Last updated: March 2026
1. Who We Are
Alison Gardiner Designs Ltd
Times Square Building
Caroline Street
Stoke-on-Trent
ST3 1DB
United Kingdom
Company No.: 06716736
Email: [email protected]
Website: www.alisongardiner.com
We are the data controller for personal data processed under UK GDPR and the Data Protection Act 2018. For US privacy laws (including California CCPA/CPRA), we act as a business under applicable state law.
2. Personal Data We Collect
Information you provide
- Name
- Billing & shipping address
- Email address
- Phone number
- Payment information (processed securely by third-party providers; we do not store card numbers)
- Order history and account information
Information collected automatically
- IP address and device identifiers
- Website usage and analytics data
- Cookie and tracking data (see Section 10)
Optional information
- Marketing preferences
- Competition or survey entries
We do not knowingly collect data from children under 13 (US COPPA compliance) or children under 16 (UK/EU requirements).
3. How We Use Personal Data
We use your information for the following purposes, in line with UK requirements for privacy notices under Articles 13 & 14 UK GDPR.
To fulfil your orders and provide customer service
- Processing and delivering orders
- Communications about your order
- Handling returns, refunds or support queries
For business operations
- Maintaining and improving our website
- Fraud prevention and security
- Internal analytics and reporting
- Customer relationship management
Marketing (only with your consent or legitimate interest)
- Email newsletters
- Product updates
- Promotions or offers
You can opt out of marketing at any time.
4. Legal Bases for UK Data Processing
Under UK GDPR, we rely on one or more of the following legal bases:
- Contract necessity – to fulfil your order
- Legitimate interests – fraud prevention, analytics, website security
- Consent – marketing communications
- Legal obligation – tax or accounting compliance
5. UK Privacy Rights
UK residents may request:
- Access to personal data
- Correction or deletion
- Restriction or objection to processing
- Data portability
- Rights related to automated decision-making
To exercise these rights, contact: [email protected]
You may also contact the UK Information Commissioner’s Office (ICO).
6. US Privacy Rights (Including California CCPA/CPRA)
US residents, including those in California, may request:
- Access to collected personal information
- Deletion of personal information
- Correction of inaccuracies
- Opt-out of sale or sharing of personal data (we do not sell your data)
- Limiting use of sensitive personal information
- Right to confirm your opt-out request has been honoured (mandatory under 2026 updates)
We do not sell personal information or use it for cross-context behavioural advertising.
Requests can be submitted to [email protected].
7. Data Sharing
We may share information with:
- Payment processors
- Delivery and logistics partners
- IT and website service providers
- Professional advisers
We do not sell personal information.
8. International Transfers
If transferring data outside the UK, we use safeguards such as:
- UK IDTAs (International Data Transfer Agreements)
- Standard Contractual Clauses (SCCs)
This is required under UK GDPR and ICO guidance.
9. Data Retention
We retain your personal data only as long as necessary to:
- Provide our services
- Meet legal, tax, and accounting obligations
10. Cookies
Our website uses cookies and similar tracking technologies to improve your browsing experience and to help us understand how visitors use and interact with our services. Cookies are small text files stored on your device when you visit a website. These technologies assist us in delivering essential site features, enhancing performance, and analysing usage patterns.
10.1 Types of Cookies We Use
We may use the following categories of cookies:
- Strictly Necessary Cookies – Required for core site functionality, such as secure checkout, account login, and page navigation.
- Performance & Analytics Cookies – Help us understand how our website is used, diagnose technical issues, and improve usability and performance.
- Functional Cookies – Remember your preferences (such as region, language, or saved items) to provide a more personalised experience.
- Advertising & Measurement Cookies (where applicable) – Used to understand the effectiveness of marketing campaigns and, if enabled, to deliver relevant content. We do not use advertising cookies without the required consent in applicable jurisdictions.
10.2 UK, EU & DUAA 2025 Requirements
For users in the United Kingdom and Europe, cookie usage is governed by PECR, the UK GDPR, and updates introduced by the Data (Use and Access) Act 2025 (DUAA), which require:
- Clear, accessible cookie disclosures
- User-friendly consent mechanisms for non-essential cookies
- The ability to withdraw consent at any time
These requirements align with guidance from the Information Commissioner’s Office (ICO). DUAA 2025 introduces enhanced expectations around transparency, cookie categorisation, and user control.
10.3 US Requirements (including CCPA/CPRA 2026)
For US users, including California residents, we comply with CCPA/CPRA rules on tracking technologies, which require:
- Disclosure of the categories of data collected through cookies
- Explanation of the purposes for which cookies are used
- Notice of any “sale” or “sharing” of personal information (we do not sell personal data)
- A “Do Not Sell or Share My Personal Information” mechanism where applicable
- Visibility into whether opt-out signals — such as the Global Privacy Control (GPC) — have been honoured
These requirements follow the CPPA’s 2026 regulatory updates on disclosures and confirmation of opt-out processing.
10.4 Managing Cookies
You may adjust or restrict cookies at any time through:
- Your browser settings
- Device-level privacy controls
- Our on-site cookie preference tools (where provided)
Blocking certain cookies may affect site functionality or limit certain features.
10.5 Third-Party Cookies
Some cookies may be placed by third-party providers who supply analytics, hosting, or marketing services. These providers process data under contractual safeguards consistent with applicable privacy laws.
11. Security
We implement appropriate technical and organisational security measures, including:
- Encrypted website traffic (HTTPS)
- Access controls
- Secure payment processing
- Regular compliance reviews
12. Contact Information
Email: [email protected]
Address: Alison Gardiner Designs Ltd, Times Square Building, Caroline Street, Stoke-on-Trent, ST3 1DB, United Kingdom
13. Policy Updates
We may update this Privacy Policy to reflect changes in law or operations. The latest version will always be available on our website.
