Privacy Policy

Last updated: 16 September 2026

1. About this Privacy Policy

This Privacy Policy explains how Pretty Miniatures Ltd collects, uses, stores and shares personal information when you visit our website, place an order, create an account, contact us, subscribe to marketing or otherwise interact with us.

Pretty Miniatures Ltd is the data controller responsible for the personal information described in this policy.

Pretty Miniatures Ltd
23 Janes Lane
Burgess Hill
West Sussex
RH15 0QJ
United Kingdom

Company Registration Number: 14692847
VAT Registration Number: GB 481 5540 85
ICO Registration Number: ZB358920

Email: sales@prettyminiatures.co.uk

References to “we”, “us” and “our” mean Pretty Miniatures Ltd.

2. Personal Information We Collect

Depending on how you use our website and services, we may collect:

Identity and contact information

Your name
Billing and delivery addresses
Email address
Telephone number

Order and transaction information

Products ordered
Order value
Delivery method
Payment status
Refund or return information
Customs, duties or international delivery information where applicable

Account information

Login and account details
Saved addresses
Order history
Account preferences

Communications

Messages and enquiries sent to us
Custom-order information
Customer-service correspondence
Photographs or other information you provide in relation to an order or enquiry

Marketing information

Whether you have subscribed to marketing
Your marketing preferences
Records of consent, withdrawal of consent, unsubscribe requests or objections

Technical and usage information

IP address
Browser and device type
Operating system
Approximate location derived from technical information
Pages viewed
Links clicked
Referring website
Website interaction and performance information
Cookie and similar technology identifiers

We do not normally receive or store your full debit or credit card details. Payments are processed through Shopify and/or the payment provider selected at checkout. We may receive limited transaction information such as payment status, payment method or other information required to identify and manage a transaction.

3. How We Collect Your Information

We collect personal information:

directly from you when you place an order, create an account, contact us or subscribe to marketing;
automatically when you use our website, through cookies and similar technologies;
from payment providers, delivery companies and other service providers involved in processing your order;
from Shopify and services integrated with our Shopify store; and
where relevant, from marketplaces, cross-border commerce providers or other services through which you interact with Pretty Miniatures.

4. How and Why We Use Personal Information

We use personal information for the following purposes.

Processing and fulfilling orders

We use your information to accept payment, manufacture or prepare your order, arrange delivery, provide tracking, deal with returns and refunds and communicate with you about your purchase.

Our lawful basis is normally performance of a contract with you.

Customer service and enquiries

We use information to answer questions, deal with custom requests, resolve problems and provide after-sales support.

Our lawful basis may be performance of a contract, taking steps at your request before entering a contract, or our legitimate interests in providing customer service and operating our business.

Accounting, tax and legal obligations

We keep appropriate transaction and business records to meet our accounting, tax, company-law and other legal obligations.

Our lawful basis is compliance with a legal obligation.

Fraud prevention, security and protecting our business

We may process information to prevent fraud, protect our website, investigate suspicious transactions, enforce our rights and maintain the security of our systems.

Our lawful basis is generally our legitimate interests in protecting Pretty Miniatures, our customers and our services, and in some circumstances compliance with a legal obligation.

Improving our website and services

We may use website interaction and performance information to understand how our website is used, diagnose problems and improve its design, functionality and customer experience.

Where non-essential cookies or similar technologies are involved, we will obtain consent where required.

Marketing

Where permitted, we may use your contact details to send information about products, new releases, offers or other Pretty Miniatures news.

Depending on the circumstances, our lawful basis may be your consent or our legitimate interests where electronic-marketing rules permit this.

You can unsubscribe from marketing at any time.

5. Marketing Preferences

You can withdraw marketing consent or opt out of marketing communications at any time by:

using the unsubscribe link in a marketing email; or
contacting us directly.

If you unsubscribe, we may retain a limited record on a suppression or “do not contact” list so that we can respect your preference and avoid contacting you again for marketing purposes.

Your right to object to the use of your personal information for direct marketing is absolute.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some are strictly necessary for services you request, such as:

keeping products in your shopping basket;
operating checkout;
maintaining website security;
remembering essential session information.

These technologies may still involve identifiers or other information, but consent is not normally required where they are genuinely necessary to provide the requested service.

We may also use non-essential technologies for purposes such as:

analytics;
measuring website performance;
remembering non-essential preferences;
advertising;
marketing attribution; and
understanding how visitors use the website.

Where consent is required, these technologies should not be used until the appropriate consent has been given.

You can manage available choices through our cookie or privacy controls and, where applicable, through your browser settings.

7. Who We Share Personal Information With

We only share personal information where reasonably necessary for the purposes described in this policy.

Recipients may include:

Shopify

Our website and online store are operated using Shopify. Shopify processes information necessary to provide ecommerce, account, checkout and related services.

