GIFT WRAP AVAILABLE · ORDER EARLY FOR CHRISTMAS

Privacy Policy

Last updated: 2 September 2026

At TinyWishes, your privacy matters to us. This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit https://tinywishes.store, purchase our products, contact us or interact with our advertisements.

TinyWishes is operated by Shuzavi Limited, which is responsible for the personal information described in this policy.

1. INFORMATION WE COLLECT

We may collect the following categories of personal information:

• Contact information: your name, email address, telephone number, billing address and delivery address.
• Order information: products purchased, order history, delivery preferences, gift messages, returns and customer service requests.
• Payment information: payment confirmation, transaction references and limited payment details provided by our secure payment processors.
• Account information: login details and account preferences, where customer accounts are available.
• Technical information: IP address, browser type, device information, operating system, approximate location and website interaction data.
• Marketing preferences: newsletter subscriptions, advertising consent and communication preferences.
• Customer communications: information you provide when contacting us by email, telephone, WhatsApp or through our website.

If you send a gift directly to someone else, we may collect the recipient's name, delivery address and any gift message you provide. Please only provide information that is necessary to deliver your gift.

We do not need your full payment card details to provide customer support and will never ask you to email us your card number or security code.

2. HOW WE COLLECT INFORMATION

We collect information directly when you place an order, create an account, subscribe to marketing communications, contact customer support or complete a form.

We may also collect technical and browsing information automatically through our website, cookies and similar technologies, subject to applicable consent requirements.

We may receive information from payment providers, delivery companies, advertising partners and other service providers when necessary to operate our store.

3. HOW WE USE YOUR INFORMATION

We use personal information for the following purposes and legal bases, where the UK GDPR applies.

Fulfilling orders — Contract
To process payments, prepare purchases, arrange deliveries, provide order updates and handle returns.

Customer support — Contract or legitimate interests
To respond to enquiries, resolve complaints and assist with orders.

Fraud prevention and website security — Legitimate interests or legal obligation
To protect our customers, prevent fraudulent transactions and maintain website security.

Financial records and legal compliance — Legal obligation
To maintain appropriate accounting and tax records and comply with applicable laws.

Website improvement — Legitimate interests or consent, as applicable
To understand website performance, improve navigation and provide a better shopping experience.

Email and SMS marketing — Consent or another lawful basis where permitted
To send offers, product updates and promotional messages in accordance with applicable electronic marketing laws.

Personalised advertising — Consent where required
To measure advertising performance and deliver relevant advertising through services such as Google and Meta, where those services are enabled and applicable consent has been obtained.

Where we rely on legitimate interests, we consider those interests alongside your rights and reasonable expectations.

4. SHOPIFY AND PAYMENT PROCESSING

Our online store is hosted by Shopify.

Shopify processes information relating to your visits, orders and transactions to provide our online store, checkout, fraud prevention, security and other ecommerce services.

Shopify may also process customer information for additional services, personalisation and advertising where such features are enabled and permitted by applicable law.

Learn more about Shopify's processing of personal information:
https://www.shopify.com/legal/privacy/consumers

Shopify's privacy portal:
https://privacy.shopify.com

Payments are handled through the secure payment services made available at checkout. Payment providers process payment information in accordance with their own applicable privacy notices and contractual obligations.

We do not intentionally store complete payment card numbers or card security codes in our customer service systems.

5. GOOGLE AND META ADVERTISING

Where enabled, we may use Google Ads, Google Analytics, Google advertising tags, Meta Pixel and Meta Conversions API to understand advertising performance and improve our marketing.

Subject to your consent where required, these tools may collect or receive information about website visits, pages viewed, products viewed, shopping cart activity, purchases, browser identifiers and device information.

Where lawful and appropriately authorised, we may share relevant customer information with advertising partners for conversion measurement, matching and personalised advertising.

Such information may be processed by Google or Meta under their applicable privacy policies. These companies may use the information they receive for purposes described in their respective policies and settings.

We will not use customer information or photographs in advertising testimonials without the necessary permission.

Google privacy information:
https://business.safety.google/privacy/

Google Ads settings:
https://myadcenter.google.com/

Meta privacy information:
https://www.facebook.com/privacy/policy/

We do not knowingly use information collected directly from children for personalised advertising.

6. COOKIES AND TRACKING TECHNOLOGIES

Our website may use cookies and similar technologies in the following categories:

Strictly necessary cookies — Required for essential functions such as shopping baskets, secure checkout, fraud prevention and saving privacy preferences.

Analytics cookies — Help us understand website traffic, visitor interactions and store performance.

Advertising cookies — Help measure advertising campaigns and, where permitted, deliver relevant advertisements through Google, Meta and other advertising services.

Preference cookies — Remember selected website preferences and settings.

Where consent is required, we will request it before activating non-essential cookies or equivalent tracking technologies.

You can accept, reject or customise non-essential cookies through our cookie consent controls. You can change or withdraw your choices through the Cookie Preferences control on our website.

You can also manage certain cookies through your browser settings, although blocking essential cookies may affect website functionality.

