Privacy Policy

Last updated: 1 November 2026

At Charmed by Sunny, we care about your privacy just as much as we care about the little details that make our creations special.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, place an order or get in touch with us.

By using our website, you acknowledge the information provided in this policy.

1. Who We Are

Charmed by Sunny is a UK-based small business creating handmade, personalised keychains and bag charms.

For the purposes of UK data protection law, Charmed by Sunny is responsible for deciding how and why your personal information is used.

If you have any questions about this Privacy Policy or how we handle your information, please contact us:

Business name: Charmed by Sunny

Email: hello@charmedbysunny.co.uk

Website: charmedbysunny.co.uk

Business owner: Morgan Wyllie

2. Information We Collect

When you browse our website, place an order, or contact us, we may collect the following information:

Personal information

  • Your name

  • Email address

  • Billing and delivery addresses

  • Telephone number, if provided

  • Order details and purchase history

  • Personalisation requests, including chosen initials, colours, charms or other custom details

  • Messages or enquiries you send us

Payment information

Payments are processed securely through third-party payment providers. We receive information necessary to confirm and manage your payment, but we do not directly store your full payment details.

Website usage information

When you visit our website, certain information may be collected automatically, including:

  • IP address

  • Browser and device information

  • Pages visited and interactions with our website

  • Cookie preferences

  • Website performance and usage information

Some of this information is collected through cookies and similar technologies.

3. How We Use Your Information

We only use your personal information where we have a valid legal reason to do so.

  • Processing, creating and delivering your orders - Performance of a contract

  • Communicating about orders, deliveries and personalisation - Performance of a contract

  • Responding to general enquiries - Legitimate interests in providing customer service

  • Maintaining financial and tax records - Legal obligation

  • Protecting our website, preventing fraud and resolving disputes - Legitimate interests in keeping our business and customers secure, or legal obligation where applicable

  • Sending promotional emails where you have opted in - Consent

  • Using optional analytics or marketing cookies - Consent, where required by law

Where we rely on legitimate interests, we consider the impact on your privacy and only use information where those interests are not overridden by your rights.

We will not use your information for purposes that are incompatible with those explained in this policy without an appropriate legal basis.

4. Personalised Orders

Many of our products are handmade and customised especially for you.

When you request personalisation, we use the details you provide, such as initials, preferred colours and selected charms, solely to create and fulfil your order and deal with related customer service enquiries.

Please avoid including sensitive personal information in your personalisation requests.

5. How We Share Your Information

We respect your privacy and do not sell your personal information.

To operate our business, we may share necessary information with trusted third parties, including:

  • Squarespace: Our website and online store platform.

  • Payment providers: To securely process payments and refunds.

  • Delivery providers: Such as Royal Mail or other courier services, to deliver your orders.

  • Email service providers: To send order updates and, where applicable, marketing communications.

  • Professional advisers and authorities: Where reasonably necessary for accounting, legal compliance or resolving disputes.

We only share information reasonably necessary for these purposes. Third-party providers may also process your information under their own privacy policies.

6. Marketing Communications

If you choose to subscribe to our mailing list, we may occasionally send you emails about new products, special offers and updates from Charmed by Sunny.

You can unsubscribe at any time using the unsubscribe link in our marketing emails or by contacting us directly.

We will only send marketing communications where permitted by applicable law.

We will never require you to subscribe to marketing emails in order to complete a purchase.

7. Cookies and Website Analytics

Our website uses cookies and similar technologies to help it function properly and, where enabled, understand how visitors use it.

These may include:

  • Essential cookies: Necessary for basic website functions, such as shopping baskets, checkout and security.

  • Analytics cookies: Help us understand how visitors interact with our website so we can improve the shopping experience.

  • Marketing cookies: If enabled, these may help us understand the effectiveness of advertising or display relevant promotions.

We use Squarespace to host our website, and some cookies may be provided through its services or other integrations we choose to use.

Where required, we will ask for your consent before setting non-essential cookies.

You can manage your cookie choices through our website's cookie settings, where available, or your browser settings.

For further information about Squarespace's use of cookies, visit:

https://www.squarespace.com/cookie-policy

8. How Long We Keep Your Information

We only keep your personal information for as long as reasonably necessary for the purposes for which it was collected.

Generally:

  • Order and financial records: Normally retained for up to six years after the relevant financial year or transaction, as necessary to meet tax, accounting and legal obligations.

  • Customer enquiries: Retained for as long as reasonably necessary to respond, provide support and resolve any issues.

  • Marketing information: Retained until you unsubscribe or we no longer need it for the stated marketing purpose, subject to any records required to respect your preferences.

  • Website analytics: Retained according to our configured analytics and cookie retention settings.

When information is no longer needed, we will securely delete or anonymise it.

9. How We Protect Your Information

We take reasonable steps to keep your personal information safe and prevent unauthorised access, misuse, loss or disclosure.

Our website is hosted through Squarespace, which provides security features designed to protect website and customer information.

Payment information is handled by secure third-party payment providers.

Although we take appropriate precautions, no method of transmitting or storing information online can be guaranteed to be completely secure.

11. Your Data Protection Rights

Under UK data protection law, you may have the right to:

  • Access: Request a copy of the personal information we hold about you.

  • Correction: Ask us to correct information that is inaccurate or incomplete.

  • Erasure: Request deletion of your personal information in certain circumstances.

  • Restriction: Ask us to restrict how we use your information in certain circumstances.

  • Objection: Object to certain uses of your personal information.

  • Data portability: Request that certain information be provided to you or transferred to another organisation.

  • Withdraw consent: Withdraw consent at any time where we rely on it to process your information.

You have the right to object at any time to the use of your personal information for direct marketing.

These rights are subject to certain legal conditions and exceptions. For example, we may need to retain some order information to comply with tax or accounting obligations.

To exercise your rights, please contact us using the email address in Section 1.

We will respond to requests within the timeframes required by applicable data protection law.

13. Links to Other Websites

Our website may contain links to third-party websites, including social media platforms and our Etsy shop.

We are not responsible for the privacy practices of these external websites.

We encourage you to review their privacy policies before sharing personal information with them.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website services or legal requirements.

Any updates will be published on this page, with the revised date shown at the top.

We encourage you to check this page occasionally.

15. Contact Us

If you have any questions, concerns or requests relating to your personal information, please contact:

Charmed by Sunny

Email: hello@charmedbysunny.co.uk

Website: charmedbysunny.co.uk

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

ICO website: https://ico.org.uk

We would appreciate the opportunity to address any concerns directly, but you do not have to contact us before making a complaint to the ICO should you wish.