Privacy Policy
Last updated: 02/05/26
1. Who We Are
This website is operated by Suffolk Story.
We are the data controller responsible for your personal data.
Contact details:
Email: suffolkstory2025@gmail.com
2. What Personal Data We Collect
We may collect and process the following information:
Information you provide:
-
Name
-
Email address
-
Billing and delivery address
-
Order details
-
Any messages you send us
Payment information:
Payments are processed securely via third-party providers (e.g. Wix Payments, Stripe, PayPal).
We do not store your full payment details.
Automatically collected data:
-
IP address
-
Device and browser type
-
Website usage data (via cookies and analytics tools)
3. How We Use Your Data
We use your personal data to:
-
Process and fulfil orders
-
Communicate with you about purchases
-
Provide customer support
-
Send marketing emails (if you opt in)
-
Improve our website and services
-
Meet legal and accounting obligations
4. Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
-
Contract – to process and deliver your orders
-
Legal obligation – for tax and accounting requirements
-
Legitimate interests – to improve our services and prevent fraud
-
Consent – for email marketing and certain cookies
5. Email Marketing
If you sign up to our newsletter, we will send you updates, offers, and news.
-
You will only receive marketing emails if you have opted in
-
You can unsubscribe at any time using the link in any email
-
We use third-party email marketing providers (e.g. Wix Email Marketing or similar)
6. Cookies
Our website uses cookies in line with the Privacy and Electronic Communications Regulations (PECR).
These may include:
-
Essential cookies – required for the website to function
-
Analytics cookies – to understand how visitors use the site
-
Marketing cookies – if applicable
7. Sharing Your Data
We only share your data where necessary, including with:
-
Wix (our website platform and hosting provider)
-
Payment processors
-
Delivery and courier services
-
Email marketing platforms
-
Analytics providers
Some of these providers may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place.
8. Data Retention
We keep your personal data only as long as necessary:
-
Order data: retained for up to 6 years for tax purposes
-
Marketing data: until you withdraw consent
-
General enquiries: for as long as needed to resolve your query
9. Your Rights
Under UK data protection law, you have the right to:
-
Access your personal data
-
Correct inaccurate data
-
Request deletion of your data
-
Restrict or object to processing
-
Withdraw consent at any time (for marketing)
-
Lodge a complaint with the Information Commissioner's Office (ICO)
10. Data Security
We take appropriate technical and organisational measures to protect your personal data.
Our website is hosted on Wix, which provides secure infrastructure and data protection measures.
11. Changes to This Policy
We may update this privacy policy from time to time.
Any changes will be posted on this page with an updated revision date.
12. Contact Us
If you have any questions about this policy or your personal data, please contact:
Suffolk Story
Email: suffolkstory2025@gmail.com