Website Privacy & Cookies Policy

Effective Date: 05/10/2025

1. Introduction

​Welcome to DoodlesGifts.com®. We value your privacy and are committed to protecting your personal data. This policy explains how Doodles Gifts Limited ("we", "us", "our") collects, uses, and protects your information/data in line with GDPR when you visit our website, purchase products, or interact with us. Doodles Gifts Limited trading as DoodlesGifts.com® registered in England and Wales (Company Registration Number 16178175).

​

Please note, we may need to amend this Privacy Policy from time to time, so check back if you’d like to stay up to date, all changes will be updated and published here.


2. What Information We Collect

We may collect and process the following types of data:

​

• Contact Details: Name, email address, phone number, delivery and billing address.
   

• Account Information: Login credentials, purchase history, feedback, review responses, and customer service interactions.
   

• Payment Details: Securely processed via third-party providers (we do not store card details).
   

• Technical Data: IP address, browser type, device information, website interaction, and cookies.
   

• Marketing preferences: Your choices regarding newsletters, reviews, promotions & competitions.

3. How We Use Your Information

​​

We use your data to:

​​​

• Process orders, deliver products and manage your experience bookings & E-Voucher delivery.
   

• Communicate with you about your order or account.
   

• Improve our website and customer experience.
   

• Provide and improve customer service.
   

• Send marketing communications (only if you opt-in).
   

• Detect and prevent fraudulent activity and ensure security.
   

• ​Comply with legal obligations.

​

4. Sharing Your Information

​

We do not sell your data. We may need to share it with trusted only third-party providers:

​​

Internal Third Parties:

​

Within the Doodles Gifts Limited Group to fulfil certain orders when necessary.

 

External Third Parties: 

​

Service providers these providers support us in carrying out activities and services to you. We only give them the necessary parts of your personal information that they need to fulfil certain products this will not include any payment information.
 

• For the purposes of providing you a service, order confirmation emails or similar.
   

• Data insight companies to ensure your details are up to date and accurate.
   

• Payment processors for secure payments and automated fraud risk scoring & fraud prevention.
   

• Includes bank account and payment card details via a secure third party.
   

• We do not have access to this information and any information you provide online is shared solely between payment processors and your bank.
   

• IT service providers for Marketing, Analytics & Personalisation (Google Ads, Bing Ads, Google Analytics, Meta Platforms, YouTube) For website performance, behavioural advertising, audience targeting, advertising and social engagement. 
   

• Delivery partners (e.g., Royal Mail, DPD, EVRI or external delivery partners for delivery of goods) to ensure delivery of any physical products if requested. 
   

• Legal authorities if required by law.

​​​​​​​​

5. Third-Party Platforms and Independent Data Use

​

When you interact with us via third-party platforms (social media, review sites, partner sites or advertising platforms), those platforms may collect and use your data independently according to their own privacy policies. We encourage you to review their terms and privacy notices.

​

We may also use aggregated and anonymised data for analytical and business purposes. This data cannot be used to identify you.

 

6. Cookies and Tracking Technologies

​

We use cookies and similar technologies to enhance your browsing experience, analyse site traffic, and personalise content and ads. You can manage your cookie preferences via our cookie banner or browser settings.

​

What are Cookies: 

​

Cookies are tiny files which websites use in order to work properly, improve user experience and provide important visitor data to us. They can be placed on your computer when you visit a website and help to make your web experience quicker, easier and tailored to you.

​

Session cookies are those which expire upon the closing of the web browser and persistent cookies are those which remain in place after a session has ended.

 

Types of cookies we use:

​

• Essential cookies – for website functionality.
   

• Performance cookies – to understand how visitors use our site.
   

• Marketing cookies – to deliver relevant ads and measure campaign effectiveness.

​

​​

7. Data Retention

​

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements. When no longer needed, your data will be securely deleted or anonymised.

​​​

We will process personal data during the duration of any agreement and will continue to store only the personal data needed for six years after the agreement has expired to meet any legal obligations. After six years any personal data not needed will be removed.

​

8. Your Rights
 

In line with the General Data Protection Regulation, you have the following rights:
 

• Subject access request – To see what information we hold on you.
   

• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records unless lawfully required.
   

• Right to object from us processing your data – You can object to processing from direct marketing communications using our unsubscribe form.
   

• Right to correct your data - you have a right to correct data that we hold about you that is inaccurate or incomplete.
   

• Data portability.
   

If you wish to exercise any of these rights, please contact us, marking your query for the attention of the DPO at: privacy@doodlesgifts.com or contact us using our contact page options and our customer service team will direct you in the right direction. 

​

To access what Personal data is held, identification will be required.

 

We accept the following forms of ID when information on your personal data is requested.

​

A copy of your driving licence, passport, birth certificate and a utility bill not older than three months.

 

A minimum of one piece of photographic ID listed above and a supporting document is required.

 

If we are dissatisfied with the information supplied or we deem this inadequate then further information will required before any personal data can be released.

 

This is to protect you and your personal information. 

​

We aim to comply with legislation and respond within 30 days of receiving personal data requests.

 

Occasionally it may take longer than a 30 days if your request is particularly complex or you have made a number of requests. In this case, we will keep you updated.

​

No fee  for this is usually required:

You will not have to pay a fee to access your personal data or to exercise any of your other rights.

 

However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

​

Any third parties seeking access to an individual’s data should contact the individual regarding such requests.

​

9. Our DPO

​

We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy.

​

Our appointed Data Protection Officer is our CFO.

 

If you have any questions, including any requests to exercise your legal rights, please contact our DPO on the email address below with the subject:

 

Attention of DPO​

Email: privacy@doodlesgifts.com

​

10. Information Commissioner's Office (ICO) Membership

​

Doodles Gifts Limited is a registered and paid member of the Information Commissioner's Office (ICO), the UK’s independent authority set up to uphold information rights. Our registration demonstrates our commitment to data protection and privacy best practices.

​

Our ICO Registration Number: ZB958881
 

You can verify our registration at: https://ico.org.uk

​

11. Supervisory Authority

​

We adhere to guidance from the ICO (Information Commissioner’s Office), they are the UK’s independent body that have been set up to uphold information rights. The ICO have stated that In line with the GDPR, details we provide to you about how we process personal data must be:
 

• Concise, transparent, intelligible and easily accessible.

• Written in clear and plain language.

• Free of charge.

​​

If you have a concern about information practices, you can raise your concerns with the ICO.

​

Complaints

 

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.  

 

Please visit: https://ico.org.uk for more details of how to do this or in writing:

​

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

SK9 5AF

​

Telephone: 0303 123 1113​
​

12. Changes to our Privacy Policy and your duty to notify us of any of changes

​

We may need to update this policy at any time and without notice as outlined above.

 

When a change is made this will be updated and the effective date of any change will be available here.  

​

It is important that the personal data we hold about you is accurate and up to date.

 

Please keep us informed if your personal data changes during your relationship with us so we can comply with any required changes. 

​

​​​