7. EMAIL AND SMS MARKETING

If you subscribe to our newsletter or otherwise lawfully agree to receive promotional communications, we may send you information about new products, special offers, seasonal gifts and TinyWishes updates.

Where legally permitted, we may also contact existing customers about our own similar products, provided the applicable requirements are met and an opportunity to opt out is offered.

You can unsubscribe from marketing emails using the unsubscribe link included in each message.

You can withdraw marketing consent by contacting support@tinywishes.store.

Unsubscribing from marketing will not prevent us from sending essential transactional messages relating to your orders.

8. WHEN WE SHARE PERSONAL INFORMATION

We may share personal information with trusted service providers when necessary to operate our business.

These may include:
• Shopify and ecommerce technology providers.
• Payment processors and fraud prevention providers.
• Warehouses, fulfilment partners and delivery companies.
• Customer support and email service providers.
• Website analytics and advertising providers, where enabled.
• Professional advisers, regulators and public authorities where legally required.

We share only information reasonably necessary for the relevant purpose and apply appropriate contractual and security protections where required.

We do not sell customer contact lists for money.

However, certain advertising-related disclosures may be classified as a sale or sharing of personal information under some US state privacy laws. Where applicable, we will provide the required notices and opt-out choices.

9. INTERNATIONAL DATA TRANSFERS

Our business is based in the United Kingdom, but our technology providers, fulfilment partners and other service providers may process personal information in other countries.

Where international transfers are subject to UK or European data protection requirements, we will use an applicable adequacy decision or appropriate safeguards, such as approved contractual arrangements, where required.

You may contact us for further information about the safeguards relevant to your personal data.

10. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

Order and financial records may be retained for the periods required by applicable tax, accounting and commercial laws.

Customer service records are retained for as long as needed to resolve enquiries, manage complaints and establish or defend legal claims.

Marketing information is retained until you withdraw consent, opt out or the information is no longer required for the relevant purpose.

Cookie lifetimes vary depending on their purpose and the technology provider.

When information is no longer required, we delete or anonymise it in accordance with our applicable retention procedures, unless continued retention is legally required.

11. HOW WE PROTECT PERSONAL INFORMATION

We use appropriate technical and organisational measures intended to protect personal information against unauthorised access, disclosure, alteration or loss.

Our store uses secure checkout technology and payment processing services.

Access to customer information is restricted to authorised personnel and service providers who require it for legitimate business purposes.

No method of electronic transmission or storage is completely secure. If you have concerns about the security of your information, please contact us.

12. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of eligible personal information.
• Request restriction of certain processing.
• Receive certain information in a portable format.
• Withdraw consent where processing is based on consent.
• Object to processing based on legitimate interests.
• Object to direct marketing, including related profiling.

You have the right to object to the processing of your personal information for direct marketing at any time.

To exercise your rights, contact:
support@tinywishes.store

We may need to verify your identity before processing certain requests.

We will respond within the timeframe required by applicable law, subject to any lawful exceptions.

13. ADDITIONAL RIGHTS FOR US CUSTOMERS

Depending on your state of residence, you may have additional rights concerning access, correction, deletion and certain uses or disclosures of your personal information.

These may include the right to opt out of sales or sharing of personal information or its use for targeted advertising.

Where applicable, you can exercise these rights using our website's privacy controls or by contacting support@tinywishes.store.

We will not unlawfully discriminate against you for exercising your privacy rights.

14. CHILDREN'S PRIVACY

TinyWishes sells toys, gifts and family products, but our online shopping service is intended for adults purchasing on their own behalf or on behalf of children.

We do not knowingly solicit personal information directly from children or use children's personal information for targeted advertising.

Parents or guardians purchasing gifts should provide only the recipient information necessary for delivery.

If you believe a child has provided us with personal information without appropriate authorisation, please contact support@tinywishes.store so we can investigate and take appropriate action.

15. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, payment providers or social media platforms.

Those websites operate under their own privacy policies. We encourage you to review their privacy information before providing personal details.

We are not responsible for the privacy practices of unrelated third-party websites.

16. CHANGES TO THIS PRIVACY POLICY

We may update this policy to reflect changes in our operations, technology, legal obligations or privacy practices.

When we make changes, we will publish the revised policy on our website and update the date shown at the top.

Where required by law, we will provide additional notice or seek new consent before introducing materially different processing activities.

17. CONTACT US

If you have questions about this Privacy Policy or how we handle your personal information, please contact us.

Store: TinyWishes
Legal Business: Shuzavi Limited

Business Address:
51 Sand Piper Way
Newport
South Wales
NP10 8WX
United Kingdom

Customer Support and Privacy Enquiries:
support@tinywishes.store

Phone & WhatsApp:
+44 7507 364562

Website:
https://tinywishes.store

Contact Page:
https://tinywishes.store/pages/contact

18. COMPLAINTS

If you have concerns about how we handle personal information, please contact us first so we can investigate.

You also have the right to complain to the UK Information Commissioner's Office or another relevant supervisory authority where applicable.

Information Commissioner's Office:
https://ico.org.uk/make-a-complaint/

Thank you for trusting TinyWishes.

Little Gifts. Big Smiles. 💖