**CHECK OUT OUR NEW TREATS** FREE GIFTS over £50 FREE DELIVERY over £100

Privacy policy

Privacy & Cookies Policy

Last updated: 14 October 2025

Poppy’s Picnic is the trading name of Four Legs Are Better Than Two Ltd. We operate this store and website, including all related information, content, features, tools, products and services, to provide you with a curated shopping experience (the “Services”). The Services are powered by Shopify, which enables us to provide and improve them for you. This Privacy & Cookies Policy explains how we collect, use, disclose, and protect your personal information, and how cookies are used when you interact with our website or other Services.

Please read this policy carefully. By using and accessing any of our Services, you acknowledge that you have read and understood how your information is collected, used, and disclosed as described below. If there is any conflict between this Privacy & Cookies Policy and our Terms of Service, this policy controls with respect to personal information.

Contact Details

Data Controller: Four Legs Are Better Than Two Ltd

Post: Coach House, Sandridge Park, Sandridge Common, Melksham, Wiltshire, SN12 7QU, GB

Email: paws@poppyspicnic.co.uk

Personal Information We Collect

When we use the term “personal information”, we refer to information that identifies or can reasonably be linked to you. We may collect or process the following categories of personal information depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details: Name, postal address, billing address, shipping address, email address, phone number.

  • Financial information: Payment card details and transaction data (processed securely by Stripe and PayPal). We do not store credit or debit card information.

  • Account information: Username, password, security questions, preferences and settings.

  • Transaction information: Items viewed, added to cart or wishlist, purchased, returned, exchanged or cancelled, and your past transactions.

  • Marketing and preferences: Opt-in records for email and SMS marketing, interests, and engagement history.

  • Communications: Information you include in customer support enquiries or other correspondence.

  • Device and usage information: Browser, IP address, network connection, device identifiers, cookies, user journeys, and other usage analytics.

  • Call recordings: For customer service quality and compliance.

Sources of Personal Information

We may collect personal information:

  • Directly from you when you create an account, place an order, subscribe to communications, interact with the Services, or contact us.

  • Automatically through your device when you use the Services, via cookies and similar technologies.

  • From service providers that enable certain functions (e.g. payments, analytics, shipping).

  • From business partners or third parties where permitted by law.

How We Use Your Information

We use personal information to:

  • Provide, tailor, and improve the Services – to process orders, arrange shipping, remember preferences, manage your account, enable returns, post reviews, and improve your shopping experience.

  • Marketing and advertising – to send you promotional emails or SMS (if you have opted in), personalise content, and display relevant advertising based on your activity.

  • Security and fraud prevention – to authenticate your account, detect and investigate illegal or fraudulent activity, and maintain the security of our systems.

  • Customer communication – to respond to your enquiries, handle complaints, provide updates, and maintain our relationship with you.

  • Legal compliance – to meet our legal obligations, respond to valid legal processes, and enforce our terms and policies.

Lawful Bases

We rely on the following lawful bases to process your personal information:

  • Consent – where you have given us permission.

  • Contract – where processing is necessary to fulfil a contract with you.

  • Legal obligation – where processing is required to comply with the law.

Marketing and SMS Consent

You can unsubscribe from email marketing by clicking the unsubscribe link in any email or by emailing paws@poppyspicnic.co.uk.

For SMS, you can reply STOP or email us to opt out. We store SMS opt-in and engagement details. SMS data is shared only with GDPR-compliant providers.

Cookies

Cookies are small text files stored on your device. They help us understand how our site is used, improve your experience, and deliver relevant marketing.

  • Strictly necessary – essential for site functions like checkout.

  • Performance – help us analyse site usage.

  • Functionality – remember preferences.

  • Targeting – deliver relevant advertising.

You can accept or decline cookies when visiting our site or adjust your browser settings. Disabling cookies may affect site functionality.

How We Share Personal Information

We may share your personal information with:

  • Shopify, vendors, and third parties who perform services on our behalf (e.g. payment processing, fulfilment, IT, analytics).

  • Trusted partners, for marketing and advertising purposes, in line with their own privacy notices.

  • Third parties you authorise, such as social media widgets or login integrations.

  • Our affiliates, within our corporate group.

  • In connection with business transactions or to comply with legal obligations, enforce terms, or protect rights.

Third-Party Services We Use, Not Limited to:

  • Stripe – payment processing

  • PayPal – payment processing

  • Shopify – ecommerce platform and hosting

  • DPD – delivery service

  • Mailchimp – email marketing

  • Bitespeed - email marketing

  • Intercom – customer support

  • Awtomic – subscription management

  • Smile.io – loyalty and rewards

  • ReferralCandy – referral programme

  • ShipStation – shipping management

We never sell your personal data.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information to provide and improve the Services. Information you submit may be transmitted to Shopify or other countries where they operate. Shopify may use data from your interactions across multiple merchants to provide enhanced features.

Shopify is responsible for processing personal information in these circumstances. To learn more or exercise your rights, visit the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

International Data Transfers

Some personal information may be transferred outside the UK or EEA. Where this happens, we use recognised transfer mechanisms such as the EU Standard Contractual Clauses or equivalent UK contracts, or rely on adequacy decisions to ensure your data remains protected.

Your Rights

Depending on where you live, you may have rights to:

  • Access the personal information we hold about you

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict or object to processing in certain circumstances

  • Withdraw marketing consent

  • Request data portability

  • Object to or restrict processing (UK/EU)

  • Withdraw consent where relied upon

To exercise your rights, contact paws@poppyspicnic.co.uk. We may verify your identity before processing your request. You can also complain to the Information Commissioner’s Office (ICO) via ico.org.uk.

Children’s Data

The Services are not intended for children, and we do not knowingly collect data from anyone under the age of majority. If you are a parent or guardian and believe your child has provided personal information, contact us to request deletion.

Security and Retention

We use encrypted transfers, secure storage, and limit access to authorised staff. However, no system is completely secure. Do not send sensitive information through insecure channels.

We retain personal data for as long as needed to provide Services, comply with legal obligations, resolve disputes, or enforce agreements. Typically, this is up to three years unless you place another order or request earlier deletion.

Third-Party Websites

Our site may link to other websites not operated by us. We are not responsible for their content or privacy practices. Check their privacy policies before sharing data.

Complaints

If you have concerns about how we handle your personal data, contact us first. If unresolved, you may lodge a complaint with the ICO:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Changes to This Policy

We may update this Privacy & Cookies Policy from time to time to reflect changes in our practices or for legal reasons. We will post the revised version on this website and update the “Last updated” date.