This site has limited support for your browser. We recommend switching to Edge, Chrome, Safari, or Firefox.

BIG SALE UP TO 80% OFF!

CART 0

Your items are reserved for minutes!
No more products available for purchase

Products
Total Free
American Express Apple Pay Mastercard Google Pay Visa

Your Cart is Empty

Privacy policy

Last updated: 6 October 2026

This Privacy Policy explains how Pip & Poppy, operated by LUDMILA KONS LTD, collects, uses, stores and protects personal information when you visit pippoppy.co.uk, make a purchase, use our services or contact us.

We process personal information in accordance with applicable United Kingdom data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, as amended from time to time, and, where applicable, the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Data Controller

The data controller responsible for your personal information is:

LUDMILA KONS LTD
Company Registration Number: 17500066
Company Type: Private Limited Company registered in England and Wales
Registered Office Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: support@pippoppy.co.uk
Website: pippoppy.co.uk

2. Personal Information We Process

Depending on how you use our website and services, we may process:

  • your full name;

  • billing and delivery addresses;

  • email address;

  • telephone number, where provided;

  • information about orders and purchases;

  • information relating to returns, refunds, complaints and customer support requests;

  • information necessary to process payments;

  • IP address;

  • browser, device and technical information;

  • information about how you use our website;

  • cookie and marketing preferences;

  • communications sent to our customer support team;

  • fraud prevention and security information, where necessary.

We do not normally store complete payment card details.

Payments are processed through Shopify and relevant third-party payment service providers.

3. How We Collect Personal Information

We may collect personal information:

  • directly from you when you place an order;

  • when you use certain features of our website;

  • when you create or interact with an account, where this functionality is available;

  • when you contact us;

  • when you request a return, refund or customer support;

  • automatically through cookies and similar technologies;

  • through service providers involved in operating our store, processing payments, fulfilling orders, delivering parcels or providing website functionality;

  • from fraud prevention, security or payment verification providers where appropriate.

4. How We Use Personal Information

We may use personal information to:

  • process and manage orders;

  • process payments;

  • organise fulfilment, shipping and delivery;

  • provide updates about your order;

  • manage returns, refunds, complaints and support requests;

  • communicate with customers;

  • prevent fraud, misuse and unauthorised activity;

  • protect the security and integrity of our website and services;

  • improve our services and shopping experience;

  • administer and protect our business;

  • comply with legal, regulatory, tax and accounting obligations;

  • send marketing communications where permitted by law;

  • measure or improve website performance where permitted;

  • manage your cookie and privacy preferences.

5. Lawful Bases for Processing

Under the UK GDPR, we must have a valid lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Performance of a contract
Where processing is necessary to enter into or perform a contract with you, including processing an order, payment, delivery, return or refund.

Legal obligation
Where processing is necessary to comply with legal, regulatory, tax, accounting or other obligations imposed on us.

Legitimate interests
Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms.

Examples may include fraud prevention, website security, protecting our business, responding to customer enquiries and improving our services.

Where personal information relates to a child, we take particular care when assessing whether legitimate interests are appropriate.

Consent
Where your consent is required, for example for certain marketing communications or for the use of non-essential cookies and similar technologies.

Where we rely on consent, you may withdraw it at any time.

Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.

6. Payments

Our online store uses Shopify and third-party payment providers to process transactions.

Payment information required to complete a transaction is transmitted to and processed by the relevant payment service provider under its own security measures and privacy practices.

We do not normally receive or store your complete card details.

Payment providers may process personal information independently where necessary to provide payment, fraud prevention and security services.

7. Sharing Personal Information

Where necessary to provide our services, we may share personal information with third parties including:

  • Shopify and other technology providers;

  • payment service providers;

  • fulfilment centres and warehouses;

  • Royal Mail and other delivery or logistics providers;

  • IT, hosting, security and infrastructure providers;

  • customer support service providers;

  • analytics providers, where permitted;

  • advertising and marketing providers, where permitted;

  • fraud prevention and payment verification providers;

  • professional advisers, including legal, accounting and tax advisers;

  • public authorities or regulatory bodies where required by law.

We only share personal information where necessary and in accordance with applicable data protection law.

8. International Transfers

Some service providers or partners we use may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection law.

Depending on the destination and circumstances, this may include relying on:

  • UK adequacy regulations;

  • approved contractual safeguards;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to approved standard contractual clauses;

  • another lawful transfer mechanism permitted under applicable legislation.

Where required, we also assess whether additional safeguards are necessary to protect your personal information.

9. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to comply with legal, accounting, tax, regulatory and reporting requirements.

