Privacy policy
Tatertot – Privacy Policy
Last updated: December 9th 2025
1. Introduction
Tatertot (“we”, “us”, “our”) is committed to protecting your privacy.
This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit www.tatertot.co.uk or make a purchase from our store.
We operate in the United Kingdom and comply with:
The UK GDPR
The Data Protection Act 2018
The Privacy and Electronic Communications Regulations (PECR)
By using our website, you agree to the terms of this policy.
2. Personal Data We Collect
We collect the following types of information:
A. Information You Provide
When you purchase, sign up, or contact us:
Name
Billing and shipping address
Email address
Phone number (if provided)
Payment details (processed securely by Shopify/your payment provider)
Any information you include in messages to us
B. Automatically Collected Information
When you browse our site, we automatically receive:
IP address
Browser type & device information
Pages viewed
Time spent on the site
Cookies and tracking data (see section 7)
C. Shopify Data Processing
Our store is hosted on Shopify, which collects and stores data such as:
Order details
Payment transaction reference numbers
Fraud analysis and security logs
Shopify may store your information on servers located outside the UK, including Canada and the United States. Shopify complies with UK GDPR and international data transfer rules.
3. How We Use Your Information
We use your personal data to:
Process and fulfil your orders
Send order confirmations and delivery updates
Respond to your questions or customer service requests
Prevent fraud or misuse of the website
Improve our website and customer experience
Send marketing emails (only if you choose to opt in)
Comply with legal or tax obligations
We never sell your personal data to third parties.
4. Legal Bases for Processing (UK GDPR)
We process your data under the following legal grounds:
Contract – to fulfil your order
Legitimate interests – to improve our services and prevent fraud
Consent – email marketing or optional cookies
Legal obligation – tax, accounting, and record keeping
5. Sharing Your Information
We only share your information with trusted third parties necessary to run our business, such as:
Shopify (store platform)
Payment processors (Shopify Payments, Stripe, PayPal, etc.)
Delivery couriers (Royal Mail, etc.)
Email marketing platforms (only if you opt in)
Each third party only receives the data needed to provide their service and must keep your information confidential.
6. International Transfers
Because Shopify is a global platform, your data may be transferred outside the UK.
Shopify ensures data is protected by:
Adequacy decisions
Standard Contractual Clauses
Supplementary safeguards
By using our website, you acknowledge that your data may be processed internationally under these protections.
7. Cookies
Our website uses cookies to:
Keep your shopping cart working
Improve website performance
Analyse site traffic
Remember your preferences
You can manage or disable cookies in your browser settings.
Some cookies are necessary for the site to function and cannot be disabled.
8. Marketing Communications
You will only receive marketing emails if you actively opt in.
You can unsubscribe at any time by clicking “unsubscribe” in any email or contacting us directly.
9. Data Retention
We keep personal data only as long as necessary to fulfil the purposes outlined in this policy:
Order records: 6 years (legal requirement)
Email marketing data: until you unsubscribe
Messages: for as long as needed to resolve your enquiry
10. Your Rights (UK GDPR)
You have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing
Withdraw consent at any time (for marketing or cookies)
Request a copy of your data (data portability)
To exercise your rights, email us at tiggytattoosmerch@gmail.com.
11. Security
We take data protection seriously and use:
Secure SSL encryption
Shopify’s built-in security features
Access limitations
Safe data retention practices
Despite this, no online system is 100% secure.
12. Children
Our website is not intended for individuals under 13.
We do not knowingly collect personal information from children.
13. Third-Party Links
Our website may contain links to third-party sites.
We are not responsible for their content or privacy practices.
14. Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version will always be posted on this page with an updated date.
15. Contact Us
For questions, data requests, or privacy concerns:
Tatertot – Privacy Enquiries
Email: tiggytattoosmerch@gmail.com
Website: tatertot.co.uk
Business location: United Kingdom