Privacy
policy.

We make personalised textiles by hand, with care from the first design details to the finished order. This Privacy Policy explains how Toodle-Loo Textiles collects and uses personal information when you visit our website or blog, contact us, submit a bespoke order request, place an order or buy from us in person.

This policy covers https://www.toodlelootextiles.store, our marblism.me blog or journal site, and orders and enquiries made through our forms, social media, messages, email, telephone and pop-up stalls.

1. Who we are and how to contact us

The data controller responsible for your personal information is:

• Trading name: Toodle-Loo Textiles
• Legal name: David Palmer trading as Toodle-Loo Textiles
• Business address: 36 South Market Street, Hetton-le-Hole, Sunderland, Tyne & Wear, DH5 9DR
• Email: info@toodlelootextiles.store
• Telephone: 01917 511923
• VAT status: Not VAT registered

Toodle-Loo Textiles is a sole-trader business, not a registered company. We have not appointed a Data Protection Officer; the owner handles data matters directly.

2. What personal information we collect

Depending on how you interact with us, we may collect:

• Your name, shipping address, email address and telephone number;
• Order, purchase, quote and payment-confirmation details;
• Design briefs and personalisation instructions, such as names, dates, wording, colours and sizes;
• Artwork, logos, photographs or other files you provide;
• Messages and other communications you send by Instagram DM, Facebook Messenger, text, email or telephone;
• Your marketing preferences and consent choices; and
• An optional club or discount code you choose to enter on our order form. This field records the code you provide for us to review; it does not automatically verify or apply a discount.

We do not collect or store your card number or bank account details.

3. How we collect your information

We collect information directly from you when you:

• Submit the bespoke or custom order request form on our website;
• Place an order or request a quote by message, email or telephone;
• Contact us through social media, including Instagram or Facebook Messenger;
• Buy from us at a pop-up stall or in person; or
• Choose to receive marketing or give permission for us to feature a photograph of you or an order.

4. Payments

Our website does not have a checkout or payment processor, and we do not collect or store card details on the website.

We take payment using payment links sent by message, text or email; tap-and-pay on the owner's business phone at stalls; or a numbered email invoice. Card and bank details are handled by the relevant payment provider or bank, not stored by us. We may keep a payment confirmation or transaction reference for order and accounting records.

5. Why we use your information and our lawful bases

We use order information to administer, make, ship and support your order, and to meet legal and accounting obligations. We do not use order information to build marketing or mailing lists.

We will not feature third-party or franchise artwork in our own marketing. If we ask to use a photograph or other material, we will seek any separate permission required.

6. Who we share your information with

We share only the information needed for the relevant purpose, and do not sell your personal information. We may share information with:

• Postal services and shipping or courier companies, for shipping and order fulfilment;
• Payment providers or banks, to process payments and provide payment confirmations;
• Email, social media and website-hosting providers that support our communications and websites;
• Our accountant and, where required, HMRC; and
• Professional advisers where necessary.

Service providers process information for the purposes described in this policy. We do not share your personal information with third parties for their own advertising.

7. International transfers

Some service providers may process information outside the UK. Where personal information is transferred internationally, we will take the steps required by data protection law to protect it, such as relying on an approved transfer safeguard or a recognised adequacy decision.

8. How long we keep your information

We keep personal information only for as long as reasonably needed for the purposes described in this policy.

• Order and customer records are generally kept for at least six years where needed for tax, accounting or legal purposes.
• Enquiry records are kept only as long as needed to respond and manage any follow-up.
• Marketing consent records are kept while you remain subscribed or until you withdraw consent, with a limited record of your choice retained where needed to honour it.
• Artwork and design files are kept for as long as needed to make and support your order. After that, you can ask us to delete them, unless we need to retain them for a legal or business reason.

9. How we protect your information

We use secure devices and limit access to personal information. The owner is the only person with access to customer information in our small workspace. We take reasonable steps to protect information against loss, misuse and unauthorised access.

10. Your data protection rights

Depending on the circumstances, you may have the right to:

• Ask for a copy of your personal information;
• Ask us to correct inaccurate or incomplete information;
• Ask us to delete information;
• Ask us to restrict how we use information;
• Object to certain uses of information;
• Ask to receive certain information in a portable format; and
• Withdraw consent at any time where we rely on consent.

These rights are subject to legal conditions and are not all absolute. To exercise a right, email info@toodlelootextiles.store or write to us at the business address above. We will respond within one month of receiving your request. We may need to ask for information to confirm your identity.

You can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by telephone on 0303 123 1113.

11. Cookies and similar technologies

Our website and blog may use cookies and similar technologies to support their operation. Embedded social media content may also use technologies controlled by the relevant platform. You can manage cookies through any cookie settings tool provided on our sites or through your browser settings. Where consent is required for non-essential cookies, we will ask for it.

12. Marketing

We only send marketing messages where you have given consent. You can opt out at any time by using the unsubscribe option in a message, replying to the message where that option is available, or contacting us at info@toodlelootextiles.store.

We do not use order information to create marketing or mailing lists. If we run advertising on social media, we use the platforms' own tools; those platforms process information under their own privacy policies. We do not sell or provide customer lists to third parties for their advertising.

13. Children

We make personalised items for children, but orders and contracts are handled with adults. We do not knowingly collect personal information directly from children. If an order includes a child's name or other details, those details are supplied by the adult customer.

14. Disputes and alternative dispute resolution (ADR)

We are not obliged to use an ADR provider and do not use one.

If you have a dispute about your order, please contact us first at info@toodlelootextiles.store and we will work to put it right. Nothing in this policy affects your statutory rights, including your right to go to court or to refer a consumer dispute to the appropriate authorities.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our business, the information we handle or our legal obligations. The latest version will be published on our website with its updated date.

If you have any questions about privacy or how we handle your information, please email us at info@toodlelootextiles.store — we're happy to help.