0 items
Privacy Policy
Lollipops and Ladybirds Last updated: 4 August 2026
1. Who we are
This website, , is operated by Lollipops and Ladybirds Ltd (company number 08658538) ("we", "us", "our"), based at:
44 Victoria Street, Old Cwmbran, NP44 3JN Telephone: 01633 406406 Email:
We are the "data controller" for the personal information described in this policy, meaning we decide how and why it is processed. This policy explains what information we collect through the website, how we use it, and the rights you have, in line with the UK GDPR and the Data Protection Act 2018.
2. Information we collect
We collect information from you in the following ways:
a) When you contact us Via our contact form or by phone/email, we collect your name, email address, telephone number, and the content of your enquiry.
b) When you book an appointment, workshop, or event We collect the details needed to arrange your booking, such as your name, contact details, the event/date requested, and details of any group (e.g. birthday party, Brownies, hen night) attending.
c) When you shop online or create an account If you use our online shop, we collect your name, delivery and billing address, email address, telephone number, and your order history. Where you create a login account, we also hold your account details.
d) Payment information Card payments made through our online shop are processed by PayPal. We do not see or store your full card details — these are handled securely by PayPal in accordance with its own privacy policy (available at ) and PCI-DSS security standards.
e) Photographs and keepsake impressions As part of our handprint, fingerprint, paw print, and memorial keepsake services, we may create physical or digital impressions/casts, and may take photographs of finished pieces or of sessions (including of children, where a parent or guardian has brought them to an appointment) for order fulfilment and, with your separate consent, for marketing purposes (e.g. our website or social media). We only use such images with the consent of the parent/guardian or adult customer concerned, and you can withdraw that consent at any time.
f) Bereavement and memorial orders Where you place a memorial order, you may share details relating to a deceased loved one (such as a name or fingerprint impression). Data relating to deceased individuals falls outside UK GDPR, but we treat it with the same care and confidentiality as personal data belonging to you as our customer.
g) Technical and usage information When you visit our website, we automatically collect some technical information via cookies and similar technologies — see Section 5 (Cookies) below.
3. How we use your information and our legal basis
| Purpose | What we use it for | Legal basis |
|---|---|---|
| Responding to enquiries | Answering questions sent via the contact form, phone, or email | Legitimate interests (to respond to enquiries) |
| Taking bookings | Arranging appointments, workshops, parties, and events | Performance of a contract |
| Processing shop orders | Taking payment, fulfilling and delivering orders, managing your account | Performance of a contract |
| Customer service | Handling queries about existing orders or bookings | Performance of a contract / legitimate interests |
| Marketing | Occasionally sending news about offers, workshops, or events to existing customers | Consent, or legitimate interests for similar past customers (soft opt-in) — you can opt out at any time |
| Photography for marketing | Sharing finished keepsakes/session photos on our website or social media | Consent |
| Website analytics | Understanding how visitors use our website so we can improve it | Consent (for non-essential analytics cookies) |
| Legal and accounting | Keeping records required for tax, accounting, and legal obligations | Legal obligation |
We do not use your personal information for any automated decision-making or profiling that has a legal or similarly significant effect on you.
4. Who we share your information with
We do not sell your personal information. We share it only with:
- PayPal, to process online payments securely.
- Delivery/courier companies, where an order needs to be posted or delivered.
- IT and website service providers, who host and maintain our website and systems on our behalf, under confidentiality obligations.
- Analytics providers (Google Analytics and our self-hosted Piwik/Matomo analytics), to help us understand website usage — see Section 5.
- Regulators, law enforcement, or professional advisers, where we are required to by law.
Any third party we share data with is only permitted to use it for the specific purpose we instruct, and must keep it secure.
5. Cookies and analytics
Our website uses cookies and similar technologies, including:
- Essential cookies — needed for core functionality such as your shopping basket and staying logged in to your account. These cannot be switched off as the site won't work properly without them.
- Analytics cookies — we use Google Analytics and a self-hosted Piwik/Matomo analytics tool to understand how visitors use our site (e.g. pages visited, time on site) so we can improve it. These are not essential and are only set with your consent.
[Note: a cookie consent banner is planned but not yet live on the site. Under UK PECR rules, non-essential cookies such as Google Analytics/Matomo require the visitor's prior consent, with an easy way to decline, so this wording assumes that banner is in place. Once it's added, please double-check the categories/wording above match how the banner actually works, and remove this note.]
You can also control cookies through your browser settings, though blocking essential cookies may affect how the site works. Google Analytics data may be processed on servers outside the UK; Google provides its own safeguards for this, detailed at .
6. How long we keep your information
We keep personal information only as long as necessary for the purposes it was collected:
- Enquiry/contact form details: up to 12 months, unless a booking or order results
- Order and booking records: 6 years, to meet UK tax and accounting obligations
- Account details: for as long as your account remains active, plus a reasonable period after
- Marketing consents: until you withdraw consent or ask us to stop
7. Your rights
Under UK data protection law, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Erase your information in certain circumstances
- Restrict or object to certain processing
- Data portability — receive your data in a portable format
- Withdraw consent at any time, where we rely on consent (e.g. marketing, photos, analytics cookies)
To exercise any of these rights, contact us at or 01633 406406. We'll respond within one month.
If you're unhappy with how we've handled your information, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO): or 0303 123 1113.
8. Children's information
Some of our services (e.g. handprint casting, birthday parties) involve children, but bookings, accounts, and payments are always made by a parent or guardian, not the child. We do not knowingly collect personal information directly from children without parental involvement.
9. Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this policy from time to time, for example if our services or the law change. The "last updated" date at the top shows when it was last revised. We encourage you to check back periodically.
11. Contact us
If you have any questions about this policy or how we handle your personal information, please contact us:
Lollipops and Ladybirds 44 Victoria Street, Old Cwmbran, NP44 3JN Email: Telephone: 01633 406406
- home |
- about us |
- contact us |
- shop |
