1. Information We Collect

Depending on how you use our website, we may collect the following types of information.

Account & Contact Information

• Name
• Email address
• Phone number
• Billing address
• Shipping address
• Account login and profile information, where applicable

Order Information

When you make a purchase, we may keep details relating to the products ordered, order value, discounts, shipping method, delivery information, order status, returns, refunds and customer support relating to the transaction.

Payment Information

Payments are processed using authorised third-party payment gateways. Poppy Cheeks does not intentionally store your full debit card, credit card or banking credentials on our website.

Payment providers may send us information such as payment status, transaction reference, payment method type or other details necessary to confirm and manage your order.

Website & Device Information

When you browse our website, certain technical information may be collected automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Approximate location based on IP address
• Pages and products viewed
• Referring website or source
• Website interaction and session information

This information helps us understand how our website is being used and improve performance, usability and the shopping experience.

2. How We Collect Your Information

We may receive personal information when you:

• Create or update an account.
• Place or manage an order.
• Contact customer support.
• Submit a contact or enquiry form.
• Subscribe to newsletters or promotional communications.
• Leave feedback or a product review.
• Participate in an offer, promotion or survey.
• Browse and interact with our website.

We may also receive limited information from service providers involved in payments, shipping, website analytics, customer support, fraud prevention and ecommerce operations.

3. How We Use Your Information

We may use information collected through our website to:

• Process, confirm and fulfil your orders.
• Communicate order confirmations, shipping updates, delivery information and service messages.
• Respond to enquiries, feedback, complaints and support requests.
• Manage customer accounts and order history.
• Process eligible cancellations, returns, replacements and refunds.
• Detect and help prevent fraud, abuse or unauthorised transactions.
• Understand which products and website areas are useful to visitors.
• Improve our website, products, content, navigation and overall shopping experience.
• Recommend products that may be relevant based on products you have viewed or purchased, where appropriate.
• Send offers, product launches, newsletters or promotional messages where you have chosen to receive them or where otherwise permitted.
• Comply with applicable accounting, tax, legal and regulatory requirements.

4. Cookies & Similar Technologies

Our website may use cookies and similar technologies to keep the website functioning correctly and provide a smoother shopping experience.

Cookies may be used to:

• Remember products added to your shopping cart.
• Keep customers signed in where applicable.
• Remember website preferences.
• Understand website traffic and visitor behaviour.
• Measure website and marketing performance.
• Help detect security issues and fraudulent activity.

You may control or disable cookies through your browser settings. However, disabling necessary cookies may prevent certain WooCommerce or website features from working correctly, including shopping cart, checkout or account functionality.

5. Sharing Your Information

We do not sell or rent your personal information to third parties for their independent marketing purposes.

We may share only the information reasonably necessary with trusted service providers that help us operate our business, including:

• Payment gateways and financial service providers for processing transactions.
• Courier and delivery companies for delivering orders.
• Website hosting and technical service providers.
• Ecommerce, WordPress and WooCommerce service providers.
• Email, SMS or communication providers used for transactional or authorised marketing communications.
• Analytics and website-performance providers.
• Professional advisers or service providers where reasonably required for accounting, security or legal compliance.

Service providers are expected to use the information provided to them only for the purpose of performing their respective services, subject to their own legal responsibilities and contractual obligations.

6. Legal & Regulatory Disclosure

We may disclose information where reasonably necessary to comply with applicable law, a court order, regulatory request or other lawful government requirement.

Information may also be used or disclosed where reasonably necessary to investigate suspected fraud, misuse, security incidents, infringement of rights or violations of our website terms.

7. Children's Privacy

Poppy Cheeks creates cosmetic products for children, but our ecommerce website and purchasing services are intended to be used by parents, guardians and other adults.

We do not knowingly ask children to independently create accounts, provide payment information or submit personal information through our website.

Where information relating to a child is required for a legitimate service — for example, information voluntarily provided by a parent or guardian in connection with a personalised order or customer enquiry — we expect that information to be provided and authorised by the child's parent or legal guardian.

8. Marketing Communications

We may send newsletters, product updates, launches, offers or promotional communications where you have subscribed, consented or where such communication is otherwise permitted.

You can opt out of promotional email communications at any time using the unsubscribe option included in the message or by contacting us.

Opting out of promotional communications does not prevent us from sending important transactional messages relating to your orders, account, payments, delivery, returns or customer support.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining order records, responding to customer requests, preventing fraud and meeting applicable accounting, tax, legal or regulatory requirements.

Different categories of information may therefore be retained for different periods.

When information is no longer reasonably required, we may delete, anonymise or securely dispose of it, subject to applicable requirements.

10. Keeping Your Information Secure

We take reasonable technical and organisational measures intended to protect personal information against unauthorised access, misuse, alteration, loss or disclosure.

These measures may include secured website connections, controlled access to administrative systems, hosting security, software updates and the use of reputable third-party service providers.

However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure. Customers should also protect their account credentials and avoid sharing passwords or one-time authentication codes with others.

11. Your Privacy Choices & Requests

Subject to applicable law and any information that we are required to retain, you may contact us to request assistance with your personal information.

Depending on the circumstances, you may request to:

• Know what personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Request deletion of eligible personal information.
• Update your account or contact information.
• Withdraw from promotional marketing communications.
• Raise a concern regarding how your personal information has been handled.

We may need to verify your identity before processing certain privacy-related requests to help protect your information from unauthorised access.

12. Third-Party Websites & Services

Our website may contain links to third-party websites, platforms or services.

Once you leave the Poppy Cheeks website or interact directly with an independent third-party service, its own privacy policy and terms may apply.

We encourage you to review the privacy practices of third-party websites or services before providing them with personal information.

13. Ecommerce & WooCommerce

Our website may use WordPress, WooCommerce and related ecommerce technologies to provide shopping cart, checkout, customer account, product review and order-management functionality.

Information you provide during checkout may be stored in our ecommerce system as necessary to process and manage your order, provide customer service and maintain required transaction records.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, products, services, technology, business practices or applicable requirements.

When changes are made, the updated version will be published on this page and the "Last updated" date may be revised.

We encourage customers to review this page occasionally, particularly when making a new purchase or using a new website feature.