Privacy Policy

Last updated: 25 August 2026

Mrs Casey is committed to protecting your privacy and handling your personal information responsibly and securely. This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us or purchase products from us.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025 where applicable.

This Privacy Policy should be read alongside our Cookie Policy, which provides further information about the cookies and similar technologies used on our website.

Who we are

For the purposes of data protection legislation, the organisation responsible for your personal information is:

Mrs Casey
Beech Croft
Church Street
Matlock
DE4 3BY

Email: sh@mrscasey.co.uk

If you have any questions about how we use your personal information or wish to exercise any of your data protection rights, please contact us using the details above.

What personal information do we collect?

Depending on how you interact with us, we may collect and process the following types of personal information:

Information you provide to us

This may include:

  • Your name

  • Email address

  • Telephone number

  • Billing and delivery address

  • Information provided when you contact us through an online contact form

  • Information you provide when placing an order

  • Details relating to your purchases and orders

  • Information contained in correspondence between you and us

  • Any other information you choose to provide to us

You should only provide information that is relevant to your enquiry or order.

Information collected when you use our website

We may collect certain technical information when you visit our website, such as your IP address, browser type, device information and information about how you interact with our website.

Some of this information may be collected through cookies or similar technologies. Further information about this can be found in our Cookie Policy.

How do we use your personal information?

We may use your personal information for the following purposes:

Processing and fulfilling orders

If you purchase products through our website, we use your information to:

  • Process and administer your order

  • Take payment

  • Arrange delivery or fulfilment

  • Communicate with you about your order

  • Provide customer service and after-sales support

  • Deal with returns, refunds or complaints

  • Keep appropriate records of transactions

The lawful basis for processing this information is generally performance of a contract, as processing your information is necessary for us to fulfil an order you have placed with us.

Responding to enquiries

If you contact us through our website, by email or by another method, we may use the information you provide to respond to your enquiry and provide the information or assistance you have requested.

The lawful basis for this processing will generally be legitimate interests, where responding to an enquiry is necessary for us to communicate with you and manage our business, or performance of a contract where your enquiry relates to an existing or prospective purchase.

Website administration and security

We may use personal information and technical information where necessary to operate, maintain and secure our website, prevent fraud and protect our systems and users.

The lawful basis for this processing will generally be legitimate interests.

Legal and regulatory requirements

We may process and retain certain information where this is necessary to comply with our legal or regulatory obligations, including accounting, tax, financial and record-keeping requirements.

The lawful basis for this processing is legal obligation where applicable.

Improving our website

We may use information about how visitors interact with our website to understand how the website is being used and identify ways in which it could be improved.

Where Google Analytics or other non-essential analytics cookies are used, these will only be used where the appropriate consent has been obtained. Analytics cookies are not generally considered strictly necessary under PECR.

Our lawful bases for processing

Data protection law requires us to have a lawful basis for processing personal information. Depending on the circumstances, we may rely on one or more of the following:

Performance of a contract – where we need to use your information to fulfil an order or provide goods or services you have requested.

Legitimate interests – where processing is necessary for the legitimate operation and administration of our business, responding to enquiries, maintaining website security and protecting our business, provided that these interests are not overridden by your rights and interests.

Legal obligation – where we are required to process information to comply with a legal or regulatory requirement.

Consent – where you have actively given us permission to process your information for a particular purpose, such as consenting to certain non-essential cookies.

We will only use consent where it is an appropriate lawful basis and will not make the provision of a service conditional on consent where consent is not necessary for that service.

Who do we share your personal information with?

We do not sell, rent or otherwise commercially distribute your personal information to third parties.

We may share personal information with trusted service providers where this is necessary to operate our website, process your order or provide services to you.

These may include:

WooCommerce

Our website uses WooCommerce to provide our online shopping functionality. Information required to process and administer your order may be processed through our website and WooCommerce.

PayPal

We use PayPal to process online payments.

When you choose to pay using PayPal, the information required to process your payment will be shared with PayPal. Payment processing is subject to PayPal’s own privacy practices and policies.

We do not need to collect or store your full payment card details ourselves when payment is processed through PayPal.

Google Analytics

We use Google Analytics to help us understand how visitors use our website and improve its performance.

Google Analytics may use cookies and collect information about website usage. We will only use non-essential analytics cookies where the appropriate consent has been obtained.

Further information about Google’s privacy practices can be found in Google’s own privacy documentation.

