Privacy policy

Last updated: 13 August 2026

Lucy Cobb Limited respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, share and protect your personal information when you visit our website, create an account, place an order, contact us, leave a review or otherwise interact with Lucy Cobb.

For the purposes of UK data protection law, Lucy Cobb Limited is the data controller of your personal information unless otherwise stated in this Privacy Policy.

1. About us

Lucy Cobb Limited operates this website and online store.

Our trading address is:

Lucy Cobb Limited
Unit 19
Saddleworth Business Centre
Delph
OL3 5DF
United Kingdom

Company number: 05922389

Registered in England and Wales.

Registered office: Lucy Cobb Limited
Unit 19
Saddleworth Business Centre
Delph
OL3 5DF
United Kingdom

VAT number: GB 892688164

For privacy and data protection enquiries, please contact us at enquiries@lucycobb.com.

2. Personal information we collect

The personal information we collect depends on how you interact with us and our website.

This may include:

• Contact information, such as your name, email address, telephone number, billing address and delivery address.
• Order and transaction information, including products you purchase, return or exchange, order history, delivery information, discounts used and payment status.
• Payment information required to complete your transaction. Payment card information is processed securely by our payment providers and we do not normally receive or store your full card details.
• Account information, including information associated with your Lucy Cobb customer account, preferences and account activity.
• Customer service information, including information you provide when you contact us about an order, return, product or other enquiry.
• Review information, including information connected with invitations to review your purchase and reviews you choose to submit.
• Device and technical information, such as your IP address, browser type, device type, operating system and other technical identifiers.
• Website usage information, such as pages viewed, interactions with our website, referring pages, approximate location and information about how you navigate our website.
• Marketing preferences, including whether you have chosen to receive marketing communications from us and your communication preferences.
• Fraud and security information, such as information used to identify unusual, suspicious or potentially fraudulent transactions or activity.

3. How we collect your information

We may collect personal information:

• directly from you, for example when you place an order, create an account, subscribe to marketing, contact us or make a return;
• automatically when you use our website, through cookies and similar technologies;
• through Shopify, which provides the ecommerce platform used to operate our online store;
• from service providers that help us process payments, deliver orders, operate our website, analyse website usage or provide other services; and
• through REVIEWS.io in connection with customer reviews and review invitations.

4. How we use your personal information

We may use your personal information to:

• process and fulfil your orders;
• take and manage payments;
• arrange delivery and process returns, refunds and exchanges;
• create and manage your customer account;
• provide customer service and respond to enquiries;
• communicate with you about your orders and account;
• send review invitations following a purchase;
• operate, maintain and improve our website and online store;
• understand how customers use our website;
• protect our customers, website and business against fraud, misuse and security threats;
• send marketing communications where you have chosen to receive them or where we are otherwise permitted to do so by law;
• comply with our legal, regulatory, accounting and tax obligations; and
• establish, exercise or defend legal claims where necessary.

5. Our lawful bases for using your information

UK data protection law requires us to have a lawful basis for using your personal information.

Depending on the circumstances, we may rely on the following lawful bases:

Where we rely on consent, you can withdraw that consent at any time.

6. Shopify

Our online store is hosted by Shopify.

Shopify provides the ecommerce platform and technology that enables us to operate our website, customer accounts, checkout and online ordering services.

Information you provide through our online store may therefore be processed by Shopify in order to provide these services to us and to you.

Shopify may also process certain information for its own purposes where it acts as a data controller. More information about how Shopify processes personal information is available in the Shopify Consumer Privacy Policy.

Shopify also provides privacy controls through its Privacy Portal.

7. Google Analytics

We use Google Analytics to help us understand how visitors use our website and to improve the website and shopping experience.

Google Analytics may process information about your use of our website, such as pages viewed, interactions, device and browser information, referring information and approximate location.

We use analytics information to understand overall website performance, customer journeys and how different areas of the website are being used.

Where the use of analytics cookies or similar technologies requires your consent, they will be managed through our website privacy and cookie controls. Where an applicable legal exception is relied upon, we will provide appropriate information and a simple way for you to object.

More information about how Google handles personal information is available in Google's Privacy Policy.

8. Customer reviews and REVIEWS.io

We use REVIEWS.io to help us collect and display genuine customer reviews.

Following a purchase, we may provide REVIEWS.io with limited information required to send you an invitation to review your experience or the products you purchased. This may include information such as your name, email address, order reference and products ordered.

Where REVIEWS.io processes this information on our behalf for the purpose of sending review invitations, Lucy Cobb remains the data controller and REVIEWS.io acts as a service provider processing information on our behalf.

If you choose to submit a review through REVIEWS.io, REVIEWS.io may process that information as a separate data controller under its own privacy terms.

Your review may be displayed on the Lucy Cobb website and, depending on the REVIEWS.io service, may also appear on REVIEWS.io or other services that display reviews.

You can find more information in the REVIEWS.io User Privacy Policy.

9. Other organisations we share information with

We do not sell your personal information.

We may share personal information where necessary with organisations that help us operate our business and provide our services, including:

• Shopify and ecommerce service providers;
• payment processors and payment providers;
• delivery companies and fulfilment providers;
• REVIEWS.io;
• Google Analytics and other website service providers that we choose to use;
• professional advisers, including accountants or legal advisers where necessary; and
• law enforcement, regulators, courts or other authorities where we are legally required to provide information.

We only provide service providers with information that is reasonably necessary for them to provide their services or where another lawful reason for sharing applies.

10. Marketing communications

We may send you marketing communications by email or other electronic means where you have given consent, or where we are permitted to do so under applicable law, including where the requirements for the products and services soft opt-in are met. Where required, we will give you a clear opportunity to opt out when we collect your contact details and in each subsequent marketing communication.

11. Cookies and similar technologies

Our website uses cookies and similar technologies to operate the online store, remember choices, maintain security and understand how the website is being used.

Some technologies are necessary for the website and checkout to function correctly.

Other technologies may be used for analytics or other optional purposes. Where consent is required by law, these will only be used in accordance with the choices you make through our website privacy and cookie controls.

In some circumstances, applicable law permits limited technologies to be used without consent, subject to specific conditions such as providing clear information and a simple way to object.

You can review and change the choices available to you through the privacy or cookie controls on our website.

12. International transfers

Some of our service providers may process personal information outside the UK. Where we transfer personal information internationally, we will ensure that the transfer is permitted under applicable UK data protection law. Depending on the circumstances, this may include transfers to countries recognised as providing adequate protection or the use of appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum where applicable.

13. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet our legal and regulatory obligations.

The length of time we keep information will depend on the type of information and why we hold it.

For example:

• order and transaction records may be retained for the period required to meet accounting, taxation and legal obligations;
• customer account information may be retained while your account remains active and for an appropriate period afterwards;
• customer service correspondence may be retained where necessary to deal with an enquiry, complaint or potential claim; and
• marketing information may be retained until you unsubscribe or otherwise ask us to stop using it for that purpose, subject to retaining limited information needed to record your preference.

We may retain information for longer where required by law, where a dispute is ongoing or where it is reasonably necessary to establish, exercise or defend legal claims.

14. Security

We take appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.

However, no online service or method of transmitting information over the internet can be guaranteed to be completely secure.

You are responsible for keeping any customer account access details secure and should contact us if you believe your account or personal information has been compromised.

15. Your data protection rights

Depending on the circumstances, UK data protection law gives you rights over your personal information. These may include the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete personal information;
• ask us to delete personal information in certain circumstances;
• restrict how we use your personal information in certain circumstances;
• receive or transfer certain personal information in a portable format;
• object to certain uses of your personal information; and
• withdraw consent at any time where we rely on your consent.

Your right to object: You have the right to object to the use of your personal information for direct marketing at any time. You may also have the right to object where we rely on legitimate interests, depending on the circumstances.

These rights are not absolute and do not apply in every situation.

To exercise a data protection right, contact us at enquiries@lucycobb.com.

We may need to ask you for information to confirm your identity before responding to a request.

16. Automated processing and fraud prevention

We and our service providers may use automated tools to help identify potentially fraudulent, suspicious or unsafe transactions and to protect our website and customers.

Where any processing involves solely automated decision-making that has a legal or similarly significant effect on you, we will comply with the requirements and safeguards that apply under UK data protection law.

17. Children's privacy

Our website is a general online retail service and is not specifically directed at children.

We do not knowingly seek to collect personal information from children where doing so would not be appropriate.

If you are a parent or guardian and believe that a child has provided personal information to us inappropriately, please contact us at enquiries@lucycobb.com.

18. Third-party websites

Our website may contain links to websites or services operated by other organisations.

We are not responsible for the privacy practices of third-party websites that we do not control. If you follow a link to another website, we recommend reviewing its privacy information before providing personal information.

19. Data protection complaints

If you have a concern or complaint about how we have collected or used your personal information, please contact us first at enquiries@lucycobb.com.

We will investigate your concern and respond without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

You can find information about making a complaint on the Information Commissioner's Office website.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers, technology or legal obligations.

When we make changes, we will publish the updated policy on our website and change the “Last updated” date at the top of this page.

21. Contact us

If you have any questions about this Privacy Policy, would like to exercise your data protection rights or wish to make a data protection complaint, please contact:

Lucy Cobb Limited
Unit 19
Saddleworth Business Centre
Delph
OL3 5DF
United Kingdom

Email: enquiries@lucycobb.com

Company number: 05922389

Registered in England and Wales.

Registered office: Lucy Cobb Limited
Unit 19
Saddleworth Business Centre
Delph
OL3 5DF
United Kingdom

For the purposes of UK data protection law, Lucy Cobb Limited is the data controller of your personal information.