Last updated: 25/11/2025
This Privacy Policy explains how Serendipity collects, uses and protects your personal data when you visit our website, purchase from us online or in the Shop, or otherwise interact with us. We act as a data controller in respect of personal data that we process about you in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
We may collect and process the following categories of personal data: identity and contact data such as your name, postal address, email address and telephone number; order and transaction data including details of products purchased, purchase dates and payment status; delivery and billing addresses; account data if you create an account on the website; marketing preferences such as whether you wish to receive our newsletters; and technical and usage data such as IP address, browser type and information about how you use the website, collected through cookies and similar technologies.
We process your personal data on the following lawful bases: contract, to process and fulfil your orders and manage our relationship with you; legal obligation, to comply with accounting, tax and other legal requirements; legitimate interests, to operate and improve our business and services, prevent fraud and protect our systems; and consent, to send you marketing communications where you have opted in and for certain non essential cookies.
We may use your personal data to process and deliver your orders, including managing payments, fees and charges; communicate with you about your orders, queries or complaints; manage your customer account if you create one; send you marketing emails or newsletters where you have given consent, which you can withdraw at any time; operate, secure and improve the website and our services; and maintain appropriate business and financial records.
We may share your personal data with carefully selected third parties who provide services to us, including payment service providers, delivery and courier companies, IT, hosting and website support providers, and professional advisers such as accountants or legal advisers where necessary. We require all third parties to respect the security of your personal data and to treat it in accordance with applicable data protection laws. We do not sell your personal data.
Some of our service providers may be located outside the United Kingdom. Where this is the case, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or an adequacy decision, so that your personal data is protected to a standard essentially equivalent to that in the UK.
We retain your personal data only for as long as reasonably necessary for the purposes set out in this Privacy Policy and to satisfy any legal, accounting or reporting requirements.
You have the following rights in relation to your personal data, subject to certain conditions and exemptions: the right to be informed about how we use your personal data; the right of access to the personal data we hold about you; the right to request correction of inaccurate or incomplete personal data; the right to request erasure of your personal data in certain circumstances; the right to request restriction of processing of your personal data; the right to data portability in certain circumstances; the right to object to processing based on legitimate interests or for direct marketing; and the right not to be subject to decisions based solely on automated processing, including profiling, where these have legal or similarly significant effects on you. To exercise any of these rights, please contact us using the contact details published on the website.
We will only send you electronic marketing communications where we have your consent or are otherwise permitted by law. You can opt out at any time by using the unsubscribe link in our emails or by contacting us.
Our use of cookies and similar technologies is explained in our Cookie Policy. You can manage your cookie preferences using the tools provided on the website and through your browser settings.
We use appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration or destruction.
If you have concerns about how we handle your personal data, please contact us in the first instance so we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner’s Office, the UK supervisory authority for data protection matters, details of which are available at https://ico.org.uk.
We may update this Privacy Policy from time to time. Any changes will be posted on the website with an updated “Last updated” date.