Privacy Policy

Last updated: 14 October 2026

1. Who we are

Spookies.uk is a trading name operated by a sole trader in England.

  • Business name: Spookies.uk
  • Business owner: Tjobbe Andrews
  • Business address: 7 Buttercup Close, Moreton-in-Marsh, GL56 9PZ, United Kingdom
  • Email: boo@spookies.uk
  • Website: https://spookies.uk

In this policy, “we”, “us” and “our” refer to the sole trader operating Spookies.uk.

We respect your privacy and are committed to handling your personal information responsibly and in accordance with applicable data protection law.

This policy explains what personal information we collect, why we use it, who we share it with and what rights you have.

2. The information we collect

Depending on how you use our website, we may collect the following information.

Information you provide

When you place an order, contact us or sign up for updates, we may collect:

  • Your name
  • Billing and delivery addresses
  • Email address
  • Telephone number, if provided
  • Order details, including products purchased, prices and delivery information
  • Messages you send to us
  • Your email marketing preferences and subscription status

We only ask for information that is reasonably necessary for the relevant purpose.

Payment information

Payments are processed through WooPayments and its relevant payment-processing partners.

We receive information needed to manage your order, such as payment status, transaction references and relevant billing details.

Your full payment card details are handled by the payment provider and its systems. We do not intend to store full payment card details on our own systems.

Please refer to the relevant payment provider's privacy information for further details about its processing.

Website and technical information

When you visit our website, certain information may be collected automatically, depending on your settings and the services in use. This may include:

  • IP address and approximate location
  • Browser type and device information
  • Pages visited and interactions with the website
  • Referring website or source
  • Cookie identifiers and similar technical information
  • Security and anti-spam information

We may use this information to operate the website, understand how it is used, maintain security and improve the shopping experience.

Marketing information

If you sign up to receive Spookies updates, we may collect your email address, subscription preferences and information about your engagement with our emails, where enabled and permitted.

We use Klaviyo to manage email marketing and subscriber communications.

You can unsubscribe from marketing emails at any time using the unsubscribe link in the email or by contacting us.

3. How we use your information

We use personal information for the following purposes.

Processing and delivering orders

We use your contact details, address and order information to process payments, fulfil orders, arrange delivery, provide customer support and manage returns.

Lawful basis: Processing is necessary to perform our contract with you, or to take steps you request before entering into a contract.

Customer service

We use information you provide to respond to enquiries, resolve problems and deal with complaints.

Lawful basis: Depending on the circumstances, this may be contractual necessity or our legitimate interests in operating the business and providing customer support.

Legal and accounting obligations

We may retain and use relevant transaction and customer records to comply with tax, accounting, consumer protection and other legal obligations.

Lawful basis: Compliance with legal obligations.

Website analytics and improvement

We use Google Analytics, where enabled, to understand how visitors use our website, identify popular products and improve the shopping experience.

Depending on the configuration and consent provided, this may involve information about page visits, interactions, device details and online identifiers.

Lawful basis: Consent where required for analytics technologies, and otherwise the applicable lawful basis for the associated personal data processing.

Email marketing

We use Klaviyo to send newsletters, product announcements and updates about Spookies to people who have signed up to receive them.

We may also use permitted customer communications to tell existing customers about relevant products where the applicable legal requirements are met.

Lawful basis: Consent where required, or another lawful basis where permitted by applicable law.

You can withdraw your consent or unsubscribe at any time. This does not affect the lawfulness of processing carried out before withdrawal.

Website security and spam prevention

We use an advanced Google reCAPTCHA plugin to help protect our website against spam, automated submissions and abuse.

Depending on its configuration, this service may process technical information about your device, browser, interactions and IP address.

Lawful basis: Our legitimate interests in protecting the website and its users, alongside any consent required for technologies used by the service.

4. Cookies and similar technologies

Our website uses cookies and similar technologies.

Some are necessary for functions such as shopping baskets, checkout, security and remembering your cookie preferences. Other technologies may be used for analytics, marketing or additional functionality.

We use CookieAdmin to display our cookie consent banner and manage cookie preferences.

