Privacy Policy

Last updated: 12 October 2026

We're a small family business, and we'd like this page to be as friendly and easy to read as everything else we make. It explains what personal information we collect, why we need it, who we share it with, and the rights you have. If anything isn't clear, just ask us. We're always happy to help.

Who we are

Jack Spratt is a trading name of Jack Spratt Baby Ltd, registered in England and Wales, company number 09474102. We are the data controller responsible for your personal information.

Jack Spratt Baby Ltd, 253 The Green, Eccleston, Chorley, Lancashire, PR7 5TF, United Kingdom Email: jacksprattbaby@live.co.uk

When we say "Jack Spratt", "we", "us" or "our", we mean Jack Spratt Baby Ltd.

When this policy applies

This policy applies when you:

• visit or shop on our website
• place an order with us, including through Not On The High Street or Etsy
• send us names, messages, photos or other details for a personalised product
• contact us by email, phone or social media
• sign up to our emails
• leave a review

Not On The High Street and Etsy have their own privacy policies too, explaining how they use the information you give them.

What we collect

Contact details: your name, email address, phone number, billing address and delivery address.

Order details: what you've ordered, your delivery choice, gift wrapping and gift messages, and any refunds or exchanges.

Personalisation details: the names, initials, dates, messages and other wording you ask us to add to your gift. For some products, this may also include photos or artwork that you send us. Personalisation details are often about someone else, such as a child, a teacher or the person receiving the gift.

Payment details: payments are handled securely by our payment providers. We never see or store your full card number. We only receive confirmation that you've paid, plus basic details such as the payment method.

Messages: emails and messages between us, so we can help with your order.

Email preferences: if you sign up to our emails, your email address, your preferences and whether you open our emails.

Reviews: if you leave a review, your name, review, rating and any photo you add.

Website information: when you visit our website, information such as your device, browser, pages viewed and how you arrived. Some of this is collected using cookies (see below).

Why we use your information

UK data protection law says we need a lawful reason (a "lawful basis") for using personal information. Here's what we use it for, and why.

To make and deliver your order: we use your contact, delivery, order and personalisation details to make, wrap and send your gift, and to keep you updated. Our lawful basis is that this is necessary to fulfil our contract with you.

To help with questions and problems: we use your details to answer questions, put things right and handle returns. Our lawful basis is our contract with you, or our legitimate interest in looking after our customers.

To keep business records: we have to keep certain order and payment records for tax and accounting. Our lawful basis is our legal obligations.

To keep our shop safe: our payment providers and Shopify help us spot fraud and keep the website secure. Our lawful basis is our legitimate interest in protecting our customers and our business.

To improve our shop: we look at which products are popular and how our website is used, so we can make it better. Our lawful basis is our legitimate interest in running our business well.

To send you emails about our products: see "Our emails" below.

Personalisation, photos and artwork

Every Jack Spratt gift is made just for you, so we need the details you give us to make it. We only use these details to make your order, to talk to you about it, and to help if anything goes wrong.

If you send us a name, photo or message about someone else, please make sure you're happy to share it with us for this purpose, especially where it's about a child. Please don't send us anything we don't need to make your gift.

Who we share your information with

We never sell your personal information, and we never pass it to other businesses for their own marketing. We do share it with a small number of trusted companies that help us run our shop, and only as much as they need:

• Shopify, which runs our online shop, checkout and order system
• Payment providers, such as Shopify Payments, Shop Pay, PayPal and Klarna, which process your payment securely
• Royal Mail and other delivery companies, which deliver your order and provide tracking
• Apps that help us run the shop, including Easify (personalisation options), Judge.me (customer reviews), Shopify Email (our emails) and tools that help us manage product and order information
• Not On The High Street and Etsy, if you order from us through their websites
• Our accountant and other professional advisers, where needed
• Authorities such as HMRC or the police, only where the law requires it

Information sent outside the UK

Some of the companies that help us, such as Shopify, may store or process information outside the UK. Where this happens, they use the safeguards required by UK law to protect your information.

Cookies

Our website uses cookies (small files stored on your device). Some are essential, for example to remember your basket and let you check out securely. Others help us understand how our website is used. Where the law requires it, we'll ask for your permission before using non-essential cookies, and you can change your choices at any time using the cookie settings on our website.

We don't currently use advertising cookies or tracking from companies such as Facebook or Google Ads. If that changes, we'll update this policy and ask for your permission first.

Our emails

We love sharing new designs, gift ideas and news from the garden studio. We'll only send you marketing emails if you've signed up, or if you've bought from us before and didn't say no when we asked (UK law calls this the "soft opt-in").

Every email has an unsubscribe link, or you can email us at jacksprattbaby@live.co.uk. Unsubscribing won't stop emails about an order you've placed, such as order confirmations and delivery updates.

If you shop with Shop Pay or use the Shop app, Shopify may also send you its own messages, such as order tracking and basket reminders. You can manage these in the Shop app.

How long we keep your information

• Order and payment records: at least six years, because the law requires us to keep them for tax and accounting.
• Personalisation details, photos and artwork: only as long as we need them to make your order, deal with any questions, and make a replacement if needed. We then delete them.
• Emails and messages: for as long as they relate to your order, or to any question or problem.
• Email sign-ups: while you're subscribed. If you unsubscribe, we keep a note of your email address so that we don't accidentally email you again.

How we keep your information safe

We use secure, password-protected systems, and only we can see your information. Our partners, such as Shopify, use strong security to protect your details. No system is ever completely risk-free, but we take looking after your information seriously.

Your rights

UK data protection law gives you rights over your personal information. You can ask us to:

• send you a copy of the information we hold about you
• correct anything that's wrong or incomplete
• delete your information (unless we need to keep it, for example for tax records)
• limit how we use it
• send your information to you, or to another company, in a common format
• stop using it for marketing, at any time

You can also object to us using your information where we rely on our legitimate interests. If you've given us permission for something, you can change your mind at any time.

It's free to use your rights. We may need to check who you are, and we'll reply within one month. Just email us at jacksprattbaby@live.co.uk.

Questions and complaints

If you're unhappy with how we've handled your information, please tell us first at jacksprattbaby@live.co.uk, and we'll do our very best to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time, for example if we start using a new service. We'll always show the latest version here, with the date it was updated at the top.

And finally

If you've made it all the way to the end, thank you! You've definitely earned a cuppa, and maybe a biscuit too.

Emily & Gavin