Privacy Policy
Effective date: 27 September 2026
Wendy Kawaii is operated by Wedyan Ibrahim Aloufi, a sole trader trading as Wendy Kawaii. This notice explains how we collect and use personal information when you visit wendykawaii.com, place an order, create an account, contact us or join our newsletter. Wendy Kawaii is the controller of this information. Contact: info@wendykawaii.com.
1. Information We Collect
We collect personal data to improve your experience and process your orders. The types of personal information we collect include:
- Personal Identification Information: Full name, email address, phone number, billing, and shipping addresses.
- Order Information: Product selections, payment details (processed via secure third-party payment gateways), and order history.
- Technical Information: IP address, browser type, and device information.
- Account and communication data: account details, messages, return or cancellation requests, and consent records.
2. How We Use Your Information
We use the information you provide for:
- Processing Orders: To fulfill your purchases, process payments, and arrange shipping.
- Communication: Sending order confirmations, tracking details, and responding to inquiries.
- Marketing: If you consent, we may send promotional offers and updates about new products.
- Analytics: To improve our website’s functionality, measure performance, and optimize the shopping experience.
3. How We Protect Your Information
We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, misuse, or disclosure. We also ensure that any third parties involved in processing your data maintain equivalent security standards.
4. Sharing Your Information
We do not sell your personal data to third parties. However, we may share your information in the following instances:
- Service Providers: We use trusted third-party services (such as payment gateways, shipping companies) to process orders and improve our services.
- Legal Requirements: We may disclose your information if required by law or to enforce our terms and conditions.
5. Your Data Protection Rights
As a UK resident, under the GDPR, you have the following rights:
- Right to Access: You can request copies of your personal data.
- Right to Rectification: You can ask us to correct inaccurate or incomplete data.
- Right to Erasure: You may request the deletion of your data under certain conditions.
- Right to Restrict Processing: You can request that we limit the use of your data.
- Right to Data Portability: You can ask for your data to be transferred to another organization.
- Right to Object: You have the right to object to the processing of your data, especially for direct marketing.
6. Changes to Our Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. Any updates will be posted on this page, and the effective date will be updated accordingly.
7. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please use our Contact Us page or email info@wendykawaii.com.
8. Lawful Bases for Processing
- Contract: to process payments, fulfil and deliver orders, manage accounts, returns, refunds and customer service.
- Legal obligation: to keep tax and accounting records, comply with consumer law, prevent unlawful activity and respond to lawful requests.
- Legitimate interests: to operate and secure the website, prevent fraud, improve our services and manage customer relationships, provided those interests do not override your rights.
- Consent: for optional marketing emails and non-essential cookies. You may withdraw consent at any time.
9. Service Providers and Data Sharing
We do not sell personal information. We share only what is necessary with providers that help us run the store, including website hosting and IT services; WooCommerce and payment providers offered at checkout, including WooPayments; print, fulfilment and delivery partners such as Printful and, where applicable, Lulu; form, newsletter and customer-support services; and analytics, security and performance services such as Google Site Kit and Jetpack. We may also disclose information when required by law or to protect legal rights.
10. International Transfers
Some service providers may process information outside the United Kingdom. Where a restricted transfer occurs, we use a lawful safeguard such as UK adequacy regulations, the UK International Data Transfer Agreement or an approved UK addendum to standard contractual clauses. Information about the relevant safeguard is available on request.
11. How Long We Keep Information
- Order, payment, refund, tax and accounting records: normally six years after the relevant accounting period.
- Customer-service, return and cancellation messages: normally two years after the matter is closed, unless they form part of a transaction record we must keep longer.
- Account information: while the account is active, then deleted or anonymised when no longer needed, except for transaction records we must retain.
- Technical and security logs: normally up to twelve months, unless needed for an investigation or legal claim.
- Newsletter information: until you unsubscribe or withdraw consent. We may keep a minimal suppression record so we do not contact you again.
12. Providing Information and Automated Checks
Information marked as required at checkout is needed to form and perform the sales contract. Without it, we may be unable to accept payment, fulfil an order or respond to a request. Optional marketing and non-essential cookies depend on consent. Wendy Kawaii does not make decisions based solely on automated processing that produce legal or similarly significant effects. Payment and fraud-prevention providers may run automated checks under their own privacy notices.
13. Email Newsletter and Marketing
If you join our newsletter, we collect your email address and a record of your consent. We use this information to send news, product updates and offers. Our lawful basis is consent. Joining is voluntary, and you can withdraw consent at any time through an unsubscribe link or by emailing info@wendykawaii.com. Withdrawal does not affect earlier lawful processing.
14. Complaints to the ICO
If you are unhappy with how we use your information, please contact us first so we can try to resolve the concern. You also have the right to complain to the Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint.
Last updated: 27 September 2026.