Privacy Policy — Island Originals™

Last updated: 28 July 2026

Who we are (Data Controller)

Island Originals™ (“we”, “us”, “our”) operates this website and is the controller of your personal data under UK GDPR.
Contact email: support@islandoriginals.co.uk
Privacy email: support@islandoriginals.co.uk
Business address: Island Originals™, Stellar House, 900 High Road, London N17 0DZ, United Kingdom

1) What we collect

• Contact & order information: name, email, phone number, billing or shipping address and order details.
• Payment information: processed securely by payment providers such as Shopify Payments and PayPal. We do not store full card numbers.
• Usage & device data: IP address, browser, device type, pages viewed and actions taken.
• Marketing preferences: your email or SMS choices and consent status.

2) How we use your data and our legal bases

• Process and deliver orders and provide support — Contract
• Account management, including order history, refunds and support — Contract / Legitimate interests
• Fraud prevention and website security — Legitimate interests / Legal obligation
• Improve our website, products and services — Legitimate interests
• Send offers and updates — Consent, which you may withdraw at any time
• Comply with applicable laws — Legal obligation

3) Sharing your data

We do not sell your personal data. We share it only with trusted service providers who help us operate our store and are required to protect your information:

• E-commerce and fulfilment: Shopify and Printful
• Payments: Shopify Payments and PayPal
• Delivery: Royal Mail, Evri, DHL or UPS, where applicable
• Marketing tools: email, SMS and analytics providers, where you have opted in

Where required, these partners act as data processors under our instructions.

4) International transfers

Some service providers may process personal data outside the United Kingdom. Where this happens, appropriate safeguards are used, including UK adequacy regulations or approved contractual protections.

5) Data retention

• Orders and invoices: normally retained for up to 6 years to meet tax and accounting requirements.
• Marketing data: retained until you unsubscribe or request deletion.
• Analytics and security logs: retained for a reasonable period needed to operate and protect the website.

6) Your rights under UK GDPR

You may ask us to access, correct, delete, restrict or object to certain uses of your personal data. You may also withdraw consent where consent is our legal basis and request data portability for information you provided to us.

To exercise your rights, email support@islandoriginals.co.uk We may request information to verify your identity. We normally respond within one month, although this may be extended by up to two additional months for complex requests.

You may complain to the UK Information Commissioner’s Office at ico.org.uk.

7) Cookies and tracking

We use cookies and similar technologies to operate the website, keep items in your basket, measure performance and personalise your experience. Blocking certain cookies may affect website features.

Types of cookies we may use:

• Essential cookies required for core website functions
• Performance and analytics cookies used to improve the website
• Marketing cookies used only with your consent where required

Where consent is required for non-essential cookies, we will request it through a cookie banner and respect your choices.

8) Children

Our website is not directed at children under 13, and we do not knowingly collect their personal data.

9) Security

We use appropriate technical and organisational measures to protect personal data. No method is completely secure, but we work to keep your information protected.

10) Automated decision-making

We do not use automated decision-making that produces legal or similarly significant effects.

11) Contact us

Privacy questions or requests: support@islandoriginals.co.uk
General support: support@islandoriginals.co.uk