Privacy Policy

The data controller is SHEEP SHED CREATIONS LTD (The Sheep Shed), registered in England at 8 New Road Linslade, LU7 2LX, England (United Kingdom). For any privacy question you can reach us at support@sheshecre.shop or +44 7951799136.

We collect only what we need to run the shop and fulfil your order:

• Contact and delivery details: name, email, phone (optional), shipping address, delivery city, postal code and country.
• Order and account data: items ordered, order value, order history, order fulfilment and dispatch records, and support correspondence.
• Personalisation content: any name or text you ask us to make onto a personalised piece.
• Membership data: your plan, billing period and subscription status.
• Enquiry data: information you submit through our contact and custom/wholesale forms.
• Technical data: cookies and basic device/usage data needed to run and secure the site (see our Cookie Policy).

We do not collect government identity documents, and we never see or store your full card number — card payments are handled entirely by our payment processor.

We collect personal data from the following collection sources:

• Directly from you when you order, check out, subscribe, use the Cosy Style Finder or contact us.
• Automatically through essential cookies and local storage when you browse and use your basket.
• From our service providers — our payment processor confirms payment status, and our delivery carriers confirm dispatch and delivery of your order.

To fulfil an order we process your name and shipping address so we can pick, pack and dispatch your parcel, and we share the delivery address with the carrier handling that shipment. We keep order fulfilment and dispatch records to manage delivery, returns, exchanges and customer support, and to meet our accounting obligations. Billing data linked to your payment is processed by Stripe (see section 5); we receive confirmation of payment and limited billing details, not your full card number.

• To perform our contract with you: process orders and memberships, take payment, arrange delivery and provide support.
• Legitimate interests: to secure the site, prevent fraud, keep records and improve our products and service.
• Consent: where you opt in, for example to non-essential cookies or marketing; you can withdraw consent at any time.
• Legal obligation: to meet tax, accounting and consumer-law requirements.

Card payments are processed by Stripe. When you pay, your card details are entered on the secure payment page and handled by Stripe as an independent controller/processor under its own terms. The Sheep Shed does not receive or store your full card number, CVC or full card data. We receive only confirmation of payment and limited billing information needed to manage your order and any refund or dispute.

We share data only with service providers who help us run the shop, under appropriate agreements:

• Hosting and infrastructure (to serve and secure the website).
• Payment processing (Stripe, for card payments, refunds and disputes).
• Delivery and logistics carriers (to ship your order to your address).
• Email and lead/database providers (to reply to enquiries and manage orders and memberships).

We do not sell your personal information.

Some providers may process data outside your country. Where data leaves the UK or EEA, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses to protect it.

We keep order and accounting records for as long as required by law (typically up to 6–7 years for tax and accounting). General enquiry and marketing lead data is kept for no longer than 24 months unless you ask us to remove it sooner. Membership data is kept for the life of your subscription and the retention period above.

Depending on where you live, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct inaccurate data or complete incomplete data.
• Erase your data where there is no ongoing legal or contractual need to keep it.
• Restrict or object to certain processing, including direct marketing.
• Data portability for data you provided to us.
• Withdraw consent at any time where processing is based on consent.

California residents have the right to know, delete and correct personal information, and to opt out of any sale or sharing — which we do not do (see below). To exercise any right, email support@sheshecre.shop. We respond within the timescales required by law.

We do not sell your personal information and we do not share it for cross-context behavioural advertising. No action is needed to opt out of a sale, because no sale takes place.

We use essential cookies to run the basket, checkout and admin session, and only use non-essential or analytics cookies with your consent. See our Cookie Policy for detail.

We do not make solely automated decisions that produce legal or similarly significant effects about you. The Cosy Style Finder only suggests products based on your answers. Our store is not directed at children: accounts are not available under 13, and shoppers aged 13–17 must have a parent or guardian’s consent to purchase. Kits containing tools or small parts carry a 14+ age guide.

We use appropriate technical and organisational measures to protect your data, including encrypted connections and restricted access to order and admin systems. No method of transmission is completely secure, but we work to protect your information and to respond quickly to any incident.

If you have a concern, contact us first at support@sheshecre.shop. You also have the right to complain to your data protection authority — in the UK, the Information Commissioner’s Office (ICO). This policy is governed by the laws of England and Wales.