Privacy policy

Last updated: September 24, 2026

Erdberry operates this store and website, including all related information, content, features, tools, products and services, to provide you, the customer, with a curated shopping experience (the "Services"). Erdberry is powered by Shopify, which enables us to provide the Services to you. We sell to customers in the United Kingdom only.

This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase using the Services, or otherwise communicate with us. We handle your personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Who We Are

Erdberry is a trading name of Simone Farley. For the purposes of UK data protection law, we are the data controller of your personal information.

Personal Information We Collect or Process

"Personal information" means information that identifies you or can reasonably be linked to you. It does not include information that has been collected anonymously or de-identified so that it cannot be linked to you. Depending on how you interact with the Services, we may collect or process the following:

  • Contact details: your name, billing address, delivery address, phone number and email address.
  • Payment information: transaction details, form of payment and payment confirmation. Payments are processed securely by Shopify Payments. We receive limited details, such as the card type and last four digits, but we never see or store your full card details.
  • Account information: your username, password, preferences and settings, if you create an account.
  • Transaction information: the items you view, add to your basket, purchase, return, exchange or cancel, and your past orders.
  • Communications with us: the information you include when you contact us, for example with a customer service query.
  • Device information: information about your device, browser or network connection, your IP address and other unique identifiers.
  • Usage information: how and when you interact with and navigate the Services.

Personal Information Sources

We may collect personal information:

  • directly from you, when you create an account, place an order, use the Services or contact us.
  • automatically through the Services, from your device, including through cookies and similar technologies (see "Cookies" below).
  • from our service providers, when they collect or process information on our behalf, such as payment and delivery providers.
  • from our partners or other third parties, such as advertising and analytics services, where you have consented to relevant cookies.

How We Use Your Personal Information and Our Lawful Basis

We only use your personal information where UK data protection law allows us to. The lawful basis we rely on is shown for each purpose.

  • Providing and improving the Services. We use your information to process your payments, fulfil your orders, arrange delivery, handle returns, exchanges and cancellations, manage your account, send you order and account notifications, enable you to post reviews, and recommend products related to your purchases. Lawful basis: performance of our contract with you, and our legitimate interests in running and improving our shop.
  • Marketing and advertising. We use your information to send you marketing communications by email, and to show you online advertisements based on your activity on the Services. You can unsubscribe at any time using the link in our emails or by emailing contact@erdberry.com.
  • Security and fraud prevention. We use your information to authenticate your account, provide a secure payment and shopping experience, and detect, investigate or prevent fraudulent, illegal or malicious activity. Lawful basis: our legitimate interests in keeping our shop and customers safe. If you create an account, please keep your login details safe and don't share them with anyone.
  • Communicating with you. We use your information to provide customer service and respond to your queries. Lawful basis: performance of our contract with you, and our legitimate interests.
  • Legal reasons. We use your information to comply with our legal obligations, such as keeping tax and accounting records for HMRC, to respond to lawful requests from authorities, and to establish, exercise or defend legal claims. Lawful basis: legal obligation, and our legitimate interests.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Cookies

We use cookies and similar technologies on the Services. Essential cookies are needed for the website to work, for example to keep items in your basket and complete checkout. We only use non-essential cookies, such as analytics and advertising cookies, if you agree to them through our cookie banner. You can change your preferences at any time.

How We Disclose Personal Information

We do not sell your personal information. We may disclose it in the following circumstances:

  • To Shopify and our service providers who perform services on our behalf, such as website hosting, payment processing, data analytics, customer support, cloud storage and delivery (e.g. Royal Mail).
  • To business and marketing partners, where you have consented, to provide marketing services and show you advertising. For example, we use Shopify to support personalised advertising with third-party services based on your online activity with different merchants and websites. These partners use your information in line with their own privacy notices. You can withdraw your consent at any time through your cookie preferences.
  • When you ask us to or consent to it, for example to deliver your order or when you use social media widgets or login integrations.
  • To professional advisers, such as our accountant, where necessary.
  • In connection with a business transaction, such as a sale or transfer of our business.
  • To comply with the law, for example in response to a lawful request from HMRC, the police or another authority, to enforce our terms and policies, or to protect our rights and the rights of our customers and others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit through the Services will be shared with Shopify and with third parties that may be located outside the UK (see "International Transfers" below).

To help protect, grow and improve our business, we use certain Shopify enhanced features that use information from your interactions with our store, other merchants and Shopify. For these purposes, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights. To learn more about how Shopify uses your personal information and the rights you have, visit the Shopify Consumer Privacy Policy and Shopify Privacy Portal at https://privacy.shopify.com/en.

Third-Party Websites and Links

The Services may link to websites or platforms run by third parties. We are not responsible for the privacy or security of those sites, and we encourage you to read their privacy policies. Information you share on public platforms, such as social media, may be visible to other users. Including a link does not mean we endorse that site.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has given us their personal information, please contact us at contact@erdberry.com and we will delete it.

Security and Retention of Your Information

We take appropriate technical and organisational measures to protect your personal information, and we require our service providers to do the same. However, no system is completely secure, and information sent to us over the internet may not be secure in transit. Please avoid sending sensitive information to us by email.

We keep your personal information only for as long as we need it:

  • Order and financial records: 6 years from the end of the financial year they relate to, as required by HMRC.
  • Customer service correspondence: 2 years after your query is resolved.
  • Account information: until you ask us to close your account, or after 3 years of inactivity.
  • Marketing information: until you unsubscribe or withdraw consent. After that, we keep a record of your email address so we don't contact you again.

Your Rights and Choices

Under UK data protection law, you have the right to:

  • Access the personal information we hold about you.
  • Correct personal information that is inaccurate or incomplete.
  • Delete your personal information, in certain circumstances.
  • Restrict our processing of your personal information, in certain circumstances.
  • Object to our processing of your personal information where we rely on legitimate interests. You can object to direct marketing at any time, and we will always stop.
  • Data portability: receive a copy of your personal information in a portable format, or ask us to transfer it to another organisation.
  • Withdraw consent at any time where we rely on consent. This does not affect any processing carried out before you withdrew it.

To exercise any of these rights, email us at contact@erdberry.com. We may need to verify your identity before responding. You can also ask someone to make a request on your behalf, but we'll need proof that you have authorised them. We will respond within one month, and there is usually no charge. We will not treat you differently for exercising your rights.

For information processed by Shopify for its own purposes, you can exercise your rights through the Shopify Privacy Portal at https://privacy.shopify.com/en.

Complaints

If you have concerns about how we handle your personal information, please email us first at contact@erdberry.com, and we will do our best to resolve them.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

Website: ico.org.uk
Helpline: 0303 123 1113

International Transfers

Although we sell only within the UK, some of our service providers, including Shopify, may store or process your personal information outside the UK. Where this happens, we ensure it is protected, either because the country has been approved by the UK government as providing adequate protection, or by using approved safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or regulatory reasons. The latest version will always be posted on this page, with the "Last updated" date shown at the top.

Contact

If you have any questions about this Privacy Policy or our privacy practices, or would like to exercise any of your rights, please contact us:

Email: contact@erdberry.com
Post: PO Box 1656, Guildford, GU1 9JT, United Kingdom