Privacy Policy
Your privacy matters to us. Here's a clear, honest explanation of how we handle your personal data.
Last updated: July 2026
Who We Are
LittleDaintyLoops is a small UK-based handmade crochet and amigurumi business run by Meg. We sell made-to-order pieces and digital patterns through this website, littledaintyloops.co.uk.
When you shop with us or get in touch, you're trusting us with some of your personal information. We take that seriously and will only ever collect what we genuinely need. If you have any questions at all, you're welcome to reach out at littledaintyloops@gmail.com.
What Data We Collect
We only collect information that is necessary to process your order or to communicate with you. This includes:
Order Information
Your name, email address, and shipping address when you place an order. We need this to fulfil and post your purchase, and to keep you updated on its progress.
Payment Information
We do not store your card details. All payments are handled securely by Stripe, a PCI-DSS compliant payment processor. We only receive a confirmation that payment was successful.
Account Information
If you create an account, we store your email address and order history so you can track your purchases over time.
Messages & Enquiries
If you email us directly, we'll keep a record of that conversation so we can respond properly and follow up if needed.
How We Use Your Data
We use your personal information only for the purposes it was given to us for:
- Processing and fulfilling your order
- Sending you order confirmation and shipping updates
- Responding to any questions or concerns you send us
- Handling returns or issues with your order
- Complying with our legal obligations (e.g. keeping financial records)
We do not use your data for automated decision-making, profiling, or targeted advertising. We will never sell your data to third parties.
Third Parties We Work With
Running this website involves a small number of trusted third-party services. We only share the minimum data each service needs to do its job:
Stripe
Processes your payment securely. Stripe receives your payment details and billing information. They are GDPR-compliant and do not share your data with us beyond payment confirmation. See Stripe's Privacy Policy.
Supabase
Our database and authentication provider. Your account details and order history are stored securely on Supabase servers. Data is stored within the EU. See Supabase's Privacy Policy.
Vercel (Hosting)
This website is hosted on Vercel. They may process basic request metadata (such as IP addresses) as part of standard web hosting operations. See Vercel's Privacy Policy.
Cookies
We use a small number of cookies to keep the website working properly. We don't use advertising cookies or sell any cookie data.
Essential Cookies
These are needed for the site to function — things like keeping your shopping cart intact and staying logged in to your account. You cannot opt out of these without stopping the site from working.
Analytics Cookies
We may use basic platform-level analytics to understand how people are finding and using the site (for example, which pages are visited most). This data is aggregated and anonymous — we cannot identify you from it.
How Long We Keep Your Data
We keep your order data for up to 7 years in line with HMRC requirements for small business financial records. After that, it is securely deleted.
If you create an account and later ask us to delete it, we will remove your personal details from our records. We may need to retain a minimal record of transactions for legal and accounting purposes, but your personally identifiable information will be removed.
Email correspondence is retained for as long as it is reasonably needed and then deleted.
Your Rights Under UK GDPR
As a UK resident, you have the following rights regarding your personal data. You can exercise any of these by getting in touch at littledaintyloops@gmail.com.
Right of Access
You can ask us for a copy of the personal data we hold about you at any time.
Right to Rectification
If any information we hold about you is inaccurate or incomplete, you can ask us to correct it.
Right to Erasure
You can ask us to delete your personal data. We'll do this where we're not legally required to keep it.
Right to Portability
You can ask for your data in a commonly used, machine-readable format so you can transfer it elsewhere.
Right to Restrict Processing
You can ask us to limit how we use your data in certain circumstances.
Right to Object
You can object to us processing your personal data where we are relying on legitimate interests as our legal basis.
We will respond to all requests within one calendar month. If you feel we have not handled your data correctly, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Our Legal Basis for Processing
Under UK GDPR we need a legal basis to process your data. For orders, our legal basis is contractual necessity — we need your details to fulfil the agreement we enter into when you place an order. For financial record-keeping we rely on a legal obligation. For responding to enquiries we rely on our legitimate interests in running the business.
Get in Touch
If you have any questions about this privacy policy or how we handle your data, please don't hesitate to get in touch. We're a small, friendly business and we're always happy to chat.
LittleDaintyLoops
Meg — Founder & Maker
littledaintyloops@gmail.comUnited Kingdom · littledaintyloops.co.uk
We may update this policy from time to time. Any changes will be posted on this page with an updated date at the top.