Payment providers

Payment information is processed by the payment provider used for your transaction.

Delivery and fulfilment providers

We may provide names, addresses, contact details and relevant customs information to carriers such as Royal Mail and other delivery providers.

International commerce and customs providers

Where applicable, information may be shared with providers involved in cross-border checkout, customs, duties, tax calculation or international delivery, including services integrated with Shopify.

IT, hosting and software providers

We use software and technology providers to operate and support our website and business.

Email and marketing providers

Where you have subscribed or where marketing is otherwise permitted, relevant information may be processed by providers we use to manage email or marketing communications.

Analytics and advertising providers

Where permitted by your privacy choices, we may use analytics and advertising providers to understand website performance or measure marketing.

Professional advisers and authorities

Information may be shared with accountants, insurers, legal advisers, regulators, courts, law-enforcement agencies, HMRC or other authorities where necessary or legally required.

We do not sell your personal information to advertisers.

8. International Transfers

Some of our service providers operate internationally, which means personal information may sometimes be processed outside the United Kingdom.

Where a transfer is subject to UK data-protection restrictions, we take steps to ensure that an appropriate legal mechanism is used.

Depending on the recipient and destination, this may include:

UK adequacy regulations;
the UK International Data Transfer Agreement;
the UK Addendum to approved standard contractual clauses; or
another safeguard permitted under UK data-protection law.

You can contact us if you would like more information about the safeguards relevant to a particular transfer.

9. How Long We Keep Personal Information

We do not keep personal information for longer than reasonably necessary.

Retention periods depend on the type of information and why we hold it.

Order, transaction and accounting records

We normally retain records needed for accounting, tax and business purposes for at least six years from the end of the relevant company financial year, or longer where the law requires it.

Customer-service correspondence

Information relating to an order, dispute, complaint, custom project or contractual matter may normally be retained for up to six years where reasonably necessary for record keeping, legal claims or resolving later enquiries.

Account information

Account information may be retained while your account remains active and afterwards where information needs to be retained for legal, accounting or transaction-record purposes.

Marketing information

Marketing contact information is retained while you remain subscribed or while we otherwise have a lawful basis to use it.

If you unsubscribe or object, we may retain limited information on a suppression list so that we can respect your preference.

Cookies and technical information

Retention varies according to the individual cookie, technology or service. Further information may be available through our cookie/privacy controls.

Information may be kept for longer where necessary in connection with a legal dispute, regulatory requirement, fraud investigation or other legal obligation.

10. Keeping Your Information Secure

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

We also use established third-party providers such as Shopify and payment processors whose systems incorporate their own security measures.

No internet service can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature of the information we process.

11. Your Data Protection Rights

Depending on the circumstances and the lawful basis being used, you may have rights including:

Access – to ask for a copy of personal information we hold about you.
Rectification – to ask us to correct inaccurate or incomplete information.
Erasure – to ask us to delete information in certain circumstances.
Restriction – to ask us to restrict processing in certain circumstances.
Data portability – to receive certain information in a portable format where the right applies.
Objection – to object to certain processing based on legitimate interests.
Objection to direct marketing – to require us to stop using your information for direct marketing.
Withdrawal of consent – where we rely on consent, to withdraw it at any time.

These rights are not absolute in every circumstance. For example, we may need to retain certain order or accounting information to comply with legal obligations even if you request deletion.

You will not normally be charged for exercising your rights.

We may need to verify your identity before acting on a request.

12. Automated Decision-Making and Fraud Screening

Our ecommerce, payment and fraud-prevention providers may use automated tools to identify potentially suspicious activity or produce fraud-risk indicators.

We do not knowingly make decisions that produce legal or similarly significant effects for you solely by automated means without the safeguards required by law.

A fraud indicator may be used to assist us, Shopify or a payment provider when reviewing a transaction.

13. Children

Pretty Miniatures products are designed for collectors aged 14 years and over and are not toys.

Our website is not intended to collect personal information from young children for marketing purposes.

If you believe that a child has provided personal information to us in circumstances where we should not be processing it, please contact us.

14. Links to Other Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of websites operated by other organisations. You should review their privacy information before providing personal information to them.

15. Complaints

If you have a concern about how we use your personal information, please contact us first so that we have an opportunity to investigate and resolve it.

You also have the right to complain to the UK data-protection regulator:

Information Commissioner’s Office (ICO)

The ICO’s current contact information and complaints service are available through ico.org.uk.

16. Changes to this Privacy Policy

We may update this Privacy Policy where our business practices, technology, service providers or legal obligations change.

The latest version will be published on this website and the Last updated date at the top will be amended.

Where a change materially affects how we use personal information, we will take appropriate steps to bring the change to the attention of affected individuals where required.

17. Contact Us

For questions about this Privacy Policy, to exercise a data-protection right or to raise a privacy concern, please contact: