Skip to main content

Wendy Kawaii

Privacy Policy

Effective date: 27 September 2026

Wendy Kawaii is operated by Wedyan Ibrahim Aloufi, a sole trader trading as Wendy Kawaii. This notice explains how we collect and use personal information when you visit wendykawaii.com, place an order, create an account, contact us or join our newsletter. Wendy Kawaii is the controller of this information. Contact: info@wendykawaii.com.

1. Information We Collect

We collect personal data to improve your experience and process your orders. The types of personal information we collect include:

2. How We Use Your Information

We use the information you provide for:

3. How We Protect Your Information

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, misuse, or disclosure. We also ensure that any third parties involved in processing your data maintain equivalent security standards.

4. Sharing Your Information

We do not sell your personal data to third parties. However, we may share your information in the following instances:

5. Your Data Protection Rights

As a UK resident, under the GDPR, you have the following rights:

6. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. Any updates will be posted on this page, and the effective date will be updated accordingly.

7. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please use our Contact Us page or email info@wendykawaii.com.

8. Lawful Bases for Processing

  • Contract: to process payments, fulfil and deliver orders, manage accounts, returns, refunds and customer service.
  • Legal obligation: to keep tax and accounting records, comply with consumer law, prevent unlawful activity and respond to lawful requests.
  • Legitimate interests: to operate and secure the website, prevent fraud, improve our services and manage customer relationships, provided those interests do not override your rights.
  • Consent: for optional marketing emails and non-essential cookies. You may withdraw consent at any time.

9. Service Providers and Data Sharing

We do not sell personal information. We share only what is necessary with providers that help us run the store, including website hosting and IT services; WooCommerce and payment providers offered at checkout, including WooPayments; print, fulfilment and delivery partners such as Printful and, where applicable, Lulu; form, newsletter and customer-support services; and analytics, security and performance services such as Google Site Kit and Jetpack. We may also disclose information when required by law or to protect legal rights.

10. International Transfers

Some service providers may process information outside the United Kingdom. Where a restricted transfer occurs, we use a lawful safeguard such as UK adequacy regulations, the UK International Data Transfer Agreement or an approved UK addendum to standard contractual clauses. Information about the relevant safeguard is available on request.

11. How Long We Keep Information

  • Order, payment, refund, tax and accounting records: normally six years after the relevant accounting period.
  • Customer-service, return and cancellation messages: normally two years after the matter is closed, unless they form part of a transaction record we must keep longer.
  • Account information: while the account is active, then deleted or anonymised when no longer needed, except for transaction records we must retain.
  • Technical and security logs: normally up to twelve months, unless needed for an investigation or legal claim.
  • Newsletter information: until you unsubscribe or withdraw consent. We may keep a minimal suppression record so we do not contact you again.

12. Providing Information and Automated Checks

Information marked as required at checkout is needed to form and perform the sales contract. Without it, we may be unable to accept payment, fulfil an order or respond to a request. Optional marketing and non-essential cookies depend on consent. Wendy Kawaii does not make decisions based solely on automated processing that produce legal or similarly significant effects. Payment and fraud-prevention providers may run automated checks under their own privacy notices.

13. Email Newsletter and Marketing

If you join our newsletter, we collect your email address and a record of your consent. We use this information to send news, product updates and offers. Our lawful basis is consent. Joining is voluntary, and you can withdraw consent at any time through an unsubscribe link or by emailing info@wendykawaii.com. Withdrawal does not affect earlier lawful processing.

14. Complaints to the ICO

If you are unhappy with how we use your information, please contact us first so we can try to resolve the concern. You also have the right to complain to the Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint.

Last updated: 27 September 2026.