Privacy policy

Privacy Policy

The Wild Goddess
Last updated: September 30, 2025

The Wild Goddess operates this store and website, including all related information, content, features, tools, products, and services (the “Services”). The Wild Goddess is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services or otherwise communicate with us. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

By using and accessing the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

When we use the term "personal information," we mean information that identifies, relates to, or could reasonably be linked to you. This may include:

  • Contact details: name, billing/shipping address, phone number, email address.

  • Financial information: payment details (processed securely via Shopify/Stripe/PayPal – we do not store card details).

  • Account information: username, password, preferences, settings.

  • Transaction details: items viewed, purchased, returned, exchanged.

  • Communications: emails, enquiries, customer service interactions.

  • Device & usage information: IP address, browser, cookies, browsing behaviour.

2. Sources of Personal Information

We may collect personal information:

  • Directly from you (when placing an order, creating an account, contacting us).

  • Automatically via the Services (cookies, analytics, browsing activity).

  • From third-party providers (payment processors, couriers, Shopify).

3. How We Use Your Personal Information

We use your personal information for purposes including:

  • Fulfilling our contract with you: processing payments, delivering orders, handling returns.

  • Customer support & communication: responding to enquiries, providing updates.

  • Marketing (with consent): sending promotional emails or showing targeted ads. You can withdraw consent at any time.

  • Security & fraud prevention: verifying transactions, protecting our Services.

  • Legal compliance: maintaining records for tax, regulatory, or legal obligations.

Our lawful bases for processing your information include:

  • Contractual necessity (fulfilling your order).

  • Consent (marketing emails).

  • Legitimate interests (fraud prevention, website improvement).

  • Legal obligation (tax and accounting records).

4. How We Disclose Personal Information

We may share your personal information with:

  • Shopify (as our e-commerce platform host).

  • Service providers (payment processors, couriers, IT support, cloud storage).

  • Marketing partners (only where consented to).

  • Authorities (where required by law, e.g. tax or law enforcement).

We never sell your personal information.

5. Relationship with Shopify

The Services are hosted by Shopify, which processes some of your personal information in order to provide and improve the Services. Information you submit will be shared with Shopify and its third-party service providers, some of whom may be located outside the UK.

Shopify is independently responsible for some processing activities, including targeted advertising and platform analytics. To learn more about how Shopify uses your personal information, please see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

6. International Data Transfers

Where your personal information is transferred outside the UK (for example, to Shopify in Canada or the US), we ensure appropriate safeguards are in place under UK GDPR. This may include reliance on adequacy regulations or standard contractual clauses approved by the UK Government.

7. Security & Data Retention

We take reasonable technical and organisational measures to protect your personal information. However, no system is 100% secure.

We retain personal data only as long as necessary:

  • Orders and payment records: 6 years (for tax/legal purposes).

  • Marketing data: until you withdraw consent.

  • Customer service communications: as long as reasonably required.

8. Your Rights (UK GDPR)

You have the following rights under UK GDPR:

  • Right to access: request a copy of your personal data.

  • Right to rectification: correct inaccurate information.

  • Right to erasure: ask us to delete your data in certain circumstances.

  • Right to restrict processing: ask us to pause use of your data.

  • Right to data portability: request a transfer of your data to another provider.

  • Right to object: object to processing (e.g. for marketing).

  • Right to withdraw consent: withdraw consent for marketing at any time.

To exercise your rights, contact us at hello@thewildgoddess.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk.

9. Cookies

Our website uses cookies to function properly, analyse usage, and personalise your experience. You can control or disable cookies in your browser settings.

10. Children’s Data

The Services are not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with data, please contact us and we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will always be posted here with a new “last updated” date.

12. Contact

If you have any questions about this Privacy Policy or how we use your personal information:

📧 hello@thewildgoddess.co.uk
📍 38 Cowley Drive, Dudley, ENG, DY1 2SS, UK

For the purposes of UK GDPR, The Wild Goddess (Kayleigh Marie Priest) is the data controller.