We may also disclose personal information where we are required to do so by law, court order, regulatory authority or other legal process.

How long do we keep your information?

We will only retain personal information for as long as it is reasonably necessary for the purpose for which it was collected.

The length of time we retain information will depend on the type of information and why we need it.

For example:

  • Order and transaction information may be retained for as long as necessary to fulfil the order, deal with queries, returns or disputes and comply with accounting, tax and other legal requirements.

  • Contact form and enquiry information will generally be retained for as long as necessary to respond to and manage the enquiry and any resulting relationship.

  • Technical and analytics information will be retained in accordance with the relevant service provider’s retention settings and our own requirements.

  • Where we no longer have a legitimate reason to retain personal information, it will be securely deleted or otherwise disposed of.

We periodically review the personal information we hold to ensure that it is not retained unnecessarily.

How do we keep your information secure?

We take reasonable and appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, destruction, alteration or disclosure.

These measures include appropriate access controls, secure systems and other safeguards appropriate to the nature of the information we hold.

However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

International transfers

Some of the third-party services we use may process personal information outside the UK.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable UK data protection legislation and that appropriate safeguards are in place where required.

Your data protection rights

Depending on the circumstances, you have a number of rights under UK data protection law.

These may include the right to:

  • Request access to the personal information we hold about you.

  • Request correction of inaccurate or incomplete information.

  • Request erasure of your personal information in certain circumstances.

  • Request restriction of processing in certain circumstances.

  • Object to certain types of processing, including processing based on legitimate interests.

  • Request data portability where applicable.

  • Withdraw consent where we are relying on your consent to process your information.

These rights are not absolute and may be subject to legal exemptions or other conditions.

If you would like to exercise one of your rights, please contact us at:

sh@mrscasey.co.uk

Alternatively, you can write to:

Data Protection Compliance
Mrs Casey
Beech Croft
Church Street
Matlock
DE4 3BY

We may need to request additional information to verify your identity before dealing with a request. This is a security measure designed to ensure that personal information is not disclosed to the wrong person.

Your right to complain

If you have any concerns about the way we collect, use, store or otherwise handle your personal information, we encourage you to contact us first so that we have an opportunity to investigate and resolve your concerns.

Data Protection Complaints

If you wish to make a formal complaint about the way we have handled your personal information, you can contact us using the details provided in the Contact us section of this Privacy Policy. Please provide as much information as reasonably possible about your concern, including the nature of the complaint and any relevant correspondence or information that may help us investigate it.

We will acknowledge receipt of a data protection complaint within 30 days and will review the matter carefully. We may contact you if we require further information or clarification to properly investigate your complaint.

We will take reasonable steps to investigate and respond to your complaint, and where appropriate, explain any action we have taken or intend to take to address the issue. We will handle complaints fairly, confidentially and in accordance with our obligations under applicable UK data protection legislation.

Making a complaint to us does not affect your right to complain directly to the Information Commissioner’s Office (ICO). The ICO is the UK’s independent regulator for data protection and information rights.

You can find further information about making a complaint to the ICO on its website:

Information Commissioner’s Office (ICO)

Cookies

Our website uses cookies and similar technologies to provide essential website functionality, remember information such as items placed in your shopping basket, and understand how visitors use our website.

Some cookies are strictly necessary for the website to operate and may be used without consent where they fall within the relevant exemption.

Other cookies, including analytics cookies such as those used by Google Analytics, are non-essential and require appropriate consent before they are placed on your device.

Our Cookie Policy explains the cookies we use, what they do and how you can manage your preferences.

Please note that deleting or blocking certain cookies may affect how the website operates.

Third-party websites

Our website may contain links to other websites, including third-party services.

If you follow a link to another website, that website will have its own privacy policy and terms of use. We are not responsible for the privacy practices, content or security of websites operated by third parties.

We recommend that you read the privacy information provided by any third-party website before submitting personal information.

Children’s privacy

Our website and products are not specifically directed towards children.

We do not knowingly collect personal information from children through our website. If you believe that a child has provided us with personal information without appropriate consent, please contact us so that we can investigate and, where appropriate, delete the information.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal requirements.

Any changes will be published on this page and the Last updated date at the top of the policy will be amended accordingly.

We recommend checking this page periodically to ensure that you are aware of the latest version.

Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact:

Mrs Casey
Beech Croft
Church Street
Matlock
DE4 3BY

Email: sh@mrscasey.co.uk