Privacy Policy · Wildling

Last updated below. We follow the UK GDPR (Data Protection Act 2018) and the Privacy and Electronic Communications Regulations 2003.

1. Who we are

Wildling is the data controller for personal data we collect. Registered office: Wildling Studios, Unit 4, Virtual UK Address, London EC1A 1AA. Contact: hello@wildling.shop.

2. What we collect

• Order data — name, delivery and billing address, email, phone, items purchased, payment confirmation token (we never see your card number; Stripe processes it).
• Account data — email and password (hashed) if you create an account.
• Marketing data — email, name and preferences if you opt in to our newsletter.
• Usage data — pages viewed, items added to cart, IP address, browser, device. Collected via essential cookies and (with your consent) analytics cookies.
• Communications — anything you tell us in support emails or chat.

3. Why we use it (lawful bases)

• Contract — to take payment, fulfil orders, provide support, handle returns.
• Legal obligation — to keep accounting records (HMRC requires 6 years), to handle tax and consumer rights claims.
• Legitimate interests — to detect fraud, secure the website, and analyse aggregate usage to improve the shop.
• Consent — to send you marketing emails (you can withdraw at any time) and to set non-essential cookies.

4. Who we share it with

• Stripe (payment processor) — receives card data and order amount directly from your browser.
• Suppliers and shippers — receive your delivery address and order details so they can pack and ship.
• Email and SMS providers — receive your email and phone to send order confirmations and (with consent) marketing.
• Analytics — aggregated, anonymised page-view data only when you accept analytics cookies.
• Authorities — only when legally required (HMRC, courts, police with a warrant).

5. International transfers

Some processors (Stripe) operate from the United States under UK-approved standard contractual clauses or the UK Extension to the EU-US Data Privacy Framework. We do not sell your data to anyone.

6. How long we keep it

Order records: 6 years (HMRC). Marketing list: until you unsubscribe. Account data: until you ask us to delete it. Cookies: see our Cookie Policy.

7. Your rights

• Access — request a copy of your data.
• Rectification — correct inaccurate data.
• Erasure — ask us to delete your data (some records we must keep for tax/legal reasons).
• Restriction — limit how we use your data while you challenge it.
• Objection — object to direct marketing or to processing based on legitimate interests.
• Portability — receive your data in a portable format.
• Withdraw consent — at any time, for marketing or non-essential cookies.
• Complain to the ICO — ico.org.uk/make-a-complaint.

To exercise any right, email hello@wildling.shop. We respond within one calendar month.

8. Cookies and tracking

Essential cookies keep the cart, the checkout and the consent choice working. Analytics and marketing cookies are off by default and only fire after you opt in. See Cookie Policy for the full table.

9. Children

This site is not intended for children under 16. We do not knowingly collect data from minors.

10. Changes

If we change this policy materially we will email registered customers and post the change at the top of this page.