Privacy policy
Privacy policy
Updated: September 2026
1. Who we are
Creative Crowd Solutions Ltd, trading as Poppily, is the data controller for the personal information collected through this website. We're registered in England and Wales (company number 13124297), with our registered office at 26 Evelyn Avenue, Intake, Doncaster, DN2 6LN.
If you have any question about this policy, or about how we handle your information, email hi@poppily.co.uk.
2. What we collect
When you place an order, we collect your name, email address, delivery and billing address, phone number if you give one, and the details of what you ordered. If you're sending something to someone else, we collect the recipient's name and address.
Payment card details are handled by our payment providers, not by us. We never see or store your full card number.
When you contact us, sign up for emails, leave a review or create an account, we collect the information you provide.
When you use the website, we collect information about your visit automatically: your IP address, device and browser, the pages you view and how you arrived. Section 7 explains the cookies involved.
3. How we use it, and why we're allowed to
To take and fulfil your order, take payment, arrange delivery and deal with any return. We need this to perform our contract with you.
To keep records for tax and accounting. We're required to do this by law.
To reply to your enquiries, prevent fraud, keep the website secure and improve what we offer. These are our legitimate interests as a business.
To send you marketing emails, and to set non-essential cookies. We do these only with your consent, which you can withdraw at any time.
4. Who we share it with
We don't sell your personal information to anyone.
We share it with organisations that provide services to us, and only as far as they need it to provide those services:
Website and orders: Shopify, who host our website and process our orders and payments. Shopify also uses information about your visit and your order, together with data from other Shopify merchants, to provide services to us including fraud prevention, site search and product recommendations, email marketing and advertising measurement. No other merchant can see your information. Shopify's own use of your personal data, and the privacy rights you have with Shopify, are explained in the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers.
Payment: our payment providers, including Shopify Payments and PayPal, and Klarna where you choose to pay using their service.
Delivery: Royal Mail, who need your name and address to deliver your order.
Reviews: Judge.me, who manage our product reviews and send review invitations.
Analytics and advertising: Google, who provide our website analytics and advertising measurement.
Email: our email provider, where you've signed up to hear from us.
We also use other suppliers and software from time to time to help us run the shop, for example for accounting, customer service or website security.
This reflects the providers we use at the date shown at the top of this policy. We may add or change providers as the business develops, and when we do we require them to protect your information to the same standard.
We may also disclose information where we're required to by law, or to protect our legal rights.
5. Where your information is held
Some of the organisations above are based outside the United Kingdom, so your information may be transferred internationally. Where that happens, we rely on the safeguards approved under UK data protection law, such as UK adequacy regulations or the International Data Transfer Agreement, to make sure your information is protected to the same standard.
6. Marketing
If you sign up, we'll email you about new colourways, new work and occasional offers. You can unsubscribe using the link in any email, or by emailing hi@poppily.co.uk, and we'll stop straight away.
If you've bought from us, we may email you about similar items unless you tell us not to. Every email includes an unsubscribe link.
We'll always email you about an order you've placed. Those messages aren't marketing and you can't unsubscribe from them.
7. Cookies and similar technologies
Cookies are small files stored on your device when you visit a website.
Some are essential: they keep your basket working, remember you're logged in and let you check out securely. The site can't function without them.
Others are not essential. We use analytics cookies to understand how people find and use the site, and advertising cookies to measure how our advertising performs. We only set these with your consent.
You can change or withdraw your choice at any time through the cookie settings on this website, and you can block or delete cookies in your browser settings. Blocking essential cookies will stop parts of the site working.
8. How long we keep it
Order and transaction records are kept for seven years, as tax law requires.
Marketing contacts are kept until you unsubscribe.
Enquiries are kept for up to two years so we have a record of what was discussed.
Reviews are kept for as long as they're published. You can ask us to remove yours at any time.
9. Your rights
You have the right to ask us for a copy of the information we hold about you, to have it corrected if it's wrong, and to have it deleted where we no longer need it. You can also ask us to restrict how we use it, object to our using it, and ask us to transfer it to another provider. Where we rely on your consent, you can withdraw it at any time.
To exercise any of these, email hi@poppily.co.uk. We may need to confirm your identity first, and we'll respond within one month.
You can also ask Shopify directly to delete your data, or to stop it being used for advertising, through Shopify's privacy portal.
You can also ask Shopify directly to delete your data, or to stop it being used for advertising, through Shopify's privacy portal.
10. Keeping your information safe
We use appropriate technical and organisational measures to protect your information, and we limit access to those who need it. No system can be completely secure, but we take this seriously and review it as the business grows.
11. Changes to this policy
We may update this policy from time to time. The current version is always published here, with the date it was last updated at the top.
12. Complaints
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

