Legal
Privacy Policy
What we collect when you shop with The Dollery, why we need it, and what we do with it.
Last updated
Who we are
The Dollery sells Arias and Llorens dolls to customers in the United Kingdom.
Reborn Dolls & Co. · Registered in England, company number 17166512.
If you have a question about your information, email info@reborndollshop.co.uk.
What we collect
When you place an order
- Your name and delivery address.
- Your email address, so we can confirm your order and tell you when it has been sent.
- A telephone number, if you give one — used only for delivery.
- What you ordered, what you were charged, and the status of the order.
When you pay
Your card details are entered directly with Stripe, our payment processor, in their own secure frame. They do not pass through our website and we do not store them. We keep a payment reference and whether the payment succeeded, so we know your order is paid.
When you contact us
Your name, your email address, an order number if you give one, and your message. This is sent to our support inbox by email — it is not added to a database or a marketing list.
When you browse
A basket reference is stored on your device so your basket survives between visits. It is a random value that identifies a basket and nothing about you. Our hosting and network providers also process technical information such as IP addresses in order to serve pages and protect the site.
Why we use it
- To take, process and deliver your order.
- To send you order confirmation and dispatch emails.
- To answer your questions and handle returns and refunds.
- To keep proper business and accounting records.
- To keep the shop working and protect it from fraud and abuse.
We do not sell your information, and we do not send marketing email. If we introduce a newsletter it will be something you choose to join, and you will be able to leave at any time.
Who we share it with
We share your information only with the providers who help us run the shop, and only with what they need. They act on our instructions.
| Provider | What they do |
|---|---|
| StripePayment processing | Handles card payments and receives your payment details directly. We receive a payment reference and the result, never your card number. |
| ResendEmail delivery | Delivers order confirmations, dispatch emails and replies to enquiries. Receives your email address and the contents of those messages. |
| CloudinaryProduct image hosting | Stores and serves the photographs of our dolls. Handles no customer information. |
| MongoDB AtlasDatabase hosting | Stores our product catalogue, baskets and orders. |
| Analytics and advertising providersMeasurement — only with your consent | Where you have agreed, receive information about pages viewed and orders placed. Never your name, email, telephone or address. See the analytics section below. |
| Our hosting and network providersRunning the website | Serve the pages and protect the site from attack, which involves processing technical information such as IP addresses. |
We also give your name and delivery address to the carrier who brings your parcel, and we may share information where the law requires it.
Analytics and advertising
We do not currently run any analytics or advertising technologies on The Dollery.
Cookies
Our cookie policy lists every cookie we set, what each one does, and lets you change your preferences at any time.
How long we keep it
We keep order records for as long as we need them to run the business and to meet our legal and accounting obligations. Baskets that are not used are removed automatically after a short period. Enquiries stay in our support inbox for as long as they are useful for answering you.
We are finalising our written retention periods and will set them out here once they are agreed.
Security
Our site is served over an encrypted connection. Card details are handled by Stripe and never reach our systems. Access to order information is limited to the people who need it to run the shop.
No system is completely secure, and we do not claim otherwise. If something goes wrong we will handle it in the way the law requires.
Your rights
Under UK data protection law you have rights over your personal information, including asking for a copy of it, asking us to correct it, and asking us to delete it in some circumstances.
To ask about any of this, please contact us. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office, the UK data protection regulator.
Changes to this policy
If we change how we handle your information — for example, if we introduce analytics — we will update this page and, where the change matters, ask for your consent again.
Still need help?
If anything here does not answer your question, get in touch and a person will reply.