Store Information

Privacy Policy

This Privacy Policy explains how Whimsical Walk collects, uses, shares and protects personal information when you visit our website at whimsicalwalk.com, place an order, contact us, or sign up for our newsletter. It applies to information we process about you in the United Kingdom and internationally.

We are Whimsical Walk, a small handmade footwear workshop selling directly to customers through this website. If you have any question about this policy or about your personal information, email us at hello@whimsicalwalk.com.

Last updated: 10 September 2026.

1. Information we collect

We collect personal information in three ways.

Information you give us directly

Your name, delivery address, billing address, email address and phone number when you place an order.
Your foot measurements, size preference, width and any customisation notes when you order a made to order pair.
Your email address when you subscribe to our newsletter.
The content of any message you send us through our contact form, by email, or in a comment on our site.
Photographs and reviews you choose to send us.

Information we collect automatically when you use the site

Your IP address, device type, browser type and language settings.
The pages you view on our site, the time and date of your visit, and how you navigate between pages.
The referring website or search term that brought you to us.
Cookies and similar technologies, described in section 6.

Information we receive from third parties

Payment confirmation and fraud check details from our payment processors (Shopify Payments, PayPal and any other processor you choose at checkout). We do not see or store your full card number or CVV; those are handled by the payment processor directly.
Delivery status updates from our shipping carriers.
Aggregated analytics data from services such as Google Analytics.

2. How we use your information

We use your information only for the reasons set out below.

To take and fulfil your order, including cutting a made to order pair to your measurements, arranging delivery, and handling returns or exchanges.
To communicate with you about your order, including confirmations, dispatch notices, and any query about your specifications.
To answer questions you send us and respond to enquiries about our products.
To send you marketing emails about new products or offers, but only if you have subscribed. You can unsubscribe at any time.
To operate and improve our website, understand how visitors use it, and fix technical problems.
To prevent fraud, protect our systems, and comply with our legal obligations.
To keep records for tax, accounting and warranty purposes.

3. Legal bases for processing your data

Under the UK GDPR we must have a legal basis to process your personal information. We rely on the following.

Contract: to process and deliver your order, this is necessary to perform the contract between us.
Legitimate interests: to run and improve our business, prevent fraud, and communicate with existing customers about products similar to ones they have purchased.
Consent: for marketing emails to new subscribers, and for non essential cookies. You can withdraw consent at any time.
Legal obligation: to keep tax and accounting records for the period required by UK law, currently six years.

4. Who we share your information with

We do not sell your personal information. We share it only with the parties needed to run our business.

Shopify Inc, our ecommerce platform, which stores your order and account information on secure servers.
Payment processors including Shopify Payments and PayPal, to take payment and check for fraud.
Shipping carriers including Royal Mail, DHL, FedEx and any other courier we use for your order, so they can deliver your parcel.
Email service provider which handles our newsletter and order emails.
Analytics providers such as Google Analytics, which help us understand how our site is used.
Professional advisers including accountants and lawyers, where required.
Authorities if we are required to disclose information by law, court order, or to protect our rights.

We do not share your information with third parties for their own marketing purposes.

5. International transfers

Some of the service providers we use are based outside the United Kingdom, including in the European Economic Area and in the United States. Where we transfer your personal information outside the UK, we rely on the following safeguards.

Transfers to countries that the UK Government has decided offer an adequate level of data protection.
Standard Contractual Clauses approved by the UK Information Commissioner's Office.
The UK Extension to the EU US Data Privacy Framework where applicable.

You can ask us for a copy of the safeguards in place for a particular transfer by contacting us at hello@whimsicalwalk.com.

6. Cookies and similar technologies

Our website uses cookies and similar technologies to make the site work and to help us understand how it is used.

Essential cookies are needed for the site to function, for example to keep track of what is in your basket, keep you signed in, and process your order securely. These cannot be switched off.
Analytics cookies help us count visits and understand which pages are useful. These are set only if you consent.
Marketing cookies allow us to show you products you have viewed on other sites we advertise on. These are set only if you consent.

You can control cookies through your browser settings and through the cookie banner shown when you first visit our site. Blocking essential cookies may prevent parts of the site from working.

7. Data retention

We keep your personal information only for as long as we need it.

Order and customer account records are kept for six years from the date of your last purchase, to comply with UK tax law and to handle warranty enquiries.
Newsletter subscription records are kept until you unsubscribe, and for a short period afterwards to record the withdrawal of consent.
Enquiry emails are kept for two years unless they relate to an order or a legal matter.
Anonymous analytics data may be kept indefinitely.

Where we no longer need to keep personal information, we delete it or fully anonymise it.

8. Your rights

Under the UK GDPR you have the following rights over your personal information.

Right of access: to ask for a copy of the personal information we hold about you.
Right to rectification: to ask us to correct information that is wrong or incomplete.
Right to erasure: to ask us to delete information we hold about you, subject to legal exceptions.
Right to restriction: to ask us to pause processing your information in certain circumstances.
Right to data portability: to ask us to send your information to you, or to another provider, in a machine readable format.
Right to object: to object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent: where we process your information based on consent, you can withdraw that consent at any time.
Rights relating to automated decision making: we do not use automated decision making that produces legal or similarly significant effects on you.

9. How to exercise your rights

To exercise any of the rights above, email hello@whimsicalwalk.com. Please include the email address or order number you used with us so we can identify your record.

We will respond within one month. If your request is complex or you make several requests, we may extend that period by up to two further months and will tell you if we do. There is no fee for a routine request; we may charge a reasonable fee only where a request is clearly unfounded or excessive.

10. Marketing communications

We only send marketing emails to people who have subscribed. Every marketing email includes an unsubscribe link. Clicking it removes you from our marketing list at once.

You will still receive transactional emails about orders you have placed, because those are needed to fulfil the contract between us.

11. Security

We use industry standard technical and organisational measures to protect your personal information. Our website runs over HTTPS. Payments are handled by PCI DSS certified processors. We limit access to personal information to the people in our team who need it, and we require our service providers to keep it secure.

No system is completely secure, but we take reasonable steps to protect against unauthorised access, loss, alteration and disclosure.

12. Children

Our products are for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time to reflect changes in the law or in how we handle your information. The Last updated date at the top of this page tells you when it last changed. Where the changes are significant, we will tell subscribers by email.

14. Complaints

If you are unhappy with how we have handled your personal information, please tell us first so we can try to fix it. Email hello@whimsicalwalk.com.

You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection.

Website: ico.org.uk
Helpline: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

15. Contact us

For any question about this policy or about how we handle your personal information, contact us at hello@whimsicalwalk.com.

Whimsical Walk
Email: hello@whimsicalwalk.com
Website: whimsicalwalk.com