Privacy Policy
Last updated: 13 October 2026
ChristmasGiggles ("we", "our", "us") respects your privacy. This policy explains what personal data we collect, why we collect it, and the rights you have over it. We are based in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller for your personal data is ChristmasGiggles. If you have any questions about this policy or your data, contact us at support@christmasgiggles.com.
2. What data we collect
When you visit our store or place an order, we may collect:
- Identity & contact details: your name, email address, delivery address, and phone number (if provided).
- Transaction details: products ordered, order value, and payment confirmation. Payments are processed securely by our payment providers — we never see or store your full card number.
- Technical data: IP address, browser type, device information, and pages visited, collected via cookies and similar technologies.
- Communications: any messages you send us, for example emails to support@christmasgiggles.com.
3. How and why we use your data
- To fulfil your order (legal basis: contract) — processing payment, arranging delivery, and sending tracking updates.
- Customer support (legal basis: contract / legitimate interests) — responding to your questions and resolving issues.
- Marketing emails (legal basis: consent) — occasional offers and news. You can unsubscribe at any time via the link in any email.
- Site improvement & security (legal basis: legitimate interests) — understanding how visitors use the store and preventing fraud.
- Legal compliance (legal basis: legal obligation) — tax and accounting records.
4. Who we share data with
We only share data where necessary to run the store:
- Shopify — our ecommerce platform, which hosts the store and processes checkout.
- Payment providers — to securely process your payment.
- Delivery partners — your name, address, and contact details so your order can be delivered and tracked.
- Analytics & advertising partners — to measure store performance and show relevant ads.
- Authorities — where required by law.
We never sell your personal data.
5. International transfers
Some of our service providers are based outside the UK/EEA (for example in the United States). Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU–US Data Privacy Framework.
6. How long we keep data
Order records are kept for 6 years for tax and accounting purposes. Marketing data is kept until you unsubscribe. Support correspondence is kept for up to 3 years.
7. Cookies
Our store uses cookies to keep your basket working, remember your preferences, and understand how visitors use the site. You can control cookies through your browser settings; disabling them may affect how the store works.
8. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent at any time (for marketing).
To exercise any of these rights, email support@christmasgiggles.com. We will respond within one month.
9. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be posted on this page with the updated date.