Privacy Policy

Last reviewed: July 2026. This operational template must be updated to reflect the actual plugins, payment providers, couriers, marketing tools and retention periods used by the business.

Who is responsible for your information

Molly’s Marvellous Creations is the controller of personal information collected through this website and in connection with customer orders. Contact us at contact@mollysmarvellouscreations.co.uk or at Unit 1, The Hoyland Hub / Potters Wheels, The Parade, Cloughfields Road, Hoyland, S74 0HR.

Information we collect

Depending on how you interact with us, we may collect your name, contact details, billing and delivery address, order details, account information, messages, marketing preferences, IP address, device and browser details, cookie identifiers, fraud-prevention information and payment-status information. Card details are generally processed directly by the selected payment provider rather than stored by us.

Why we use it

We use personal information to process and deliver orders, provide customer support, manage accounts and enquiries, prevent fraud, maintain records, improve the website, comply with legal duties and send marketing where permitted. Our lawful bases may include performance of a contract, legal obligation, legitimate interests and consent, depending on the activity.

Who we share it with

Information may be shared with service providers that help us operate the business, such as website hosting, WooCommerce extensions, payment providers, couriers, email providers, accountants, professional advisers, analytics or marketing providers, fraud-prevention services and public authorities where legally required. Providers may use information only for the relevant service and under appropriate safeguards.

International transfers

Some service providers may process information outside the United Kingdom. Where this occurs, we use an available lawful transfer mechanism and appropriate safeguards.

How long we keep it

We keep information only for as long as reasonably needed for the purpose collected, including order fulfilment, customer service, tax and accounting requirements, dispute handling, fraud prevention and legal claims. Exact periods should be recorded in the business retention schedule.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to processing, receive portable information and withdraw consent. You may also complain to the Information Commissioner’s Office. Contact us first if you would like us to review a concern.

Marketing

Marketing messages are sent only where permitted. You can unsubscribe using the link in a marketing email or by contacting us. Service and order messages are not marketing and may still be sent where necessary.

Security

We use reasonable technical and organisational measures to protect information. No online service can guarantee absolute security, so customers should also protect account passwords and contact us if they suspect unauthorised use.

Changes

We may update this notice when our services, providers or legal duties change. The latest version will be published on this page.