Privacy policy

 

Last updated: 15th October 2025

This Privacy Policy describes how Cinnamon Daisy (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from www.cinnamondaisy.com (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.


Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.


Privacy Policy

We take safeguarding online privacy seriously. Please read the whole of this policy carefully as it sets out what information we may collect from you, how we may use it and your rights in respect of our use.

From time to time, we may need to change our privacy statement because of changes in our organisation, legislation or in our attempts to serve your needs better. We will use reasonable efforts to publish any changes to our privacy statement.

Cinnamon Daisy is responsible for collecting, processing, storing and safe-keeping personal and other information as part of providing a service and carrying out our regular business activities. We manage personal information in accordance with the Data Protection Act 2018.

Any questions regarding our processing of personal data should be directed to us at hello@cinnamondaisy.com

Scope

Our Privacy Policy governs any kind of processing where we are acting as a data controller or co-controller (including collection, use, transfer, storage and deletion) of personally identifiable information (any information that may be used to identify a physical person, and any other information associated therewith) about natural persons. This policy applies to our processing of data collected through any means, actively as well as passively, from persons located anywhere in the world.

We are guided by the following principles when processing data:

  1. We will only collect data for specific and specified purposes; we will make it clear at the point when we request your information, what we are collecting it for and how we are going to use it;
  2. We will not collect data beyond what is necessary to accomplish those purposes; we will minimise the amount of information we collect from you to what we need to deliver the services required;
  3. We will collect and use your personal information only if we have sensible business reasons for doing so, such as contacting you with a weekly newsletter and/or relevant offers from time to time;
  4. We will not use your data for purposes other than those for which it was collected, accepted as stated within this policy, or with your prior consent;
  5. We will seek to verify and/or update your data periodically and we will accept requests from you for amendment of the data held;
  6. We will apply high technical standards to make our processing of data secure;
  7. Except otherwise stated, we will not store data in identifiable form longer than is necessary to accomplish its purpose or as required by law.

 

Information Collected

The information we may collect about you could include, but is not limited to:

  1. Basic contact details including your name, address, phone number, email.
  2. Order information including your name, billing address, shipping address, payment confirmation, email address, phone number.
  3. Account information including your username, password, security questions.
  4. Shopping information including the items you view, put in your cart or add to your wishlist.
  5. Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services.

We will collect information from you when:

  1. You sign up to our newsletter or mailing list
  2. You download an opt-in
  3. You join a course or programme
  4. You contact us for information via our website or social media channels, by phone or email
  5. You post on our social media channels, website or blog
  6. You work with us in a commercial capacity

How we use your personal information:

  1. Providing Products and Services. We use your personal information to provide you with the Services in order to perform our contract with you, including to process your payments, fulfill your orders, to send notifications to you related to you account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, facilitate any returns and exchanges and to enable you to post reviews.
  2. Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements for products or services. This may include using your personal information to better tailor the Services and advertising on our Site and other websites.
  3. Security and Fraud Prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately.
  4. Communicating with you. We use your personal information to provide you with customer support and improve our Services. This is in our legitimate interests in order to be responsive to you, to provide effective services to you, and to maintain our business relationship with you.

 

Information Storage

If you provide us with your email address it will be stored, along with your first name, surname and date of birth via Klaviyo. Klaviyo have their own privacy policy and will protect your data. You can find out more here: https://www.klaviyo.com/legal/privacy/privacy-notice

We will never sell or share your personal information with third parties.

 

Legal basis for processing your data

The General Data Protection Regulation (GDPR) provides that processing of your data shall only be lawful if and to the extent that at least one of the following applies:

  1. You have consented
  2. For the performance of a contract
  3. For compliance with a legal obligation which we must perform
  4. To protect vital interests of your or another person
  5. It is in the public interest
  6. It is in the legitimate interests pursued by us or a third party

We collect data for the purposes set out above. Data is managed to ensure that it is either erased from our system when it is no longer required for the purpose for which it was collected, retained for legal reasons or minimised and retained.

Certain data collected from you such as data relating to your health, race or religion, has special protection and is limited to that permissible by law. In such circumstances where the data collected is special category data 

 

Links from our site

Our site contains links to and from other websites which are operated by individuals and companies over which we have no direct control. If you follow a link to any of these websites, please note that these websites have their own privacy and terms of use polices. We do not accept any responsibility or liability for these policies. We advise you to check the policies for third party sites before you submit any personal data to the website.

 

Marketing emails

We will make it as easy as we can for you to opt out of unwanted processing, providing it does not restrict our ability to provide you with the primary service you have requested.

Please note if you wish to unsubscribe from any marketing emails that you have signed up for, you can do so by clicking onto the unsubscribe link on the marketing email that was sent to you. It may take 24 hours for this to become effective.

 

Website analytics & targeted marketing 

We use website analytics to provide the best user experience and service to you and to evaluate and improve our site. We utilise third party data analytics service providers Google Analytics to improve our visibility and to monitor website browser behaviour and navigation across our site.

These third-party data analytics service providers collect this information on our behalf in accordance with our instructions and in line with their own privacy policies. Our service providers may collect the following data about the way you use our site, which will almost always be anonymised and aggregated before reporting back to us:

  1. Number of visitors to our site
  2. Pages visited whilst using the site and time spent per page
  3. Page interaction information, such as scrolling, clicks and browsing methods
  4. Source location and details about where users go when they leave the site
  5. Page response times and any download errors
  6. Other technical information relating to end user device, such as IP address or browser plug-in

From time to time we may use the information collected about you to present you with targeted advertisements using platforms such as Facebook, Google and/or Instagram.

 

User generated content

The Services may enable you to post product reviews and other user-generated content. If you choose to submit user generated content to any public area of the Services, this content will be public and accessible by anyone.
We do not control who will have access to the information that you choose to make available to others, and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties.

 

Changes to this policy & future processing 

We do not intend to process your personal information except for the reasons stated within this privacy notice. If this changes, this privacy notice will be amended and placed on our website.

 

Policy details

We continually review our privacy practices and may change this policy from time to time. When it does an amended privacy notice will be placed on our website.

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at hello@cinnamondaisy.com.
For the purpose of applicable data protection laws, we are the data controller of your personal information. Our representative in the UK is Emma Horsman.