Where consent is required, we will seek your permission before placing or accessing non-essential cookies or similar technologies. You can change your preferences using the cookie settings available on our website.

For further information, please see our separate Cookie Policy.

5. Who we share information with

We share personal information only where necessary for the purposes described in this policy, where we have an appropriate lawful basis, or where disclosure is legally required.

Our service providers may include:

WooCommerce and website hosting

WooCommerce powers our online shop. Our website hosting provider stores or processes information as necessary to operate the website, maintain security and fulfil orders.

WooPayments and payment providers

We use WooPayments to process transactions and manage payment-related information. Relevant payment processors and financial service providers may process information to complete transactions, prevent fraud and comply with legal obligations.

Klaviyo

We use Klaviyo to manage email subscriptions and send marketing communications to people who have signed up or may otherwise lawfully receive them.

Google Analytics

We use Google Analytics, where enabled, to analyse website usage and performance.

Delivery and professional service providers

Where necessary, we may share relevant information with delivery companies, accountants, professional advisers or authorities to fulfil orders, manage our business or comply with legal requirements.

We do not sell your personal information to third parties.

6. International transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take the steps required by applicable data protection law, which may include relying on an adequacy decision or implementing appropriate safeguards.

The relevant provider's privacy information can explain where and how its services process personal data.

7. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including legal, accounting and reporting requirements.

Our retention periods depend on the type of information and why we hold it.

  • Order and accounting records: Retained for the period required by applicable tax, accounting and legal obligations.
  • Customer service correspondence: Retained for as long as needed to resolve enquiries and maintain appropriate business records.
  • Marketing subscriptions: Retained while you remain subscribed and for a limited period afterwards where necessary to record and respect your unsubscribe preferences.
  • Analytics information: Retained according to the retention settings configured in Google Analytics.
  • Cookie preferences and security records: Retained according to the relevant plugin and service settings and for as long as reasonably necessary.

When information is no longer required, we will securely delete it or anonymise it where appropriate, unless we are legally required to retain it.

8. Keeping your information secure

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

These measures may include access controls, website security tools, secure payment processing and keeping software updated.

No website or electronic transmission can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we take reasonable steps to protect the information we hold.

9. Your data protection rights

Depending on the circumstances and applicable law, you may have the right to:

  • Request access to the personal information we hold about you.
  • Ask us to correct inaccurate or incomplete information.
  • Request erasure of your information where the legal conditions are met.
  • Request restriction of certain processing.
  • Object to processing based on legitimate interests, including certain direct marketing activities.
  • Request a copy of certain information in a portable format.
  • Withdraw consent where we rely on consent.
  • Complain to the Information Commissioner's Office (ICO).

These rights are subject to applicable legal conditions and exemptions. For example, we may need to retain certain transaction records to meet legal obligations even if you ask us to delete your information.

To exercise your rights, email boo@spookies.uk. We may need to verify your identity before responding.

10. Marketing communications

You will only receive marketing emails where we are permitted to send them under applicable law.

Every marketing email will include an unsubscribe option. You can also contact us at boo@spookies.uk to opt out.

Unsubscribing from marketing does not prevent us from sending essential communications about an existing order, such as order confirmations, delivery updates or important product safety information.

11. Children's privacy

Our website and online shop are intended for people making purchases and are not designed to collect children's personal information deliberately.

If you believe a child has provided personal information to us without appropriate authorisation, please contact us so we can review the circumstances and take appropriate action.

12. Links to other websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of external websites. Please review their privacy policies before providing personal information to them.

13. Changes to this policy

We may update this Privacy Policy to reflect changes to our business, website, service providers or legal obligations.

The latest version will be published on this page, together with the date it was last updated.

We encourage you to review this policy periodically.

14. Contact us

If you have questions about this Privacy Policy or how we handle your personal information, please contact:

Spookies.uk

Email: boo@spookies.uk

Address: 7 Buttercup Close, Moreton-in-Marsh, GL56 9PZ, United Kingdom

15. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to complain to the UK's Information Commissioner's Office (ICO).

Website: https://ico.org.uk/make-a-complaint/

The ICO's contact details and guidance are available at https://ico.org.uk/.