PRIVACY POLICY

Last Updated: 2 October 2026

This Privacy Policy describes how Jamie Robert Smith, trading as Cute Shiba ("we", "us", "our"), collects, uses and protects your personal information when you use cuteshiba.com (the "Service"). We are the data controller for the purposes of UK GDPR.

Not Directed at Children: Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Contact Information: If you have questions about this Privacy Policy, contact us at jamie@cuteshiba.com.

1. INFORMATION WE COLLECT

We collect the following types of personal information:

  • Contact Information: Name, email address, phone number (optional), billing and delivery address
  • Order Information: The products you buy, order value, payment method and payment status. Card details are entered directly with Stripe or PayPal and never reach us.
  • Technical Information: IP address and browser type, used to keep checkout secure and to look up your country for shipping.
  • Marketing Information: Only with your consent, which website or channel brought you to the shop.

How We Collect Information: Directly from you when you place an order or email us, and automatically through cookies as set out in our Cookie Policy.

2. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

  • Operate and maintain our Service
  • Process transactions and billing
  • Send important service updates and notifications
  • Comply with legal obligations and ensure safety and security

Lawful Bases for Processing: We rely on the following lawful bases under UK GDPR:

  • Contract: to take payment, fulfil your order and handle returns.
  • Legal obligation: to keep records required by HMRC and consumer law.
  • Legitimate interests: to prevent fraud and keep the shop secure and working. We have considered your rights and believe these are not overridden.
  • Consent: for marketing cookies. You can withdraw this at any time using the preferences button on our site.

3. HOW WE SHARE YOUR INFORMATION

We share your information only with trusted service providers who help us operate our Service under strict confidentiality agreements.

Service Providers: We share personal information with the following providers, who act on our instructions:

  • Stripe and PayPal, to process payments and prevent fraud. Card details are entered directly with them and are never stored on our website.
  • Amazon, if you choose to pay with Amazon Pay.
  • Google (reCAPTCHA), to check that checkout attempts are genuine rather than automated.
  • Google (Gmail), to send order confirmations and reply to your emails.
  • Hostinger, who host our website and store order data.
  • Consently, who manage cookie consent and store records of consent choices.
  • Our delivery partners, currently Royal Mail and Evri, who receive your name and delivery address in order to post your order.

Analytics and Advertising: We do not use analytics or advertising services. We do not profile you for advertising, and we do not share your information with advertising networks.

We Do Not Sell Your Data: We do not sell, rent, or otherwise monetize your personal information.

Legal Requirements: We may disclose your information when required by law, court order, or to protect our rights and safety.

4. COOKIES AND TRACKING

Cookies and Tracking: We use strictly necessary cookies to run the basket, checkout and payments, and functional cookies to remember your display preferences. With your consent we also use a marketing cookie that records which channel brought you to the shop. We do not use analytics or advertising cookies. You can change your choices at any time using the cookie preferences button at the bottom left of every page. Full details are in our Cookie Policy:

https://cuteshiba.com/cookie-policy/

Do Not Track: We do not respond to Do Not Track signals. Apart from strictly necessary cookies, nothing is set without your consent.

5. YOUR PRIVACY RIGHTS

Your Rights: You have the right to access your information, correct it, ask us to delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time.


How to Exercise Your Rights: To exercise your privacy rights, contact us at jamie@cuteshiba.com. We will respond to your request within 30 days.


Complaints: If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

6. DATA RETENTION AND SECURITY

Data Retention:

  • Order records including name, address and order details: 6 years after the end of the tax year they relate to, as required by HMRC.
  • Consent records: kept by our consent provider, Consently, for as long as we need to show that you gave consent.
  • Email enquiries: up to 2 years after the matter is resolved.
  • Fraud prevention logs: up to 12 months.

We do not offer customer accounts, so no account data is held.

Security Measures: Our site uses HTTPS encryption on every page. Card details are never stored on our systems and are handled entirely by Stripe and PayPal. Access to order data is restricted to the business owner. We use Google reCAPTCHA to block automated attacks on our checkout. No system is completely secure, but we take these steps to protect your information.

Children's Data Protection: If we discover we have collected personal information from a child under 13 without parental consent, we will delete that information promptly.

7. INTERNATIONAL DATA TRANSFERS

International Transfers: Some of our providers process data outside the UK. Stripe, PayPal and Google transfer data under the UK International Data Transfer Addendum or Standard Contractual Clauses. Consently is based in Bangladesh, which is not covered by a UK adequacy decision, and transfers are protected by contractual safeguards. You can ask us for more information about these safeguards. Our host, Hostinger, stores website backups in Germany. Transfers to the EEA are covered by UK adequacy regulations. Backups may keep deleted data for a short period before they are overwritten.

8. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will post the updated policy on our website and update the "Last Updated" date.

9. CONTACT INFORMATION

Email: jamie@cuteshiba.com Address: 72 Oxford Road, Swindon, SN3 4HD

Effective Date: 2 October 2026