Privacy policy

Last updated: 11 September 2026

Woven Wild respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what personal information I collect when you visit or use my website, place an order, contact me, or otherwise interact with Woven Wild. It explains how I use your information, who I may share it with, how long I keep it, and your rights under UK data protection law.

Woven Wild operates its online store using Shopify.

1. Who is responsible for your personal information?

For the purposes of UK data protection law, Woven Wild is the data controller responsible for your personal information.

Woven Wild
70 Stubbs Lane
Braintree
CM7 3XB
United Kingdom

Email: aurorasdestination@gmail.com
Telephone: +44 7485 156156

If you have any questions about this Privacy Policy or how I use your personal information, please contact me using the details above.

2. What personal information do I collect?

Depending on how you interact with Woven Wild, I may collect:

Information you provide directly

This may include:

Your name
Billing and delivery address
Email address
Telephone number
Details of products you order
Payment and transaction information
Information you provide when contacting me
Information you provide when requesting a personalised or bespoke product
Any other information you voluntarily provide when communicating with me

I do not need or ask you to provide your full payment card details directly to me. Payments are processed securely through the payment providers available at checkout.

Information collected automatically

When you visit my website, certain information may be collected automatically through cookies and similar technologies. This may include:

IP address
Browser and device information
Information about how you use and navigate the website
Pages or products you view
Technical information about your connection

3. How I use your personal information

I use your personal information only where I have a lawful reason to do so.

I may use your information to:

Process and fulfil your orders.
Take and process payments.
Arrange delivery of your order.
Communicate with you about your order.
Deal with returns, refunds, exchanges or other customer service enquiries.
Respond to questions or messages you send to me.
Create personalised or bespoke products where you have requested them.
Keep appropriate business and financial records.
Prevent or investigate fraud or other unlawful activity.
Maintain the security of my website and services.
Comply with legal and regulatory requirements.
Improve my website, products and customer service.
Send marketing communications in the future where I have a lawful basis to do so.

Lawful bases for using your information

Depending on the circumstances, I may rely on one or more of the following lawful bases under the UK GDPR:

Contract: Where processing your information is necessary to enter into or perform a contract with you, such as processing, fulfilling and delivering an order.

Legal obligation: Where I need to process your information to comply with a legal obligation, such as accounting, tax or other record-keeping requirements.

Legitimate interests: Where processing is necessary for my legitimate business interests, provided those interests are not overridden by your rights and interests. This may include operating and improving my business, responding to enquiries, preventing fraud and maintaining the security of my website.

Consent: Where I ask for your consent, such as for certain marketing activities or non-essential cookies. Where I rely on consent, you can withdraw it at any time.

4. Marketing

I do not currently use separate third-party marketing or email marketing platforms.

If I introduce marketing or analytics services in the future, I will ensure that they are used in accordance with applicable data protection and privacy laws and will update this Privacy Policy where required.

Where you have the option to receive marketing communications from Woven Wild, you can unsubscribe at any time using the unsubscribe option provided or by contacting me directly.

Unsubscribing from marketing communications will not stop me from sending important non-marketing communications, such as information relating to an order you have placed.

5. Who do I share your information with?

I only share personal information where necessary to operate my business, provide the services you have requested, fulfil your order, comply with the law, or where you have otherwise given permission.

Depending on the circumstances, this may include:

Shopify, which provides the ecommerce platform used to operate my online store.
Shopify Payments, where used to process your payment.
PayPal, where you choose to pay using PayPal.
Klarna, where you choose to use Klarna as a payment option.
Card payment providers, where applicable.
Postal and delivery providers, where necessary to deliver your order.
Technology and service providers who help me operate my website and business.
Professional advisers, where necessary.
Government bodies, regulators or law enforcement authorities, where I am legally required to provide information.

These organisations may process personal information on my behalf or as independent controllers, depending on the service they provide, and may have their own privacy policies.

I do not sell your personal information.

6. Shopify

My online store is powered by Shopify.

Shopify may collect and process personal information when you use my website, including information necessary to provide ecommerce, payment, security and related services.

You can read Shopify's privacy policy here:

Shopify Privacy Policy

Shopify and some of the other service providers I use may process information outside the UK. Where this happens, appropriate safeguards will be used where required by UK data protection law.

7. Payments

Payments made through my website may be processed using Shopify Payments, PayPal, Klarna or card payment services.

Your payment information may be processed directly by the relevant payment provider. I do not intentionally store your complete payment card details.

Payment providers may collect and process your personal information in accordance with their own privacy policies and terms.

8. International transfers

Some of the service providers I use may process personal information outside the UK.

Where personal information is transferred outside the UK, I will ensure that an appropriate legal safeguard is in place where required by UK data protection law, such as a UK adequacy regulation or appropriate contractual safeguards.

9. How long do I keep your information?

I will only keep your personal information for as long as reasonably necessary for the purposes for which it was collected.

The length of time will depend on the type of information and why I need it.

Information relating to purchases may need to be retained for accounting, tax, legal or record-keeping purposes.

When personal information is no longer required, I will take reasonable steps to securely delete or anonymise it.

10. Keeping your information secure

I take reasonable and appropriate measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

11. Your data protection rights

Under UK data protection law, you may have the right to:

Access the personal information I hold about you.
Correct inaccurate or incomplete information.
Request erasure of your personal information in certain circumstances.
Request restriction of processing in certain circumstances.
Object to certain types of processing, including processing based on legitimate interests and direct marketing.
Request data portability in certain circumstances.
Withdraw consent where I rely on your consent to process your information.

These rights are not absolute and may only apply in certain circumstances.

To exercise your rights, please contact me using the contact details in this Privacy Policy.

I may need to verify your identity before dealing with certain requests.

12. Children's privacy

My website and services are not intended to be directed at children.

I do not knowingly collect personal information from children for the purpose of providing services directly to them.

If you believe that a child has provided personal information to Woven Wild without appropriate consent, please contact me so that I can consider the appropriate action.

13. Third-party websites

My website may contain links to websites or services operated by third parties.

If you follow a link to another website, that website will have its own privacy policy and terms. I am not responsible for the privacy practices or security of websites that I do not control.

14. Cookies

My website uses cookies and similar technologies.

Some cookies are necessary for the website to function, while others may be used for purposes such as analytics, preferences or marketing.

Where consent is required for non-essential cookies, I will ask for your consent before using them.

You can manage your cookie preferences through the cookie settings available on the website.

15. Complaints

If you have a concern about how I have handled your personal information, please contact me first so that I have the opportunity to resolve your concern.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113

You can make a complaint through the ICO's website:

Information Commissioner's Office

16. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my business, website, services or legal requirements.

When I make changes, I will update the "Last updated" date at the top of this Privacy Policy.

17. Contact

If you have any questions about this Privacy Policy, how I use your personal information, or would like to exercise your data protection rights, please contact me: