Privacy policy
Last updated: 5th May 2026
At Fidget & Sensory Squad, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, place an order, contact us, subscribe to our emails or shop with us in-store.
We handle personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable electronic marketing and privacy laws, including the Privacy and Electronic Communications Regulations (PECR).
Please read this Privacy Policy carefully so you understand how your information is used.
1. Who We Are
Fidget & Sensory Squad operates an online and physical retail business selling fidget toys, sensory toys, squishies, putty, slime and related products.
For the purposes of applicable data protection legislation, Fidget & Sensory Squad is the data controller responsible for deciding how and why your personal information is processed.
Our contact details are:
Fidget & Sensory Squad
Unit 5, Market House Arcade
Launceston, Cornwall
PL15 8EP
United Kingdom
Email: support@fidgetsensorysquad.co.uk
Website: https://www.fidgetsensorysquad.co.uk/
Our website is hosted on the Shopify ecommerce platform, which provides the technology used to operate our online shop.
2. What Personal Information We Collect
The personal information we collect depends on how you interact with our business.
Information you provide to us
This may include:
-
Your name.
-
Billing and delivery addresses.
-
Email address.
-
Telephone or mobile number.
-
Order details, including products purchased, order numbers, delivery preferences and purchase history.
-
Information you provide when contacting us with a question, complaint, return request or refund enquiry.
-
Information submitted through website contact forms.
-
Your email address and marketing preferences when you subscribe to our mailing list.
-
Information required to process refunds, exchanges or customer service requests.
-
Information provided when you choose to receive an email or text receipt for an in-store purchase.
Please do not send us unnecessary sensitive personal information through our contact forms or emails.
Payment information
Payments are processed through the payment services available at checkout or through our in-store payment facilities.
Your payment provider may collect and process payment card details, billing information and transaction information to complete your purchase and prevent fraudulent transactions.
We do not need your full payment card details to provide ordinary customer service. Payment card information is handled in accordance with the relevant payment provider's processes and security arrangements.
Information collected automatically
When you visit our website, certain information may be collected automatically, depending on your cookie preferences and the technologies in use. This may include:
-
IP address and general location information derived from it.
-
Browser type and device information.
-
Website pages visited and interactions with our website.
-
Referral sources and approximate visit times.
-
Cookie identifiers and similar online tracking information.
-
Website performance, security and diagnostic information.
We use this information where necessary to operate, secure and improve our website and, where permitted, to understand how customers use our online shop.
Information received from other organisations
We may receive relevant information from payment providers, delivery companies, fraud-prevention services and other service providers involved in fulfilling your order or providing our services.
Where applicable, we may also receive information from advertising or analytics providers, subject to the relevant privacy and cookie requirements.
3. How We Use Your Personal Information
We use your personal information for the following purposes.
Processing and fulfilling orders
We use your details to:
-
Accept and process orders.
-
Arrange payment and issue refunds where appropriate.
-
Prepare and dispatch purchases.
-
Arrange delivery or click and collect.
-
Send order confirmations and delivery updates.
-
Contact you about an issue affecting your order.
-
Maintain accurate sales and transaction records.
Customer service
We use information you provide to answer enquiries, manage complaints, process eligible returns and refunds, investigate delivery problems and provide after-sales support.
Email marketing
If you subscribe to our mailing list, we may use your email address to send information about new products, restocks, promotions, offers and business updates.
We send marketing communications where we have obtained valid consent or where another applicable legal permission allows us to do so.
You can unsubscribe from marketing emails at any time using the unsubscribe link provided in the email or by contacting us.
Unsubscribing from marketing will not prevent us from sending essential messages about an order you have placed.
Website operation and improvement
We use relevant technical and usage information to maintain our website, improve its functionality, understand customer journeys and identify technical issues.
Non-essential analytics and advertising cookies or similar technologies will only be used where the required consent has been obtained.
Fraud prevention and security
We may process relevant information to detect and investigate suspected fraud, prevent unauthorised transactions, protect our customers and safeguard our business.
Legal, accounting and regulatory obligations
We may use and retain relevant information to meet our legal obligations, maintain accounting and tax records, respond to lawful requests and establish, exercise or defend legal claims.
4. Our Lawful Bases for Processing
Under the UK GDPR, we must have a lawful basis for processing personal information. Depending on the purpose, we rely on the following bases.
Contract: We process information necessary to enter into and fulfil our contract with you, including processing orders, arranging delivery and providing customer support relating to purchases.
Legal obligation: We process and retain certain information to comply with applicable tax, accounting, consumer protection and other legal requirements.
Legitimate interests: Where appropriate, we process information for legitimate business interests, including website security, fraud prevention, handling enquiries, improving our services and protecting our legal rights. We consider the impact on your privacy and will not rely on this basis where your interests or fundamental rights override our interests.
Consent: We rely on your consent where required, including for relevant electronic marketing and non-essential cookies or tracking technologies.
Where processing is based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Email Marketing and Your Choices
When you sign up to receive marketing emails, we use the information you provide to send relevant communications about Fidget & Sensory Squad.
We may use a mailing-list service or another marketing platform to manage subscriptions and deliver our emails.
We will only send electronic marketing where permitted by applicable law. Where consent is required, we will obtain it before sending marketing messages. Where we rely on a permitted existing-customer exception, we will comply with the applicable conditions, including offering an opportunity to opt out when details are collected and in each subsequent marketing message.
You can unsubscribe at any time by clicking the unsubscribe link in a marketing email or contacting support@fidgetsensorysquad.co.uk.
We may retain limited information on a suppression list to ensure that we respect your decision not to receive further marketing.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support its operation and improve your shopping experience.
These technologies may be used for:
-
Essential functionality: Supporting website security, shopping baskets, checkout and other necessary website functions.
-
Preferences: Remembering settings or choices where applicable.
-
Analytics: Understanding website traffic and how visitors use our shop.
-
Advertising: Measuring advertising performance or delivering relevant marketing, where applicable.
Strictly necessary technologies may be used where permitted by law. We will request consent before using non-essential cookies or similar technologies where required.
You can manage your cookie choices through the cookie settings available on our website, where provided. You may also be able to manage cookies through your browser settings. Blocking certain cookies may affect website functionality.
For more information about the cookies and tracking technologies used on our particular website, please consult our cookie settings and any available cookie declaration.
7. Who We Share Your Information With
We do not sell your personal information to third parties.
However, we may share relevant information with trusted organisations where necessary to operate our business, provide our services or comply with the law.
These organisations may include:
Shopify: To host and operate our online store, process orders and provide ecommerce functionality.
Payment providers: To process payments, refunds and relevant transaction checks.
Delivery and fulfilment providers: To deliver your purchases and provide tracking or delivery updates.
Email and communications providers: To send order confirmations, customer service messages and permitted marketing communications.
Analytics and advertising providers: To measure website performance or support advertising where applicable and legally permitted.
Professional advisers: Such as accountants, solicitors or other advisers where necessary for legitimate business or legal purposes.
Authorities and law enforcement: Where disclosure is required by law or is necessary to protect our legal rights, prevent fraud or respond to a lawful request.
Our service providers may process information on our behalf or, in some cases, act as independent controllers for their own purposes. Their responsibilities depend on the services they provide.
We take reasonable steps to use appropriate contractual and security arrangements with service providers that process personal information for us.
8. International Transfers
Some of our service providers, including technology and ecommerce providers, may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will ensure that the transfer complies with applicable data protection law. Depending on the circumstances, this may involve an applicable adequacy regulation or decision, appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or another legally permitted transfer mechanism.
Where required, you may contact us for further information about the safeguards applicable to an international transfer.
9. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes explained in this Privacy Policy, including meeting legal, accounting and regulatory obligations.
Our retention approach is as follows:
Order and transaction records: Retained for the periods required by applicable tax, accounting and other legal requirements. Some records may need to be kept for six years or another applicable statutory period, depending on the record and circumstances.
Customer service correspondence: Retained for as long as necessary to respond to your enquiry, manage any complaint or dispute and protect our legal interests.
Marketing information: Retained while you remain subscribed or until your consent is withdrawn, where consent is the relevant lawful basis. We may retain limited suppression records to respect opt-out requests.
Customer account information: Retained while the account remains active and for an appropriate period afterwards where necessary for legal, accounting, security or dispute-resolution purposes.
Website and technical information: Retained according to the applicable operational, security and analytics requirements and the retention settings of the relevant service providers.
When information is no longer required, we will securely delete it, anonymise it or otherwise dispose of it in accordance with our retention procedures, unless the law requires us to retain it for longer.
10. How We Protect Your Information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, secure account practices, appropriate service-provider safeguards and the use of security features provided by our ecommerce and payment platforms.
