Privacy policy

Last updated: 26 October 2026

This policy explains how Dad’s Cabin collects and uses personal information when you visit dadscabin.co.uk or dadscabin.cymru, order from us or contact us.

Who we are

The data controller is Duncan Baxter trading as Dad’s Cabin, Ty Gwyn, Highfield Park, Abergele, Conwy, LL22 7AU, United Kingdom. Contact us at info@dadscabin.co.uk or +44 7801 166423 about this policy or your information.

Information we collect and where it comes from

• Information you give us: your name, email, telephone number, billing and delivery addresses, order details, enquiries, messages, reviews and marketing preferences.
• Personalisation information: photographs, artwork, names, dates, messages and instructions you upload or send us, together with proofs and correspondence about your design. A photograph may include other people, including children.
• Payment and transaction information: payment status, transaction references and details needed to process payments and refunds through our payment providers.
• Information collected through our website and providers: IP address, browser and device details, cookie identifiers and information about how you use the store, including products viewed and basket activity. What is collected depends on the features used and relevant privacy choices.
• Information from service providers: payment confirmations, delivery updates, fraud-prevention information and review or customer-service information relevant to your interaction with us.

We need order, contact, delivery and payment information to fulfil a purchase. Without it, we may be unable to accept or deliver your order. Optional personalisation files are needed only for the design you request. Marketing consent is not a condition of purchase.

Why we use information and our lawful bases

• Orders, payments, delivery, personalisation and proofs: to take steps you request before a purchase and perform our contract with you. Where you supply a recipient’s details or photographs of another person, our legitimate interest is fulfilling the requested gift or personalisation while limiting use to what is necessary.
• Customer enquiries, complaints and after-sales support: contract where necessary to fulfil your order; otherwise our legitimate interests in answering enquiries and resolving problems. We also process information where necessary to meet our legal consumer obligations.
• Accounting, tax and legally required records: compliance with legal obligations.
• Store security, fraud prevention and legal claims: our legitimate interests in protecting customers and our business, preventing misuse and establishing or defending claims; legal obligation where disclosure is required by law.
• Email marketing: consent when you subscribe. Where the law permits marketing about our own similar products to existing customers without fresh consent, we rely on legitimate interests and provide an opportunity to opt out when collecting your details and in each message.
• Reviews: our legitimate interests in obtaining feedback and helping customers make informed choices. Public reviews may display the name and content you choose to provide.
• Optional analytics and personalised advertising, where used: consent where required for cookies or similar technologies and associated processing. Essential website functions are supported by contract or our legitimate interests in running a secure, usable store, as appropriate.
• Promotional use of your personal photographs or personalised design: your separate consent.

Your photographs and personalised designs

We use supplied photographs, artwork and wording to prepare your design, send a proof where appropriate, produce and deliver your item, and resolve problems with the order. Files and related messages may be held in our upload or personalisation services, order records, email and production systems as needed for those purposes.

Supplying a photograph does not give us permission to use it in advertising. We will seek separate permission before using your personal photographs or personalised design to promote Dad’s Cabin. You can withdraw that permission by contacting us; withdrawal does not affect earlier lawful use.

Please provide only material you are entitled to share, with appropriate permission from people shown or their parent or guardian where relevant. Avoid sending unnecessary sensitive information. Contact us if a photograph or personal detail has been supplied without permission.

Who we share information with

We share relevant information with providers needed to operate the store and fulfil your requests, including Shopify for hosting and commerce services; payment providers; Royal Mail and delivery services, including Click & Drop; upload and personalisation providers such as Uploadfly and Easify Options; Judge.me for reviews; and providers of email, messaging, storage, invoicing and security services. Their involvement depends on the features you use. We may also share information with professional advisers or authorities where necessary for legal obligations or claims.

Providers receive information relevant to their role. Where a provider uses information for its own purposes, its privacy notice also applies. Links to external sites are governed by those sites’ privacy practices.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy . Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal Link.

Cookies and marketing choices

Cookies and similar technologies can support essential functions such as the basket, checkout and security, and, where enabled, preferences, analytics and advertising. Use Cookie preferences in the website footer to view or change the choices available to you. Where consent is required, optional technologies require that consent; essential functions may remain active. Browser settings also allow you to block or delete cookies, although some store features may be affected.

You can unsubscribe from marketing emails using the link in an email or by contacting us. Order confirmations, proofs, dispatch messages and other necessary service messages are separate from marketing.

How long we keep information

We keep personal information only for as long as needed for the purpose for which it was collected. Retention is determined by the type of information, the progress of your order or enquiry, legal requirements and any unresolved issue:

• Order, payment and accounting records: for the applicable tax and accounting record-keeping period and as needed for legal obligations or claims.
• Photographs, artwork and production files: for preparing and fulfilling your order and dealing with any related proof query, fault, reprint request or dispute. Keeping accounting records does not by itself require keeping the original photograph. Any separate arrangement to retain a design for repeat orders will be explained when agreed.
• Enquiries and correspondence: until the enquiry and necessary follow-up are complete, with relevant messages retained where needed to evidence an order or resolve a complaint or claim.
• Marketing records: while you remain subscribed or another lawful basis continues to apply. We may retain a minimal suppression record after you opt out so we can respect your choice.
• Technical and security information: for the period needed for the relevant website function, security investigation or consented analytics purpose.

Information no longer needed should be deleted or anonymised. Contact us to ask about information held for your order or request deletion; legal requirements or an ongoing claim may mean some records must be retained.

Security and international transfers

We use appropriate safeguards to protect personal information, but no internet transmission or storage system can be guaranteed completely secure. Please do not send payment card details or unnecessary sensitive information by email.

Shopify and other providers may process information outside the UK. Where UK data protection law requires safeguards for a transfer, these include applicable adequacy regulations or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses. Contact us for information about safeguards relevant to your data and how to obtain a copy.

Your rights

Depending on the circumstances and lawful basis, you may request access to your information, correction, deletion, restriction of processing or transfer of information you provided. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing.

Right to object: you can object to processing based on legitimate interests because of your particular circumstances. You can object to direct marketing at any time, and we will stop using your information for that purpose.

Contact info@dadscabin.co.uk to exercise your rights. We may need proportionate information to verify your identity. We normally respond within one month, subject to lawful extensions or exceptions, which we will explain where applicable. Some rights are subject to legal limits; for example, deleting an account does not necessarily remove accounting records we must keep.

Complaints

Please contact us if you have concerns about your information. You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113. You do not have to complete our complaints process before contacting the ICO.

Changes to this policy

We may update this policy to reflect changes to the store, our practices or the law. The latest version and update date will appear here. We will provide any additional notice required by law.