Effective Date : May 23, 2026

Last Updated: May 23, 2026

1. Introduction

Welcome to the privacy policy for Giggle2Grow Ltd (“we”, “us”, or “our”). We respect your privacy and are committed to protecting your personal data.

This privacy policy will inform you as to how we look after your personal data when you visit our website, purchase products from our online store, and tell you about your privacy rights and how the law protects you.

We process all personal data in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Important Information and Who We Are

Data Controller

Giggle2Grow Ltd. is the data controller and responsible for your personal data.

We are a registered company in the UK and are commissioned/registered with the UK data protection regulator, the Information Commissioner’s Office (ICO).

Contact Details

If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact us directly using the details below:

• Full name of legal entity: Giggle2Grow Ltd.

• Email address: support@giggle2grow.com

• Postal address: 47 Cae Ffynnon Cowbridge CF71 7FJ.

We sincerely take all due precautions to avoid concerns and complaints that may arise due to breach of the data protection laws.  However, if concerns still arise, we would like to be given opportunity to correct any errors and would appreciate the chance to deal with your concerns.  You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, be grateful if you approach us before the ICO, so please contact us at support@giggle2grow.com.  Hoping the need never arises for you to do so!

3. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. As an e-commerce business, we collect, use, store, and transfer different kinds of personal data to process your orders and run our store:

• Identity Data: Includes first name, last name, username, or similar identifier.

• Contact Data: Includes billing address, delivery address, email address, and telephone numbers.

• Financial Data: Includes payment card details (processed securely by our payment gateway; we do not store raw card numbers).

• Transaction Data: Includes details about payments to and from you and other details of products you have purchased from us.

   

• Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, and operating system and platform on the devices you use to access this website.

   

• Marketing and Communications Data: Includes your preferences in receiving marketing or newsletter updates from us.

4. How We Use Your Personal Data (Lawful Basis)

We will only use your personal data when the UK law allows us to. Most commonly, we use it for:

Purpose / Activity	Type of Data	Lawful Basis for Processing
To register you as a new customer	Identity & Contact	Performance of a contract with you
To process & deliver your orders (including managing payments, fees, and collection)	Identity, Contact, Financial, Transaction & Marketing	Performance of a contract with you; Legitimate interests (to recover debts owed to us)
To manage our relationship with you (notifying you about changes to our terms or privacy policy)	Identity, Contact, Profile & Marketing	Performance of a contract with you; Necessary to comply with a legal obligation
To administer and protect our website (troubleshooting, data analysis, system testing)	Identity, Contact & Technical	Necessary for our legitimate interests (running our business, IT security, preventing fraud)

5. Third-Party Sharing (Fulfillment & Payments)

To run an online store, we have to share your data with trusted third parties who help us fulfill your orders. These include:

• Payment Gateways: (e.g., Stripe, PayPal, Shopify Payments) to process payments securely.

• Delivery & Courier Services: (e.g., Royal Mail, DPD, Evri) so they can deliver your items and send you tracking notifications.

• Website Hosting/Platform Providers: (e.g., Shopify, WooCommerce) who host our digital storefront.

• 3PL (Third party logistics providers)/Warehousing services/Pick and pack services : to fulfil your orders from our suppliers to your door front.

We require all third parties to respect the security of your personal data and to treat it in accordance with UK law. We do not allow our third-party service providers to use your personal data for their own purposes.

 

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

7. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements (for example, UK tax law requires us to keep basic information about our customers and transactions for six years after they buy from us).

8. Your Legal Rights

Under UK data protection laws, you have rights including:

• Right of access: Request a copy of the data we hold on you.

• Right to rectification: Ask us to fix wrong information.

• Right to erasure: Ask us to delete your data (“right to be forgotten”) under certain conditions.

• Right to object/restrict: Object to marketing or restrict how we use your data.

• Right to withdraw consent: If you signed up for our newsletter, you can unsubscribe at any single time using the link in the email or by contacting support.

If you wish to exercise any of these rights, please email us directly at support@giggle2grow.com. We do not charge a fee for standard requests and aim to respond within one month as required by the UK GDPR.