Privacy & Cookies Policy
Updated: 16 June 2025
Poppy’s Picnic is the trading name of Four Legs Are Better Than Two Ltd. We are committed to protecting your personal data and respecting your privacy. This policy explains what we collect, how we use it, and how we keep it safe, in line with the UK General Data Protection Regulation (UK GDPR).
Contact Details
Post: Coach House, Sandridge Park, Sandridge Common, MELKSHAM, Wiltshire, SN12 7QU, GB
Email: paws@poppyspicnic.co.uk
What We Collect
We may collect personal data when you use our services, subscribe to our communications, or interact with our website:
- Names and contact details
- Email address
- Delivery address
- Mobile phone number (for SMS opt-in)
- Preferences or interests
- Purchase history
- Website and app usage (cookies, user journeys, IP addresses)
- Marketing preferences and consent records
- Call recordings
- Complaints and correspondence
We do not store credit or debit card details. Payments are processed securely by Stripe and PayPal.
How We Use Your Information
We use personal information to:
- Process and deliver orders
- Contact you if there is an issue
- Respond to queries or complaints
- Send marketing emails or SMS (if opted in)
- Provide service updates
- Comply with legal obligations
Marketing and SMS Consent
You can unsubscribe from emails via the link in any message or by emailing paws@poppyspicnic.co.uk.
You can opt out of SMS by replying STOP or by contacting us via email.
We store SMS opt-in details and engagement history. SMS data is only shared with GDPR-compliant message delivery providers.
Your Rights
- Right to view your data
- Right to correct inaccurate or incomplete data
- Right to request deletion
- Right to restrict or object to processing
- Right to withdraw marketing consent
- Right to data portability
To exercise these rights, contact paws@poppyspicnic.co.uk. You can also complain to the Information Commissioner’s Office via ico.org.uk.
Lawful Bases
We rely on the following lawful bases:
- Consent – where you’ve actively agreed
- Contract – where data is necessary to perform a contract
- Legal obligation – where we must comply with the law
How Long We Keep Your Data
We keep data for up to three years unless you place another order or request earlier deletion. In some cases, we retain minimal records to honour previous deletion requests.
How We Protect Your Data
We use encrypted transfers, secure storage systems, and limit access to authorised staff only.
Third-Party Services
We never sell your data. We share it only when necessary with trusted partners:
- Stripe – payment processing
- PayPal – payment processing
- Shopify – ecommerce and order fulfilment
- DPD – delivery service
- Mailchimp – email marketing
- Intercom – customer support
- Awtomic - Subscription management for products
- Smile.io - Loyalty and rewards programme
- ReferalCandy - Referral marketing management
-
ShipStation - Shipping management and order fulfilment
International Data Transfers
Some data may be processed outside the UK or EEA. We ensure appropriate safeguards (such as adequacy decisions or data protection agreements) are in place.
Cookies
Cookies are small text files stored on your device. They help us understand how our site is used, improve your experience, and deliver relevant marketing.
- Strictly Necessary – essential for functions like checkout
- Performance – help analyse usage
- Functionality – remember your settings
- Targeting – used for marketing
You can accept or decline cookies upon visiting our site, or change settings in your browser. Disabling cookies may affect functionality.
Links to Other Websites
Our site may link to other websites. We are not responsible for their content or privacy practices. Please check their privacy policies.
Complaints
If you’re unhappy with how we’ve used your data, contact us first. If unresolved, complain to the ICO:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint