Privacy
Privacy policy
We keep things simple: we only collect what we need to send you squishes and Squish Club news, and we never sell your information.
Last updated: 17 October 2026
Who we are
Sparkle & Squish is run by [BUSINESS NAME], [ADDRESS LINE 1], Westcliff-on-Sea, [POSTCODE], United Kingdom. We are the "controller" of your personal information, which means we decide how it's used. If you have any questions, email hello@sparkleandsquish.co.uk.
Children
Our squishies are for children, but our website, orders and emails are for grown-ups. We only accept orders and Squish Club sign-ups from people aged 18 or over, and we don't knowingly collect personal information from children. If you think a child has sent us their details, email us and we'll delete them.
What we collect and why
When you place an order
Your name, delivery address, email address and what you bought, so we can deliver your order and look after you if something goes wrong. Payments are handled by Stripe: we never see or store your full card details. Our lawful basis is that we need this information to fulfil our contract with you, and to keep tax records the law requires.
When you join the Squish Club
Your email address and your confirmation that you're 18 or over and a parent or guardian. We use it to email you about new squishes and offers. Our lawful basis is your consent. You can unsubscribe at any time using the link in any email, or by emailing us.
When you email us
Your email address and whatever you tell us, so we can reply and help. Our lawful basis is our legitimate interest in answering your questions.
When you visit our website
Our website host keeps basic technical logs, such as your IP address and browser type, to keep the site running and secure. Our lawful basis is our legitimate interest in running a safe website.
Cookies and your browser
We don't use advertising or tracking cookies, and our fonts are hosted on our own website. If you add squishes to your basket, your basket is saved in your own browser (using "local storage") so it's still there when you come back. It isn't sent to us until you check out. Stripe uses cookies on its secure checkout page to prevent fraud.
Who we share it with
We only share your information with companies that help us run the shop, and only what they need:
- Stripe takes card payments (Stripe's privacy policy).
- Netlify hosts our website and stores Squish Club sign-ups (Netlify's privacy policy).
- Cloudflare forwards emails sent to our address (Cloudflare's privacy policy).
- Google provides our email inbox (Google's privacy policy).
- Our supplier and delivery companies receive your name and delivery address so they can get your order to you.
We may also share information if the law requires it, for example with HMRC. We never sell your information or share it for advertising.
Information sent outside the UK
Some of these companies are based in, or store information in, the USA or other countries. When that happens, your information is protected by safeguards approved under UK law, such as the UK–US "data bridge" or the UK International Data Transfer Agreement.
How long we keep it
- Orders: 6 years after your order, because tax law requires it.
- Squish Club: until you unsubscribe.
- Emails with us: up to 2 years after we last hear from you, unless they're about an order.
Your rights
You have the right to ask for a copy of your information, ask us to correct or delete it, ask us to limit or stop using it, object to how we use it, and withdraw your consent at any time. Email hello@sparkleandsquish.co.uk and we'll reply within one month.
Complaints
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
Changes
If we change this policy, we'll update it here and change the date at the top.