The appropriate retention period may depend on:

  • our relationship with you;

  • order and transaction records;

  • returns and refunds;

  • customer support and complaints;

  • accounting and tax requirements;

  • fraud prevention and security;

  • potential or actual disputes;

  • applicable limitation periods;

  • other legal obligations.

When personal information is no longer required, we will delete, anonymise or securely dispose of it, unless we are required by law to retain it for longer.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Strictly necessary technologies may be used where required for the website to function, provide services requested by the user, maintain security, remember essential selections or support the checkout process.

Other technologies may be used for purposes such as:

  • analytics;

  • personalisation;

  • measuring website performance;

  • advertising;

  • remarketing;

  • understanding how visitors interact with the website.

Where consent is required under applicable UK law, non-essential cookies and similar technologies will only be used after valid consent has been obtained.

You can manage or change your preferences using the cookie controls available on our website.

You may also be able to manage certain cookies through your browser settings.

For further information, please see our Cookie Policy.

11. Marketing Communications

We may send marketing communications by email or other electronic means where permitted by applicable UK law.

Where consent is required, we will only send such communications after obtaining appropriate consent.

In some circumstances, applicable law may permit us to send marketing communications to existing customers about similar products or services, subject to the legal requirements that apply.

You can unsubscribe from marketing communications at any time by:

Communications necessary to manage orders, payments, delivery, returns, refunds, security or customer support are service communications and are not marketing communications.

12. Your Data Protection Rights

Depending on the circumstances and subject to applicable legal conditions and exemptions, you may have rights including:

  • the right to be informed about how your personal information is used;

  • the right to access your personal information;

  • the right to have inaccurate or incomplete information corrected;

  • the right to request deletion of your personal information;

  • the right to request restriction of processing;

  • the right to object to certain processing;

  • the right to data portability in certain circumstances;

  • rights relating to certain automated decision-making and profiling;

  • the right to withdraw consent at any time where processing is based on consent;

  • the right to raise concerns with the UK data protection regulator.

To exercise your rights, please contact:

support@pippoppy.co.uk

We may request information reasonably necessary to verify your identity before responding to your request.

We will respond within the time limits required by applicable data protection law.

13. Children's Privacy

Pip & Poppy sells children's products, but purchases through our online store are intended to be made by adults.

We do not intentionally seek to collect personal information directly from children where they do not have the legal capacity or appropriate authorisation to provide that information.

Children's personal information receives enhanced protection under UK data protection law.

Where we know that personal information relates to a child, we will take appropriate steps to ensure that the processing is fair, transparent, proportionate and designed with the child's rights and interests in mind.

Where an online service is offered directly to a child and we rely on consent as the lawful basis for processing, UK data protection law may require parental or guardian authorisation for children under the applicable age threshold.

If you are a parent or guardian and believe that a child has provided personal information to us inappropriately, please contact:

support@pippoppy.co.uk

We will review the matter and take appropriate action.

14. Security of Personal Information

We use appropriate and reasonable technical and organisational measures designed to protect personal information against:

  • accidental or unlawful loss;

  • unauthorised access;

  • misuse;

  • alteration;

  • disclosure;

  • destruction.

However, no method of electronic transmission or storage can guarantee absolute security.

Customers are also responsible for keeping any account credentials, passwords or access details confidential where applicable.

15. Third-Party Websites and Services

Our website may contain links to websites, platforms or services operated by third parties.

We are not responsible for how third parties collect or process personal information through their own services.

We recommend reviewing the privacy notices of third-party websites or services before providing personal information to them.

16. Automated Decision-Making and Profiling

We may use automated tools for purposes such as fraud detection, security, website analytics, personalisation or advertising, where permitted by law.

Where automated processing has legal or similarly significant effects on you, we will comply with the requirements of applicable UK data protection law.

Where profiling relies on non-essential cookies or similar technologies, we will obtain consent where required.

You may also have rights to object to or challenge certain types of automated processing.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • our services;

  • our business operations;

  • the way we process personal information;

  • our service providers;

  • applicable legislation or regulatory guidance.

The latest version will be published on pippoppy.co.uk with the updated revision date shown at the top of this page.

18. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can review and attempt to resolve the matter.

You also have the right to raise a complaint with the United Kingdom's data protection regulator.

As of 30 September 2026, the statutory regulator is the Information Commission, whose public-facing organisation continues to be known as the Information Commission's Office (ICO).

Information about complaints and data protection rights is available through the ICO's official channels.

Your right to complain to the regulator does not prevent you from seeking other remedies available under applicable law.

19. Contact Us

For questions about this Privacy Policy, how we process personal information or how to exercise your data protection rights, please contact:

Pip & Poppy
Operated by LUDMILA KONS LTD
Company Registration Number: 17500066
Registered Office Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: support@pippoppy.co.uk
Website: pippoppy.co.uk