Privacy policy

Privacy Policy
Last updated: September 26, 2026

Folk and Finds operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Folk and Finds is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how Folk and Finds Ltd ("we", "us", or "our") collects, uses, and discloses your personal information when you visit, use, or make a purchase from our store or otherwise communicate with us. For the purposes of the UK General Data Protection Regulation (UK GDPR), Folk and Finds Ltd is the "Data Controller" of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge the collection, use, and disclosure of your information as described in this policy.

  1. Personal Information We Collect or Process
We collect information that identifies or can reasonably be linked to you. We collect or process the following categories of personal information depending on how you interact with our store:
  • Contact details: Your name, billing address, shipping address, phone number, and email address.
  • Financial information: Transaction details, form of payment, payment confirmation, and masked payment details. Note: Full payment card processing is handled securely by our third-party payment gateways (such as Shopify Payments).
  • Account information: Your username, password, security questions, shopping preferences, and settings.
  • Transaction information: The items you view, put in your cart, add to your wishlist, purchase, return, exchange, or cancel, as well as your past purchase history.
  • Communications: The information you include when sending a customer support inquiry or interacting with us on social media.
  • Device and Usage information: Your IP address, browser type, device information, network connection, unique identifiers, and data regarding how and when you navigate our website (collected via cookies and similar technologies).
  1. Lawful Bases for Processing Your Data
Under the UK GDPR, we must have a valid legal reason to process your personal data. We rely on the following lawful bases:
  • Performance of a Contract: To process your payments, fulfill your orders, arrange shipping, and handle returns or exchanges.
  • Legitimate Interests: To maintain account security, prevent fraud, improve our website functionality, provide customer support, and understand how customers interact with our store.
  • Consent: To send you marketing communications via email or text message, and to deploy non-essential tracking cookies for personalized advertising. You can withdraw your consent at any time.

Legal Obligation: To comply with UK tax laws, accounting rules, or valid law enforcement requests.

3. How We Disclose Personal Information

In certain circumstances, we share your personal information with trusted third parties for legitimate business purposes:
  • With Shopify and related third-party vendors who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, and delivery couriers like Royal Mail).
  • With business and marketing partners to deliver tailored advertisements. For example, we use Shopify to support personalized advertising based on your online activity.
  • With professional advisors or authorities to comply with UK law, enforce our terms of service, or protect the rights and safety of our business and our users.
  1. International Data Transfers
Because our store is hosted by Shopify, the personal information we collect will be transferred to, stored, and processed outside of the United Kingdom, primarily in Canada and the United States.

Canada is recognized by the UK Government as providing an adequate level of data protection. For transfers to the United States and other countries, we ensure that appropriate safeguards are in place, such as the UK Addendum to the EU Standard Contractual Clauses, to guarantee that your data remains fully protected.

  1. How Long We Keep Your Data
We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or tax reporting requirements (such as holding order records for UK tax purposes). When we no longer require your data, it will be securely deleted or anonymized.

  1. Your Statutory Rights Under UK Law
As a UK resident, you have the following rights under the UK GDPR regarding your personal data:
  • Right of Access: The right to request a copy of the personal information we hold about you.
  • Right to Rectification: The right to ask us to correct inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten): The right to request that we delete your personal data under certain conditions.
  • Right to Restrict Processing: The right to ask us to stop using your data temporarily while a dispute is resolved.
  • Right to Data Portability: The right to request that we transfer your data to another organization.
  • Right to Object: The right to object to us processing your data, including an absolute right to stop your data from being used for direct marketing.

To exercise any of these rights, please contact us directly at hello@folkandfinds.com.

  1. Cookies and Trackers
We use cookies to power our store, remember your login details, and analyse website performance. You can manage your cookie preferences through your web browser settings or via the cookie consent banner displayed on our website.

  1. Contact Us and Complaints
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Folk and Finds Ltd
Email: hello@folkandfinds.com
Registered Office Address: First Floor, Swan Building, 20 Swan Street, Manchester, M4 5JW

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner's Office (ICO), by visiting their website at www.ico.org.uk or calling their helpline on 0303 123 1113.