PRIVACY POLICY
Last updated: 19 March 2026
We take your privacy seriously. This policy explains what personal data we collect, why we collect it, and what we do with it. Written in plain English, not legalese.
Ripleys Nest LLP is a limited liability partnership registered in England and Wales.
- Registered address: Grange-over-Sands, Cumbria
- Email: hello@ripleysnest.co.uk
- Website: ripleysnest.co.uk
When we say "we", "us", or "our" in this policy, we mean Ripleys Nest LLP. We are the data controller for your personal data.
When you place an order
- Full name
- Email address
- Shipping and billing address
- Phone number (if provided)
- Payment information (processed securely by Shopify Payments; we never see or store your full card details)
When you browse our website
- IP address
- Browser type and version
- Pages visited and time spent
- Referring website
- Device type and screen size
When you contact us
- Name and email address
- Any information you include in your message
When you sign up to our newsletter
- Email address
When you leave a review
- Name (or display name)
- Email address
- Review content and any photos you upload
| Purpose | Lawful basis |
|---|---|
| Fulfilling your order (processing, shipping, customer service) | Contract, necessary to deliver what you bought |
| Sending order confirmations and shipping updates | Contract, part of delivering your order |
| Sending marketing emails (new products, offers) | Consent, only if you opted in, or Legitimate interest (soft opt-in for existing customers marketing similar products) |
| Analysing website traffic to improve our site | Consent, analytics cookies only load after you accept |
| Showing you relevant ads on other platforms | Consent, marketing cookies only load after you accept |
| Preventing fraud and keeping the site secure | Legitimate interest, protecting our business and customers |
| Keeping records for tax and accounting | Legal obligation, HMRC requires us to keep transaction records |
We only share your data where necessary to run our business. We never sell your data to anyone.
| Third party | What they do | Data shared |
|---|---|---|
| Shopify | Hosts our website and processes orders | Order details, account info, browsing data |
| Shopify Payments / Stripe | Processes card payments securely | Payment details (we never see full card numbers) |
| Royal Mail / DPD / APC | Delivers your orders | Name, shipping address, phone number |
| Google Analytics | Website traffic analysis (only with your consent) | Anonymised browsing data, IP address |
| Judge.me | Collects and displays product reviews | Name, email, review content, photos |
| Meta (Facebook/Instagram) | Advertising (only with your consent) | Browsing activity via pixel |
| Advertising (only with your consent) | Browsing activity via tag |
Some of these providers are based outside the UK. Where data is transferred internationally, it is protected by Standard Contractual Clauses or equivalent safeguards.
Cookies are small files stored on your device. We use them for different purposes:
| Category | Examples | Can you turn them off? |
|---|---|---|
| Necessary | Shopping basket, login sessions, security, Shopify checkout | No (the site won't work without these) |
| Analytics | Google Analytics, Microsoft Clarity | Yes (off by default, only loaded if you accept) |
| Marketing | Meta Pixel, Pinterest tag | Yes (off by default, only loaded if you accept) |
You can change your cookie preferences at any time by clicking the "Cookie preferences" link in our website footer, or by clearing cookies in your browser settings.
| Data type | Retention period |
|---|---|
| Order records (name, address, items, payment) | 6 years after the order date (HMRC requirement) |
| Customer service correspondence | 2 years after last contact |
| Newsletter subscriber email | Until you unsubscribe |
| Website analytics data | 26 months (Google Analytics default) |
| Reviews | Indefinitely (or until you ask us to remove it) |
After these periods, we securely delete or anonymise your data.
Under UK GDPR, you have the right to:
- Access your personal data (submit a Subject Access Request)
- Correct inaccurate or incomplete data
- Delete your data ("right to be forgotten"), unless we have a legal reason to keep it
- Restrict processing while a dispute is being resolved
- Data portability (receive your data in a machine-readable format)
- Object to processing based on legitimate interest
- Withdraw consent at any time for consent-based processing (this won't affect anything we did before you withdrew)
- Object to marketing at any time (we will stop immediately)
To exercise any of these rights, email us at hello@ripleysnest.co.uk. We will respond within one month.
If you're unhappy with how we've handled your data, please contact us first at hello@ripleysnest.co.uk and we'll do our best to resolve it.
If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Questions about this privacy policy or your data? Get in touch:
- Email: hello@ripleysnest.co.uk