PRIVACY POLICY

Last updated: 19 March 2026

We take your privacy seriously. This policy explains what personal data we collect, why we collect it, and what we do with it. Written in plain English, not legalese.

Who we are

Ripleys Nest LLP is a limited liability partnership registered in England and Wales.

When we say "we", "us", or "our" in this policy, we mean Ripleys Nest LLP. We are the data controller for your personal data.

When you place an order

  • Full name
  • Email address
  • Shipping and billing address
  • Phone number (if provided)
  • Payment information (processed securely by Shopify Payments; we never see or store your full card details)

When you browse our website

  • IP address
  • Browser type and version
  • Pages visited and time spent
  • Referring website
  • Device type and screen size

When you contact us

  • Name and email address
  • Any information you include in your message

When you sign up to our newsletter

  • Email address

When you leave a review

  • Name (or display name)
  • Email address
  • Review content and any photos you upload
Purpose Lawful basis
Fulfilling your order (processing, shipping, customer service) Contract, necessary to deliver what you bought
Sending order confirmations and shipping updates Contract, part of delivering your order
Sending marketing emails (new products, offers) Consent, only if you opted in, or Legitimate interest (soft opt-in for existing customers marketing similar products)
Analysing website traffic to improve our site Consent, analytics cookies only load after you accept
Showing you relevant ads on other platforms Consent, marketing cookies only load after you accept
Preventing fraud and keeping the site secure Legitimate interest, protecting our business and customers
Keeping records for tax and accounting Legal obligation, HMRC requires us to keep transaction records

We only share your data where necessary to run our business. We never sell your data to anyone.

Third party What they do Data shared
Shopify Hosts our website and processes orders Order details, account info, browsing data
Shopify Payments / Stripe Processes card payments securely Payment details (we never see full card numbers)
Royal Mail / DPD / APC Delivers your orders Name, shipping address, phone number
Google Analytics Website traffic analysis (only with your consent) Anonymised browsing data, IP address
Judge.me Collects and displays product reviews Name, email, review content, photos
Meta (Facebook/Instagram) Advertising (only with your consent) Browsing activity via pixel
Pinterest Advertising (only with your consent) Browsing activity via tag

Some of these providers are based outside the UK. Where data is transferred internationally, it is protected by Standard Contractual Clauses or equivalent safeguards.

Cookies are small files stored on your device. We use them for different purposes:

Category Examples Can you turn them off?
Necessary Shopping basket, login sessions, security, Shopify checkout No (the site won't work without these)
Analytics Google Analytics, Microsoft Clarity Yes (off by default, only loaded if you accept)
Marketing Meta Pixel, Pinterest tag Yes (off by default, only loaded if you accept)

You can change your cookie preferences at any time by clicking the "Cookie preferences" link in our website footer, or by clearing cookies in your browser settings.

Data type Retention period
Order records (name, address, items, payment) 6 years after the order date (HMRC requirement)
Customer service correspondence 2 years after last contact
Newsletter subscriber email Until you unsubscribe
Website analytics data 26 months (Google Analytics default)
Reviews Indefinitely (or until you ask us to remove it)

After these periods, we securely delete or anonymise your data.

Under UK GDPR, you have the right to:

  • Access your personal data (submit a Subject Access Request)
  • Correct inaccurate or incomplete data
  • Delete your data ("right to be forgotten"), unless we have a legal reason to keep it
  • Restrict processing while a dispute is being resolved
  • Data portability (receive your data in a machine-readable format)
  • Object to processing based on legitimate interest
  • Withdraw consent at any time for consent-based processing (this won't affect anything we did before you withdrew)
  • Object to marketing at any time (we will stop immediately)

To exercise any of these rights, email us at hello@ripleysnest.co.uk. We will respond within one month.

If you're unhappy with how we've handled your data, please contact us first at hello@ripleysnest.co.uk and we'll do our best to resolve it.

If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):

  • Website: ico.org.uk/make-a-complaint
  • Phone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Questions about this privacy policy or your data? Get in touch: