Privacy Notice
Last updated: 6 October 2026
Who is responsible for your information
Laura Foxcroft, trading as Lavender Animal Care, is responsible for customer information used to run this shop and respond to enquiries. Address: 19 Cobblewood, Middlesbrough, TS3 9RW, United Kingdom. This address is for postal correspondence only. No customer visits or collections. Privacy contact: lavender-ss@outlook.com.
This notice covers our use of customer and enquiry information. Payhip and payment providers also process information under their own privacy notices.
Information we use and where it comes from
We use information you supply when buying, contacting us or choosing to receive marketing, and order information made available to us by Payhip. This may include your name if supplied, email address, product and order details, payment status, transaction references, country or tax information, download/access records available in Payhip, correspondence and marketing choices. Please do not send sensitive personal information unless it is necessary to resolve your enquiry.
Payhip and Stripe handle checkout and payment information. We do not receive your full card number or security code through the normal checkout. The providers may collect technical, device, fraud-prevention and transaction information as described in their own notices.
Why we use your information
- To process your order, provide files, receipts and purchase support: necessary to perform our contract with you or take steps at your request before a contract.
- To keep records required for tax, accounting and other legal duties: compliance with legal obligations.
- To answer general enquiries, resolve complaints and protect the shop against fraud or misuse: our legitimate interests in running a reliable shop, balanced against your rights.
- To send optional product news and offers: your consent. You can withdraw it at any time using the unsubscribe link or by contacting us. Service emails about your purchase are separate from marketing.
We need your email address and the checkout details requested by the platform to deliver and administer an order. If required information is not supplied, we may be unable to fulfil it. Signing up for marketing is optional.
Who receives information
Information may be handled by Payhip for hosting, checkout and downloads; Stripe for payments; Microsoft Outlook for email correspondence. We do not use a separate mailing-list service. Relevant records may also be shared with professional advisers or authorities where necessary for accounting, a legal obligation or a legal claim. We do not sell your customer contact information.
Provider information:
- Payhip: https://payhip.com/privacy
- Payhip cookies: https://payhip.com/cookies-policy
- Stripe: https://stripe.com/gb/privacy
- Microsoft Outlook: https://www.microsoft.com/en-gb/privacy/privacystatement
International processing
Our providers may process information outside the UK. Payhip describes EU hosting and possible processing outside the EEA in its privacy notice. Microsoft describes processing in the UK, United States and other countries where it or its suppliers operate. Stripe describes international processing, including in the United States and India.
Microsoft and Stripe describe safeguards such as recognised adequacy arrangements and approved contractual safeguards, including applicable UK arrangements, in their notices. Payhip's notice describes contractual measures for overseas suppliers. The provider notices linked above explain their processing and contact routes. You can contact us or the relevant provider for further information or copies of applicable safeguards. We do not promise that all information remains in the UK.
How long we keep information
We keep information only as long as necessary for the relevant purpose and legal requirements. Our schedule is:
- Order and accounting records: at least five years after the 31 January submission deadline for the relevant Self Assessment tax year, to meet HMRC record-keeping requirements; longer where a specific investigation, late-return rule or other legal duty requires it.
- Enquiry and support correspondence: normally up to two years after resolution, to handle follow-up questions and recurring download issues. Where correspondence is needed for an unresolved complaint, dispute or legal claim, keep only the relevant records for as long as that matter and applicable legal requirements justify.
- Marketing contact information: until you unsubscribe, withdraw consent or an annual review finds that consent is no longer reliable or the information is no longer needed. We retain only the minimum suppression information needed to honour an opt-out for as long as needed to prevent accidental re-subscription or further unwanted messages, reviewed annually; this is not an active marketing list.
When information is no longer needed, we delete it or anonymise it. Provider-held records may be subject to the providers' own lawful retention requirements.
Your rights and complaints
Depending on the circumstances and legal basis, you may request access, correction, erasure, restriction or transfer of your information, and object to processing based on legitimate interests. You can withdraw marketing consent at any time without affecting earlier lawful processing. Some records must be retained to meet legal duties or handle valid claims.
Contact lavender-ss@outlook.com to make a request. We may need proportionate information to verify your identity. You can complain directly to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or by telephone on 0303 123 1113. Please contact us if you would like us to address a concern first.
We do not use customer information to make solely automated decisions that have legal or similarly significant effects. Providers may operate their own payment and fraud checks; their notices explain their processing.