Last updated: 7 January 2026
1. Introduction
Hello Crow Ltd ("we", "us", or "our") is committed to protecting your privacy and handling your personal data responsibly. This privacy policy explains how we collect, use, store, and protect your personal information when you use our website at shop.hellocrow.uk and purchase our digital products.
We are the data controller responsible for your personal data. This means we determine how and why your personal data is processed.
2. Our Contact Details
Company name: Hello Crow Ltd
Contact form: https://shop.hellocrow.uk/contact
3. Personal Data We Collect
When you make a purchase or interact with our website, we may collect the following personal data:
• Identity data: your name
• Contact data: your email address and billing address
• Transaction data: details of products you have purchased and payment information
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website
• Usage data: information about how you use our website and products
We do not collect any special category data (such as information about your health, religious beliefs, or political opinions).
4. How We Collect Your Personal Data
We collect personal data through:
• Direct interactions: when you place an order, create an account, or contact us
• Automated technologies: as you navigate our website, we automatically collect technical data using cookies and similar technologies
• Third-party sources: we receive personal data from our payment processors (Stripe and PayPal) when you complete a purchase
5. How and Why We Use Your Personal Data
We only use your personal data when we have a lawful basis to do so. The table below sets out the purposes for which we use your data and the legal basis for each:
5.1 Processing and fulfilling your orders
Data used: Identity, contact, and transaction data
Lawful basis: Performance of a contract with you
5.2 Managing payments and preventing fraud
Data used: Identity, contact, transaction, and technical data
Lawful basis: Legitimate interests (to protect our business from fraud and recover debts)
5.3 Administering our website and business operations
Data used: Technical and usage data
Lawful basis: Legitimate interests (to run our business efficiently, provide administration and IT services, and ensure network security)
5.4 Analysing website usage and improving our services
Data used: Technical and usage data (via Google Analytics)
Lawful basis: Consent (obtained via our cookie consent mechanism)
5.5 Measuring advertising effectiveness
Data used: Technical and usage data (via Meta pixel for conversion tracking)
Lawful basis: Consent (obtained via our cookie consent mechanism)
5.6 Complying with legal obligations
Data used: All relevant personal data
Lawful basis: Legal obligation (to comply with tax, accounting, and other regulatory requirements)
6. Who We Share Your Data With
We share your personal data with the following third parties:
6.1 Service providers
• Big Cartel (our e-commerce platform) – processes your order and stores customer data on our behalf
• Stripe (payment processor) – processes your card payments securely
• PayPal (payment processor) – processes your PayPal payments
6.2 Analytics and advertising
• Google Analytics – to analyse how visitors use our website
• Meta (Facebook) – to track conversions from our advertising
6.3 Professional advisers and authorities
We may share your data with our professional advisers (such as accountants) or regulatory authorities where required by law.
We require all third parties to respect the security of your personal data and treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your data for specified purposes.
7. International Transfers
Some of our third-party service providers are based outside the United Kingdom. This means your personal data may be transferred to, stored, or processed in countries outside the UK, including the United States (where Big Cartel, Stripe, PayPal, Google, and Meta are headquartered).
Whenever we transfer your personal data internationally, we ensure appropriate safeguards are in place to protect it. These may include transfers to countries that the UK government has deemed to provide adequate protection, or the use of specific contracts approved by the UK (such as the International Data Transfer Agreement or the EU Standard Contractual Clauses as adopted under UK law).
Please contact us if you would like further information about the specific safeguards applied to your personal data when it is transferred internationally.
8. How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
Our retention periods are as follows:
• Order and transaction data: We retain this data indefinitely for our business records, customer service purposes, and to comply with legal obligations such as tax and accounting requirements.
• Analytics data: Retained in accordance with Google Analytics and Meta’s standard data retention settings (typically 14–26 months).
In some circumstances, we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.
9. Your Rights
Under UK data protection law, you have the following rights:
• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete personal data.
• Right to erasure: You can ask us to delete your personal data in certain circumstances.
• Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
• Right to data portability: You can ask us to transfer your data to another organisation or directly to you in a structured, commonly used format.
• Right to object: You have the right to object to our processing of your personal data where we are relying on legitimate interests as our lawful basis.
Right to withdraw consent: Where we rely on your consent to process your data (such as for analytics cookies), you have the right to withdraw that consent at any time. You can do this by adjusting your cookie preferences on our website. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. There is no fee to exercise your rights, although we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
10. Right to Complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:
Website: www.ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
11. Cookies
Our website uses cookies to distinguish you from other users, help the website function properly, and collect information about how you use our site.
We use the following types of cookies:
• Essential cookies: Required for the website to function, such as keeping items in your shopping cart and enabling you to complete purchases.
• Analytics cookies: Google Analytics cookies help us understand how visitors interact with our website.
• Advertising cookies: The Meta pixel helps us measure the effectiveness of our advertising by tracking conversions.
You can manage your cookie preferences through our cookie consent banner when you first visit our website, and you can change your preferences at any time by adjusting your browser settings.
12. Third-Party Links
Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.
13. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will update the "Last updated" date at the top of this policy. We encourage you to review this policy periodically to stay informed about how we protect your data.
14. Contact Us
If you have any questions about this privacy policy or our data practices, or if you wish to exercise any of your rights, please contact us:
Contact form: https://shop.hellocrow.uk/contact