Draft for approval. Everything shown in a dashed box is still to be confirmed by the shop owner. This page is not final legal or delivery wording until those are filled in.
Who we are
This site is run by registered or trading name, trading as The Little Noel, address line 1, town, postcode, United Kingdom. We are the data controller for everything described here. Company number: company number, or “sole trader”. VAT: VAT number, or “not VAT registered”. You can reach us at hello@thelittlenoel.com">hello@thelittlenoel.com.
ICO registration: ICO registration number, or "not required"
What we collect, and why
| What | Why | Lawful basis | Kept for |
|---|---|---|---|
| Name, delivery and billing address, email, phone | To take your order, post it and talk to you about it | Performance of a contract | 6 years, for tax records |
| Order and payment record (not your card number) | Accounts, refunds, and proving what was sold | Legal obligation (tax) | 6 years from the end of the tax year |
| Email address for the restock note | To tell you when a batch lands | Consent, which you gave by ticking the box | Until you unsubscribe, then we delete it |
| Your gift note message | To write the card that goes in the parcel | Performance of a contract | Deleted with the order record |
| Basket contents and your cookie choice | So the basket survives a page change | Strictly necessary; no consent needed | Basket: 10 days. Choice: 6 months |
| Anonymous visit statistics | To see which pages are worth keeping | Consent, only if you accept analytics | analytics retention, e.g. 14 months |
We never ask for anything we do not need, and we do not sell or rent your details to anybody, ever.
Who processes data for us
- Shopify Inc. and Shopify International Ltd (Ireland)
- Our shop, basket, checkout, payments and order records all run on Shopify. When you pay, you are on Shopify's own checkout: Shopify is our payment and order-data processor, and your card details go to Shopify and its payment providers, never to us. See Shopify's privacy policy.
- Hostinger International Ltd
- Hosts this website. Their server keeps standard access logs (IP address, page, time) for security.
- carrier, e.g. Royal Mail Tracked 48
- Gets your name, address and sometimes your phone or email so the parcel can be delivered and tracked.
- Google LLC (Fonts, and Analytics if you accept it)
- Fonts are served from Google's CDN, which means your IP address reaches Google when a page loads. Analytics only loads after you accept it in the cookie banner, and we switch on IP anonymisation.
- review provider, e.g. Judge.me, or delete this entry
- Collects and shows reviews from people who have actually bought from us.
Some of these sit outside the UK. Where they do, the transfer relies on the UK extension to the EU Standard Contractual Clauses or an adequacy decision, which is the arrangement the ICO expects.
What we never do
- Store your card number. We have never had it and never will.
- Load analytics or advertising cookies before you say yes.
- Email you marketing you did not ask for.
- Make decisions about you automatically, or profile you.
Your rights
Under UK GDPR you can ask us to: show you what we hold, correct it, delete it, stop using it, hand it to you in a portable file, or stop a particular use. Where we rely on consent, you can take it back at any time; the unsubscribe link in every email does that in one click.
Email hello@thelittlenoel.com">hello@thelittlenoel.com and we will answer within one month. If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Children
This shop is meant for adults buying presents. We do not knowingly collect anything from under-13s. If a child's details have reached us, tell us and they go.
Cookies
Handled separately, with a list of every cookie, on the cookies page. You can change your mind there whenever you like.
Changes
If this notice changes we date the new version here. Last updated: 1 November 2026.