Privacy policy

Last Updated: August 25, 2026

1. Overview

This Privacy Policy explains how Shmorgen ("we", "us", or "our") collects, uses, stores, and shares your personal data when you visit our website at https://www.shmorgen.com or make a purchase from us.

Shmorgen is the data controller for the purposes of the UK General Data Protection Regulation (UK‑GDPR) and the Data Protection Act 2018. We are an independently operated online retail store powered by Shopify.

By using our website, you agree to the data practices described in this Privacy Policy.

2. Personal Data We Collect

Information you provide to us

When you place an order or contact us, we may collect:

  • Full name
  • Billing address
  • Shipping / delivery address
  • Email address
  • Telephone number
  • Order details and purchase history
  • Customer service communications

Payment information

Payments are processed securely through Shopify Payments and trusted third‑party payment providers. We do not store or have access to your complete credit or debit card details. Your payment information is handled in accordance with the privacy policies of the relevant payment provider.

Automatically collected data

When you visit our website, we may automatically collect:

  • IP address
  • Device type and model
  • Browser type and version
  • Operating system
  • Time zone and location
  • Pages viewed and time spent
  • Website interactions and referral sources

This data is collected through cookies, log files, pixels, and similar tracking technologies.

3. How We Use Your Personal Data

We use your personal data for the following purposes, relying on the appropriate lawful basis under UK‑GDPR:

  • Processing and fulfilling your orders (performance of a contract)
  • Sending order confirmations, shipping updates, and tracking information
  • Providing customer support and handling returns or refunds
  • Detecting and preventing fraud, abuse, and security risks (legitimate interests)
  • Improving website functionality, performance, and user experience (legitimate interests)
  • Analysing website traffic and customer behaviour (legitimate interests or consent)
  • Sending marketing communications, promotions, and newsletters (consent, where required)

You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us.

4. Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve our website. The types of cookies we use include:

Essential cookies — Required for basic website functions such as the shopping cart, checkout, and account features. These cannot be disabled if you wish to use our services.

Analytics cookies — Help us understand how visitors use our website so we can improve performance and user experience.

Advertising cookies — Used to measure advertising effectiveness and deliver more relevant advertisements based on your browsing activity.

We may use services such as Google Analytics, Google Ads, Pinterest, and other advertising platforms. You can control or disable cookies through your browser settings. Please note that disabling cookies may affect certain features of our website.

5. Sharing Your Personal Data

We do not sell your personal data. We may share your data with trusted third‑party service providers who help us operate our business, including:

Shopify — Provides our e‑commerce platform, website hosting, checkout, and order management.

Payment processors — Process secure payment transactions on our behalf.

Shipping and fulfilment partners — Assist with order processing, packaging, and delivery.

Analytics and advertising providers — Help us understand customer behaviour and deliver relevant advertising.

These providers may access your data only to perform their services and are required to protect it in accordance with applicable data protection laws.

Legal requirements

We may disclose your personal data when required by law, regulation, legal process, or government request, or to protect our rights, property, or safety.

6. International Data Transfers

Your personal data may be processed and stored in countries outside the United Kingdom, including countries where our service providers operate. We take appropriate safeguards to ensure your data remains protected in accordance with UK‑GDPR, including using Standard Contractual Clauses where necessary.

7. Your Rights under UK‑GDPR

You have the following rights regarding your personal data:

  • Right of access — Request a copy of the personal data we hold about you.
  • Right to rectification — Request correction of inaccurate or incomplete data.
  • Right to erasure — Request deletion of your personal data, subject to legal exceptions.
  • Right to restrict processing — Request that we limit how we process your data.
  • Right to data portability — Request your data in a structured, commonly used format.
  • Right to object — Object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent — Withdraw consent at any time where we rely on it.

To exercise any of these rights, please contact us using the details below. We will respond within one month of receiving your request.

8. Data Retention

We retain your personal data only for as long as necessary to:

  • Fulfil and process your orders
  • Provide customer support and handle returns
  • Maintain business and accounting records
  • Prevent fraud and ensure security
  • Comply with legal obligations

When data is no longer needed, we will securely delete or anonymise it.

9. Data Security

We use appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These include SSL encryption, secure payment processing, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is completely secure.

10. Children's Privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate action.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.

12. Contact Information

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Store Name: Shmorgen
Website: https://www.shmorgen.com
Email: hello@shmorgen.com
Phone: +44 1708 479681
Address:
72 Heath Park Road, Romford, RM2 5XA, United Kingdom

Business Hours:
Monday — Saturday
9:00 AM — 6:00 PM (GMT)

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.