Privacy policy
This policy explains what personal data Tailshire collects when you visit tailshire.uk or buy from us, why we use it, who we share it with and what rights you have under UK data protection law (UK GDPR and the Data Protection Act 2018).
1. Contact
We are the data controller for the personal data described in this policy.
- Email: support@tailshire.uk
We have not appointed a Data Protection Officer, as we are not required to. Please send any privacy question to the email address above.
2. What personal data we collect
| Type of data | What it includes | Where it comes from |
|---|---|---|
| Order data | Name, billing and delivery address, email, phone number, items bought, order value, order history | You, at checkout |
| Payment data | Payment method and transaction status. We never see or store your full card number. | Our payment providers |
| Account data | Login email, password (stored encrypted by Shopify), saved addresses | You, if you create an account |
| Communication data | Messages you send us, review text and photos you submit | You |
| Device and usage data | IP address, browser and device type, pages viewed, referring site, cookie identifiers | Your device, via cookies and similar technologies |
| Marketing data | Whether you subscribed to our emails, which emails you opened or clicked | You and our email provider |
We do not knowingly collect special category data (such as health information) and we do not need it to sell you our products.
3. Why we use your data and our lawful basis
| Purpose | Data used | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Processing and delivering your order, sending order and shipping updates, handling returns and refunds | Order, payment, communication data | Contract (Art. 6(1)(b)) |
| Answering your questions and complaints | Communication, order data | Contract, or our legitimate interest in good customer service (Art. 6(1)(f)) |
| Keeping invoices and accounting records | Order, payment data | Legal obligation (Art. 6(1)(c)) under German tax and commercial law |
| Preventing fraud and keeping our shop secure | Order, payment, device data | Legitimate interest (Art. 6(1)(f)) |
| Running the website and essential cookies (basket, checkout, login) | Device data | Legitimate interest (Art. 6(1)(f)); these cookies are strictly necessary |
| Marketing emails and newsletters | Email, marketing data | Consent (Art. 6(1)(a)) |
| Asking for a product review after your order | Email, order data | Legitimate interest (Art. 6(1)(f)); you can opt out at any time |
| Advertising and measuring our ads on Meta and Google, analytics | Device, usage data | Consent (Art. 6(1)(a)), given through our cookie banner |
Where we rely on legitimate interests, we have balanced our interests against your rights. You can object at any time (see section 8).
4. Cookies and tracking
We only use non-essential cookies and similar technologies if you agree to them in our cookie banner. You can change your choice at any time via the “Cookie settings” link in our website footer.
| Category | Used for | Provider | Needs your consent? |
|---|---|---|---|
| Strictly necessary | Basket, checkout, login, security, remembering your cookie choice | Shopify | No |
| Analytics | Understanding how visitors use our shop | Shopify, Google | Yes |
| Advertising | Showing you our ads on Facebook, Instagram and Google, and measuring whether they work (Meta Pixel and Conversions API, Google Ads tag) | Meta Platforms, Google | Yes |
| Email marketing | Recognising subscribers on our site and measuring email performance | Klaviyo | Yes |
You can also block or delete cookies in your browser settings. If you block strictly necessary cookies, parts of the shop (such as the basket) will not work. To control how Meta and Google use your data for ads, you can also use your Facebook ad settings and Google ad settings.
5. Who we share your data with
We never sell your personal data. We share it only with the service providers we need to run our shop, and only as much as each one needs.
| Recipient | Why | Location |
|---|---|---|
| Shopify | Hosts our online shop, checkout and customer data | Canada, USA, EU |
| Shopify Payments (with Stripe) | Card and Apple Pay payments | USA, EU |
| PayPal | PayPal payments | Luxembourg, USA |
| Klarna | Pay-later and instalment payments; Klarna may run its own credit and identity checks under its own privacy notice | Sweden, EU |
| Our product suppliers and sourcing agent | Packing and sending your order (name, delivery address, phone number, items ordered) | China |
| Shipping and postal carriers | Delivering your parcel and providing tracking | China, UK and countries in between |
| Klaviyo | Sending order-related and marketing emails | USA |
| Loox | Collecting and displaying product reviews | Israel, USA |
| Meta Platforms (Facebook, Instagram) | Advertising and ad measurement, only with your consent | Ireland, USA |
| Advertising, ad measurement and analytics, only with your consent | Ireland, USA | |
| IONOS | Our business email | Germany |
| Tax advisers, authorities, courts | Where the law requires it, or to defend legal claims | UK, Germany |
If our business is sold or merged, your data may be passed to the new owner, who will remain bound by this policy.
6. International transfers
We are based in Germany, so your data is transferred out of the UK. Germany and the rest of the EU are recognised by the UK as providing adequate protection.
- USA: Some providers (such as Shopify, Meta, Google and Klaviyo) process data in the USA. These transfers are covered by the UK Extension to the EU–US Data Privacy Framework where the provider is certified, or otherwise by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
- China: Our products are sent to you directly by our suppliers in China, so they receive your name, delivery address, phone number and the items you ordered. China is not recognised as providing adequate protection. We share only what is needed to send your parcel, under contractual data protection terms, and the transfer is necessary to perform our contract with you (UK GDPR Art. 49(1)(b)).
- Other countries: Canada and Israel are recognised by the UK as adequate.
You can ask us for more information about these safeguards using the contact details in section 1.
7. How long we keep your data
| Data | How long |
|---|---|
| Invoices and accounting records | 10 years from the end of the year of purchase, as required by German tax law |
| Other order data and customer service messages | 3 years after your last order, so we can handle returns, warranty and legal claims |
| Customer account | Until you delete your account or ask us to delete it, unless the records above must be kept |
| Marketing email data | Until you unsubscribe, then kept only on a suppression list so we do not email you again |
| Cookie data | As set out in our cookie banner, at most 13 months |
| Product reviews | As long as the product is listed, or until you ask us to remove the review |
8. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you and get a copy
- Rectification: have inaccurate data corrected
- Erasure: have your data deleted, unless we must keep it by law
- Restriction: ask us to limit how we use your data
- Data portability: receive data you gave us in a common digital format
- Object to processing based on our legitimate interests, and to direct marketing at any time
- Withdraw consent at any time, without affecting what we did before
To use any of these rights, email us at support@tailshire.uk. We will reply within one month. We may ask you to confirm your identity first.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, phone 0303 123 1113.
9. Marketing emails and reviews
We only send you marketing emails (offers, new products, our newsletter) if you have signed up for them. Every email has an unsubscribe link, and you can also unsubscribe by emailing us.
After your order arrives, we may send you one or two emails through Loox asking you to review your purchase. You can opt out using the link in those emails. If you leave a review, your first name, review text and any photos you upload are shown publicly on our website.
10. Security, children and automated decisions
Security. Our shop runs on Shopify, which encrypts all connections (HTTPS) and processes card payments under the PCI DSS standard. Access to customer data is limited to the people who need it to run our business. No system is completely secure, but we take reasonable steps to protect your data.
Children. Our shop is not aimed at children under 18 and we do not knowingly collect their data.
Automated decisions. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our payment providers may run automated fraud or credit checks; Klarna explains its checks in its own privacy notice.
11. Changes and contact
We may update this policy when our services or the law change. The date at the bottom shows when it was last updated. If we make significant changes, we will tell you by email or with a notice on our website.
Questions about this policy or your data:
Email: support@tailshire.uk
Last updated: 3 October 2026