Rebekah Rose Creations
4 Bindon Road, West Lulworth, Wareham, Dorset BH20 5RU, UK
Email: sales@rebekahsart.com
This policy explains how we handle your personal data when you use our website and online shop, in line with UK GDPR and the Data Protection Act 2018.
1. Who we are
Rebekah Rose Creations is the data controller for information collected through this site. You can contact us using the details above.
2. What data we collect
We may collect:
- Identity and contact details – name, address, email, phone
- Order and payment details – products purchased, billing and shipping details (card data is processed by WooPayments; we do not store full card numbers)
- Account details – login, preferences (if you create an account)
- Marketing preferences – newsletter sign‑ups via MailerLite
- Technical and usage data – IP address, device and browser information, pages visited, collected via cookies and similar technologies, including Google Analytics and advertising pixels.
3. How and why we use your data
We use your data to:
- Process and deliver orders, take payment and manage returns (contract)
- Provide customer service and manage your account (contract and legitimate interests)
- Send service emails about your orders (contract and legal obligation)
- Send marketing emails where you have opted in; you can unsubscribe at any time (consent)
- Run our website, keep it secure, analyse performance (legitimate interests, via cookies/analytics)
- Run and measure Meta Ads and Google Ads, where cookie consent is obtained (consent and legitimate interests).
4. Who we share data with
We share data only with trusted providers that help us run our business:
- WooPayments – payment processing
- Mailerlite – email newsletters
- Meta (Facebook/Instagram) and Google – analytics and advertising tools
- Website hosting, IT/security providers, and delivery companies.
These organisations process data under their own privacy policies and/or our contracts with them. We do not sell your personal data.
5. International transfers
Some providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses to protect your information.
6. How long we keep data
We keep personal data only as long as needed:
- Order and account records – typically up to 6 years for tax and legal reasons
- Marketing data – until you unsubscribe or withdraw consent, after which we keep only minimal suppression data
- Analytics data – retained according to our settings in Google Analytics and similar tools.
7. Cookies
We use cookies and similar technologies to operate the shop, remember preferences, analyse traffic (Google Analytics) and support advertising (Meta Ads and Google Ads). On your first visit you will see a notice explaining cookies and, where required, asking for your consent. You can change your preferences via your browser or our cookie tools.
8. Your rights
You have the right to:
- Access the personal data we hold about you
- Ask us to correct or delete your data
- Ask us to restrict or object to our processing, including direct marketing
- Ask us to transfer your data to you or another provider (where applicable)
- Complain to the UK Information Commissioner’s Office at www.ico.org.uk.
To exercise your rights, email sales@rebekahsart.com
9. Security
We use appropriate technical and organisational measures to protect your data, including SSL encryption, access controls and working only with reputable service providers such as WooPayments, Mailerlite, Meta and Google.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page and will state the date it was last updated.
This policy was last updated 5 December 2025.