Niffty Witchy Supplies

Witchcraft Supplies UK

Privacy Policy

Niffty Witchy Supplies Limited
28 Park Parade
Havant
Hampshire
PO9 5AD
United Kingdom
Website: www.witchy-supplies.co.uk

Introduction

Niffty Witchy Supplies Limited (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit or make a purchase from our website.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We may collect and process the following data:

  • Personal identification information (name, billing address, shipping address)
  • Contact information (email address, phone number)
  • Payment details (processed securely via third-party payment providers – we do not store full payment details)
  • Order details and purchase history
  • Technical data (IP address, browser type, device information)
  • Usage data (how you use our website)

How We Use Your Information

We use your information to:

  • Process and fulfil orders
  • Communicate with you regarding your order
  • Provide customer support
  • Improve our website and services
  • Prevent fraud and ensure security
  • Send marketing communications (only if you have opted in)

Legal Basis for Processing

We process your personal data based on:

  • Contractual necessity – to fulfil your order
  • Legal obligations – for tax and accounting purposes
  • Legitimate interests – to improve our services and prevent fraud
  • Consent – for marketing communications (you may withdraw consent at any time)

Sharing Your Information

We only share your data where necessary, including:

  • Payment processors (e.g. Square)
  • Delivery and courier services
  • Website hosting and service providers
  • Legal or regulatory authorities where required

We do not sell your personal data.

Data Retention

We retain your personal data only as long as necessary:

  • Order and transaction data: up to 6 years (for legal/tax purposes)
  • Marketing data: until you withdraw consent

Your Rights

Under UK data protection law, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, please contact us.

Cookies

Our website uses cookies to:

  • Improve your browsing experience
  • Analyse website traffic
  • Enable essential website functionality

You can manage or disable cookies through your browser settings.

Data Security

We take appropriate measures to protect your personal data, including secure systems and trusted third-party providers.

Third-Party Links

Our website may contain links to other websites. We are not responsible for their privacy practices.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact us:

Niffty Witchy Supplies Limited
28 Park Parade
Havant
Hampshire
PO9 5AD
United Kingdom
Website: www.witchy-supplies.co.uk

Optional OpenAI purchase measurement

If you choose to allow optional OpenAI purchase measurement, we share limited information with OpenAI to understand whether our ChatGPT ads lead to paid website purchases. Advertising consent and your separate OpenAI measurement choice are both required. Shopping and checkout work without this choice.

We share the paid total, currency, payment time, a random event reference and, where available and permitted, an OpenAI ad-click reference. The event identifies witchy-supplies.co.uk as its source. We do not send your contact details, payment-card details, purchased items, order number, browsing paths, IP address or browser user-agent in these events. An ad-click reference may link the purchase to an advertising interaction; the information is not described as anonymous.

Your separate measurement choice and ad-click window last up to 24 hours from your explicit choice, ending sooner if the underlying cookie permission expires or you withdraw. A new distinct ad-click reference can replace the earlier reference within that fixed window; reloads do not extend it. The stored click reference and short-lived local replay markers become ineligible when that window ends or you withdraw and are removed through scheduled cleanup.

Unsent purchase data is kept for at most 24 hours and cancelled sooner if permission ends. Minimal duplicate-prevention records are kept for 7 days after completion or cancellation, without the purchase amount, currency, click reference or browser-session link. Minimal consent or withdrawal proof remains only until the original cookie choice expires; routine checks do not extend this period. When no original cookie expiry was verified, a fixed maximum 30-minute replay-protection period applies instead. These measurement periods are separate from the retention of ordinary order records. Expired data is immediately ineligible for use. Physical deletion follows scheduled cleanup, which may be delayed during a site outage.

You can withdraw your separate OpenAI measurement permission through the OpenAI purchase measurement control. Once the server confirms withdrawal, it stops new measurement and cancels unsent events. It cannot recall a request already in progress or remove information OpenAI has already received.

Our local storage periods do not determine OpenAI’s retention. For information about OpenAI’s processing and privacy rights, see OpenAI’s Privacy Policy for the UK and Europe.

🛒