Privacy Policy

This policy explains how Smushy (“we”, “us”) collects and uses personal data when you use smushy.shop. We process personal data in line with the UK GDPR and the Data Protection Act 2018.

What we collect

• Order details: your name, email address, phone number, delivery address and the items you buy.
• Payment information: handled directly by Stripe. We receive only a payment reference and status, never your full card number.
• Technical data: basic information your browser sends, such as IP address and device type, and a cookie that keeps the contents of your bag.

How we use it

• To process, deliver and support your order (contract).
• To send order confirmations and delivery updates (contract).
• To prevent fraud and keep the Site secure (legitimate interests).
• To meet tax and accounting obligations (legal obligation).

We do not sell your personal data and do not use it for third-party advertising.

Who we share it with

• Stripe, to take payments.
• Our fulfilment partners (including CJdropshipping) and couriers, to pack and deliver your order.
• Our email and hosting providers, to run the Site and send emails.

Some of these providers process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

TikTok integration

We use the TikTok API, including Login Kit and the Content Posting API, only to publish videos and images of our products to our own TikTok business accounts. When an account is connected, we receive and store the access tokens and basic profile information (such as the account’s display name and open ID) that TikTok provides. We use them only to post content to that account and check the status of those posts.

We do not collect data about TikTok users who view or interact with our posts, and we do not sell or share TikTok data with anyone. Access can be revoked at any time from TikTok’s settings (Security and permissions, then Apps and services), after which we delete the stored tokens. TikTok’s own processing is covered by the TikTok Privacy Policy.

How long we keep it

Order records are kept for six years to meet UK tax requirements. TikTok access tokens are kept only while the account stays connected. Other data is deleted when it is no longer needed.

Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its use, or to receive a copy of it. Email hello@smushy.shop and we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Changes

We may update this policy. The latest version is always published on this page.

Contact

Privacy questions or requests: hello@smushy.shop