails, I’ll only do so with your consent, and you can withdraw it at any time.

Who else sees your information

I only share what’s needed, and only with the services I actually use: Shopify, which runs my checkout and processes card payments; the platform that hosts my website; the email service that passes contact-form messages to my inbox, and Google, which provides that inbox; and Royal Mail, which delivers your parcel. I may also share information with my accountant, or with authorities where the law requires it. I never sell your data.

Cookies and analytics

My website doesn’t use Google Analytics, advertising pixels or marketing tracking tools. The site stores your basket in your own browser so it isn’t lost as you look around, and my hosting and payment providers set cookies that are necessary for the site and checkout to work securely. You can block or delete cookies and site storage in your browser settings, though the basket and checkout may then not work properly.

How long I keep it

Order and payment records are kept for six years plus the current year, as UK tax rules require. Contact-form enquiries are normally kept for up to 12 months after the enquiry has been resolved, unless there is a legitimate reason to retain them for longer. Anything I no longer need is deleted.

Keeping it safe

Information is held in password-protected accounts with my shop, payment, email and hosting providers, and is only accessible to me. My providers use encrypted connections. No system is perfectly secure, but I take sensible care with your details.

Your rights

You have the right to ask for a copy of the information I hold about you, to have it corrected or deleted, to object to or restrict how I use it, to ask for it in a portable format, and to withdraw consent where I relied on it. Just get in touch through the contact form and I’ll respond within one month.

Complaints

Please tell me first if you’re unhappy and I’ll try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Last updated: September 2026.