Last updated: December 2025
Made By Stacey (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit or make a purchase from [madebystacey.co.uk], in accordance with the UK General Data Protection Regulation (UK GDPR).
1. Information We Collect
When you visit or make a purchase from our store, we may collect the following personal data:
- Identity & Contact Information: name, email address, shipping and billing address
- Order Information: products purchased, order history, and transaction details
- Technical Data: IP address, browser type, device information, and usage data
Payments are processed securely through Big Cartel and third-party payment providers (such as PayPal or Stripe). We do not store or have access to your full payment card details.
2. How We Use Your Personal Data
We use your personal data to:
- Process and fulfil your orders
- Communicate with you about purchases or enquiries
- Provide customer support
- Improve our store and services
- Comply with legal obligations
- Prevent fraud and ensure security
3. Legal Basis for Processing (UK GDPR)
We process your personal data under the following legal bases:
- Contract – to fulfil your order
- Legitimate Interests – to operate and improve our store
- Legal Obligation – for accounting and tax purposes
- Consent – where you have explicitly given it (e.g. email marketing, if applicable)
4. Sharing Your Personal Data
We only share your data when necessary, including with:
- Big Cartel, as our e-commerce platform
- Payment processors (e.g. PayPal, Stripe)
- Shipping providers to deliver your orders
We do not sell your personal data to third parties.
5. Cookies
Our website uses cookies provided by Big Cartel and trusted third parties to ensure the store functions correctly and to improve user experience. You can manage or disable cookies through your browser settings.
6. Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes outlined in this policy, including legal and accounting requirements.
7. Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent at any time (where applicable)
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, please contact us using the our contact form.
8. Data Security
We take appropriate technical and organisational measures to protect your personal data. However, no online transmission is completely secure.
9. Children’s Data
Our store is not intended for children under the age of 13, and we do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.