No website, electronic transmission or storage system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we take appropriate steps to protect the information we hold.
If a personal data breach occurs, we will assess and respond to it in accordance with applicable legal requirements, including notifying the ICO and affected individuals where required.
11. Your Data Protection Rights
Under applicable data protection law, you may have the following rights in relation to your personal information:
Right to be informed: To understand how your information is collected and used.
Right of access: To request a copy of the personal information we hold about you.
Right to rectification: To request correction of inaccurate or incomplete information.
Right to erasure: To request deletion of your information in certain circumstances.
Right to restrict processing: To request that we limit the use of your information in certain circumstances.
Right to data portability: To receive certain information you have provided to us in a structured, commonly used and machine-readable format, and to request its transfer to another organisation where the legal conditions apply.
Right to object: To object to certain types of processing, including processing based on legitimate interests.
Rights relating to automated decisions: To benefit from the protections applicable to solely automated decisions that have legal or similarly significant effects, where relevant.
These rights are subject to legal conditions and exemptions, and not every right applies in every situation.
To exercise a right, contact support@fidgetsensorysquad.co.uk. Please explain your request clearly so we can identify the relevant information and respond appropriately.
We may need to verify your identity before responding. We will normally respond within one month of receiving a valid request, although the law permits extensions in certain circumstances.
We will not normally charge a fee for handling a request. A reasonable fee or refusal may be permitted in limited cases, such as manifestly unfounded or excessive requests, in accordance with the law.
12. Withdrawing Consent and Opting Out
Where we rely on consent to process your personal information, you can withdraw it at any time.
To stop receiving marketing emails, use the unsubscribe link in the email or contact us directly.
Where applicable, you can also change your cookie preferences through our website's cookie settings.
Withdrawing consent does not affect processing that was lawful before withdrawal, and it does not require us to delete information that we must retain to comply with the law or establish, exercise or defend legal claims.
13. Children's Privacy
Our products may appeal to children, but our website and online purchasing services are intended to be used by individuals who can lawfully enter into a purchase or by a parent, guardian or other authorised adult acting on their behalf.
We do not knowingly seek to collect unnecessary personal information directly from children.
If you believe a child has provided us with personal information inappropriately, please contact us so that we can review the circumstances and take appropriate action where necessary.
14. Third-Party Websites
Our website or communications may contain links to third-party websites, social media platforms or other online services.
If you follow a link to another website, that website will have its own privacy policy and data handling practices. We are not responsible for the privacy practices of websites that we do not operate.
We recommend reviewing the relevant privacy information before providing personal information to another organisation.
15. In-Store Purchases and Customer Communications
When you shop at our physical store, we may process information necessary to complete your transaction, provide a receipt, handle a refund or exchange, or respond to a customer service enquiry.
If you choose to receive a receipt by email or text, we will use the contact details you provide for that purpose.
Providing contact information for a receipt does not automatically mean you have agreed to receive marketing communications. We will only use your details for marketing where permitted by applicable law.
If we use CCTV or other in-store monitoring technologies, we will provide appropriate information about that processing through suitable signage or a separate privacy notice, as applicable.
16. Automated Decision-Making
We may use tools provided by our ecommerce, payment or fraud-prevention providers to help identify suspicious transactions or potential security risks.
We do not intend to make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on individuals without the protections required by applicable data protection law.
If our use of automated decision-making changes materially, we will update this Privacy Policy and provide any additional information required by law.
17. Complaints
If you have concerns about how we handle your personal information, please contact us first at support@fidgetsensorysquad.co.uk so we can investigate and attempt to resolve the matter.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
Website and contact details are provided for convenience; please check the ICO website for its current complaint procedures.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers, data processing practices or applicable legal requirements.
When we make changes, we will update the "Last updated" date at the top of this page. Where required by law, we will provide additional information or notify affected individuals about material changes before introducing new uses of their personal information.
We recommend checking this page periodically to remain informed about how we protect your privacy.
19. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how your personal information is handled, please contact us:
Fidget & Sensory Squad
Unit 5, Market House Arcade
Launceston, Cornwall
PL15 8EP
United Kingdom
Email: support@fidgetsensorysquad.co.uk
Website: https://www.fidgetsensorysquad.co.uk/
We will review your enquiry and respond in accordance with applicable data protection requirements.
Thank you for shopping with Fidget & Sensory Squad.