Privacy Policy

LittleKits.co.uk is the data controller for personal data collected through this site. Contact: orders@littlekits.co.uk.

• Account: email, name (if provided), hashed password.
• Orders: items, personalisation details, delivery address, order history.
• Payments: handled by Stripe — we receive a token and last 4 digits only.
• Loyalty: stamps earned and redeemed against your account.
• Technical: IP address, browser type, cookies (see below).

• To process orders and provide customer service (contract).
• To send transactional emails such as order confirmations (contract).
• To prevent fraud and meet legal obligations (legal obligation).
• To improve the site and operate our loyalty scheme (legitimate interest).

We share data only with processors who help us run the business: our payments provider (Stripe), our hosting and backend platform, our email sender, and delivery carriers. We never sell your personal data.

Order records are kept for 7 years for tax purposes. Account data is kept until you delete your account. You can request deletion at any time by emailing us.

Under UK GDPR you have the right to access, correct, delete or export your data, and to object to certain processing. Email orders@littlekits.co.uk to exercise any of these. You may also complain to the ICO (ico.org.uk).

We use strictly necessary cookies for cart, login and checkout. We do not use marketing or advertising cookies. See our Cookie Policy.