Privacy policy

Privacy Policy

Last updated: 18 August 2026

1. Who We Are

This website is operated by Timbersmiths Ltd, trading as Fox & Folly.

For the purposes of UK data protection law, Timbersmiths Ltd is the data controller responsible for the personal information described in this policy.

  • Registered company name: Timbersmiths Ltd

  • Trading name: Fox & Folly

  • Company number: 10067642

  • Registered office: Sideways, North Street, Axminster, Devon EX13 5QF, United Kingdom

  • Email: hello@foxandfolly.co.uk

  • Telephone: +44 (0)7951 817381

Our online shop is hosted by Shopify, which provides the ecommerce platform through which we sell our products.

2. Personal Information We Collect

Depending on how you use our website or interact with us, we may collect:

  • Identity and contact information: Your name, billing address, delivery address, email address and telephone number.

  • Order information: Products ordered, personalisation instructions, order value, delivery method, transaction history and information needed to fulfil or manage an order.

  • Artwork and personalisation information: Names, messages, logos, images, artwork or other information supplied for inclusion on a personalised product.

  • Payment information: Payment details are processed by Shopify and its payment providers. We do not normally receive or store your complete payment-card details.

  • Communications: Emails, messages, enquiries, complaints, reviews and other correspondence with us.

  • Technical and usage information: Internet Protocol address, browser type, device information, cookie identifiers and information about how you use our website.

  • Marketing preferences: Whether you have chosen to receive marketing communications and how you interact with those communications.

  • Fraud and security information: Information supplied by Shopify, payment providers or other service providers to help identify potentially fraudulent or unauthorised transactions.

We collect information directly from you, automatically through our website and from service providers involved in processing your order or operating our shop.

3. How We Use Your Information

We may use personal information to:

  • Process, personalise, manufacture and fulfil orders.

  • Take payment and arrange delivery.

  • Provide order confirmations, dispatch information and customer support.

  • Respond to enquiries, complaints, returns and refund requests.

  • Create proofs or prepare artwork for personalised products.

  • Maintain transaction, accounting and tax records.

  • Detect, investigate and prevent fraud, misuse or security incidents.

  • Operate, maintain and improve our website and services.

  • Measure website use and understand how customers interact with our shop.

  • Send marketing communications where you have requested them or where otherwise permitted by law.

  • Comply with our legal and regulatory obligations.

  • Establish, exercise or defend legal claims.

If you do not provide information required to process an order, we may be unable to accept or fulfil it.

4. Our Lawful Bases

We process personal information under one or more of the following lawful bases:

  • Contract: Where processing is necessary to take steps at your request, process an order or perform our contract with you.

  • Legal obligation: Where we need to comply with tax, accounting, consumer-protection or other legal requirements.

  • Legitimate interests: Where processing is necessary to operate and protect our business, provide customer service, prevent fraud, improve our services or establish and defend legal claims, provided those interests do not override your rights.

  • Consent: Where you have consented to optional activities such as non-essential cookies or certain marketing communications.

Where we rely on consent, you may withdraw it at any time.

5. Cookies and Analytics

Our website uses cookies and similar technologies.

Some cookies are necessary for the website, basket, checkout, security and payment functions to operate. Other cookies may help us understand website use, measure performance or support advertising and marketing.

Where required, optional analytics and advertising cookies will only be used after you have made your choice through our cookie-consent controls.

We may use analytics services, including Google Analytics, to understand how visitors use our website. Information collected through these services may include device, browser, approximate location and website-interaction information.

You can review or change your cookie preferences through the cookie controls on our website. You can also block or delete cookies through your browser settings, although this may affect how some website functions operate.

6. Marketing Communications

If you subscribe to our mailing list or otherwise consent to receive marketing, we may use your name, email address and interaction information to send news, product information or offers.

You can unsubscribe at any time by:

You have an absolute right to object to the use of your personal information for direct marketing.

We may retain limited information about an unsubscribe request so that we can respect your preference in the future.

7. How We Share Personal Information

We may share personal information with organisations that help us operate our business, including:

  • Shopify and Shopify-related services.

  • Payment processors and fraud-prevention providers.

  • Royal Mail, couriers and other delivery providers.

  • Website, IT, email, analytics and marketing service providers.

  • Accountants, insurers, legal advisers and other professional advisers.

  • Government bodies, regulators, law-enforcement agencies or courts where disclosure is required or permitted by law.

  • A prospective purchaser or adviser in connection with a sale, restructuring or transfer of our business.

These organisations may only use the information for the relevant service or as otherwise permitted by law.

We do not sell or rent customers’ personal information.

Shopify may also process personal information for its own purposes in accordance with its privacy policies. Further information is available in Shopify’s Privacy Policy at: https://www.shopify.com/legal/privacy.

8. International Transfers

Shopify and some of our other service providers may process personal information outside the United Kingdom, including in the European Economic Area, Canada and the United States.

Where personal information is transferred outside the United Kingdom, we rely on safeguards permitted under UK data protection law. These may include UK adequacy regulations, approved contractual clauses or the UK International Data Transfer Agreement or Addendum, as appropriate.

9. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax and regulatory requirements.

Order, payment and transaction records will normally be retained for up to six years where required for accounting, tax, contractual or legal purposes.

Other retention periods may include:

  • Enquiries and customer-service correspondence: for as long as needed to resolve the matter and maintain an appropriate business record.

  • Personalisation instructions and artwork: for as long as reasonably necessary to fulfil the order, respond to later enquiries or support a repeat order, unless you ask us to delete them and no legal reason requires continued retention.

  • Marketing information: until you unsubscribe, withdraw consent or we determine that the information is no longer required.

  • Fraud and security information: for as long as reasonably necessary to protect our business and comply with legal obligations.

We may retain information for longer where a dispute, complaint, investigation or legal claim is ongoing.

10. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

Payments are processed through Shopify and its payment providers using their security measures. No method of electronic transmission or storage is completely secure, but we take reasonable steps appropriate to the nature of the information we handle.

11. Automated Fraud Screening

Shopify, payment providers and fraud-prevention services may use automated systems to assess the risk associated with a transaction.

We may use the risk information they provide when deciding whether further verification is required or whether an order can be accepted.

12. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

  • Request access to the personal information we hold about you.

  • Ask us to correct inaccurate or incomplete information.

  • Ask us to erase your information.

  • Ask us to restrict how your information is used.

  • Object to certain processing, including direct marketing.

  • Receive certain information in a portable format.

  • Withdraw consent where processing is based on consent.

  • Complain to the Information Commissioner’s Office.

These rights are not absolute and may depend on the lawful basis and circumstances of the processing.

To exercise a right, contact hello@foxandfolly.co.uk. We may need to request information to confirm your identity before responding.

13. Complaints

Please contact us first if you have concerns about how we use your personal information, and we will try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

14. Changes to This Policy

We may update this Privacy Policy when our services, technology, legal obligations or data-processing practices change.

The latest version will be published on this page with the updated date shown at the top.