Skip to content
White Bunny Creations

Privacy Policy

White Bunny Creations Logo

  Working The Magic!

 

Privacy Policy

This Privacy Policy is for your information and explains how White Bunny Creations © (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you visit our website ( https://www.whitebunnycreations.co.uk ), purchase from our online shops, or interact with us in any way. We are committed to protecting your privacy and handling your data in an open and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

White Bunny Creations © is a sole trader based in England. Our trading address is White Bunny Creations, Office 150067, PO Box 7169, Poole, Dorset, ENGLAND, UK. BH15 9EL. Our email address for data protection enquiries is contact@whitebunnycreations.co.uk

2. What Personal Data We Collect

We may collect and process the following personal data about you:

2.1 Data You Provide to Us Directly

  • Name and contact information (email address, postal address, phone number)
  • Payment information (processed securely through Stripe or BACS — we do not store your full card details)
  • Order information (products purchased, transaction history)
  • Communications (emails, messages, enquiries you send us)
  • Account registration details (if you create an account on our website or app)
  • Subscription preferences and marketing consent

2.2 Data We Collect Automatically

  • IP address and approximate geographic location
  • Browser type and device information
  • Pages visited and time spent on our website
  • Cookies and similar tracking technologies (see our Cookie Policy)
  • Referring website or search terms used to find us

2.3 Data from Third Parties

  • Purchase data from platforms such as Etsy, Stripe, Amazon KDP, Payhip, and Gumroad
  • Social media profile information if you contact us via social media

3. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We process your data on the following bases:

  • Contract performance: To fulfil orders, deliver digital products, and manage your subscription
  • Legitimate interests: To improve our products and services, prevent fraud, and manage our business
  • Legal obligation: To comply with UK tax law and consumer protection legislation
  • Consent: For email marketing communications (you may withdraw consent at any time)

4. How We Use Your Personal Data

  • To process and fulfil your orders for digital or physical products
  • To send order confirmation and delivery information
  • To manage your subscription (where applicable)
  • To respond to your enquiries and provide customer support
  • To send you marketing communications (only with your consent, and you may opt out at any time)
  • To comply with our legal and regulatory obligations
  • To improve our website, products, and customer experience
  • To detect, investigate, and prevent fraud or illegal activity

5. How We Share Your Personal Data

We do not sell your personal data. We may share your data with the following trusted third parties:

  • Payment processors: Stripe (stripe.com)  — for secure payment processing
  • Email service providers: Mailerlite — for sending order confirmations and newsletters
  • Selling platforms: Etsy, Amazon KDP, Payhip, Gumroad — when you purchase through these platforms, their privacy policies also apply
  • Subscription box fulfilment: Royal Mail and courier services — for delivery of physical goods
  • IT and cloud service providers: Google Workspace/Forms — for data storage and business operations
  • Professional advisors: Accountants, solicitors — under strict confidentiality obligations
  • Legal and regulatory authorities: Where required by law (e.g. HMRC)

6. International Data Transfers

Some of our third-party service providers are based outside the UK. Where we transfer your data outside the UK, we ensure adequate protections are in place in accordance with UK GDPR, including use of Standard Contractual Clauses or providers with UK adequacy decisions.

7. How Long We Keep Your Data

  • Order records: 7 years (required by HMRC for tax purposes)
  • Customer account information: For the duration of your account, plus 2 years after closure
  • Email marketing subscribers: Until you unsubscribe or withdraw consent
  • Website analytics: 26 months
  • General correspondence: 3 years

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Ask us to correct inaccurate or incomplete data
  • Right to erasure (“right to be forgotten”): Ask us to delete your data in certain circumstances
  • Right to restrict processing: Ask us to limit how we use your data
  • Right to data portability: Receive your data in a commonly used format
  • Right to object: Object to processing based on legitimate interests or for direct marketing
  • Rights related to automated decision-making and profiling

To exercise any of these rights, please email  contact@whitebunnycreations.co.uk We will respond within one calendar month. You may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include SSL encryption on our website, secure password management, and restricted access to personal data within our business.

10. Cookies

We use cookies and similar technologies on our website. Please see our separate Cookie Policy for full details.

11. Children’s Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child then please contact us immediately at contact@whitebunnycreations.co.uk

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. However, we will notify you of any significant changes by email (if you are a subscriber) and by posting the updated policy on our website with a revised “last updated” date.

13. Contact Us

For any queries regarding this Privacy Policy or your personal data, please contact us: