Privacy & Cookie Details

Last updated: 22 September 2026

This page supplements the main Privacy Policy for Hughies Dog Accessories. It explains in clearer detail how our small UK business uses personal information, cookies and the services connected to our Shopify store. If there is any difference between this page and the main Privacy Policy, we will apply the wording that gives you the clearest information and strongest applicable protection.

Who is responsible for your information?

Hughies Dog Accessories is operated by Nigel Vosper as a sole trader. We are the data controller for personal information collected through our website, at our market stalls and when you contact us.

Contact: nigel@hughies.dog
Postal address: 159 New Kent Road, Suite 15, Metropolis Buildings, London SE1 4AG, United Kingdom.

Information we collect

Depending on how you use our services, we may collect:

  • your name, delivery and billing address, email address and optional telephone number;
  • order, payment-confirmation, delivery, return and refund information;
  • account details where you choose to create a customer account;
  • messages, enquiries, review content and other information you choose to send us;
  • marketing preferences and records of consent or objection;
  • technical and usage information such as your IP address, browser, device, pages viewed and interactions with our website, where permitted.

Payment-card details are handled by Shopify Payments or the payment provider selected at checkout. Hughies does not receive or store your complete card number.

Why we use your information and our lawful bases

  • To process and deliver orders, manage returns and provide customer accounts: necessary to perform our contract with you.
  • To answer enquiries and provide customer service: our legitimate interests in operating a responsive business and, where the enquiry concerns an order, performance of our contract.
  • To keep accounting, tax, transaction and product-safety records: compliance with legal obligations and our legitimate interests in maintaining accurate business and safety records.
  • To prevent fraud, protect our website and enforce our terms: our legitimate interests in keeping customers and the business secure.
  • To improve our website using analytics and session-insight tools: your consent where non-essential cookies or similar technologies are required.
  • To personalise content or measure advertising: your consent where required. You can reject these technologies without losing access to ordinary shopping functions.
  • To send marketing emails: your consent, or the limited “soft opt-in” permitted by UK electronic-marketing rules where it applies. Every marketing email contains an unsubscribe option.

We do not sell customer information.

Cookies and consent

Our Shopify cookie banner is shown to visitors in the United Kingdom. Required cookies support functions such as security, checkout, login and the shopping basket. Personalisation, analytics and marketing technologies are off unless you choose to allow them.

You can accept all, decline all or choose individual categories. You can change or withdraw your choice later using the Cookie preferences link available through the store’s policy/footer area. Withdrawing consent does not affect processing that was lawful before withdrawal.

Services used on our store

We use selected service providers to operate and improve the store. The services currently connected may include:

  • Shopify: ecommerce hosting, checkout, payments, customer accounts, fraud prevention, analytics, forms and customer privacy controls. Shopify Network Intelligence is enabled. Where a visitor does not consent to non-essential tracking, Shopify marks device data so it is not used for non-essential Network Intelligence purposes such as advertising. You can also exercise relevant Shopify rights through Shopify’s privacy portal.
  • Google: website analytics, consent signalling and services connected with product listings or advertising. Non-essential Google analytics and advertising storage follows your consent choice.
  • Microsoft Clarity: consent-based session recordings and heatmaps used to identify usability problems. Clarity is configured to receive the consent signal from Shopify. Ordinary playback data is retained by Microsoft for 30 days; labelled or favourited sessions and heatmap data may be retained for up to nine months.
  • Meta: measurement and advertising services connected with Facebook or Instagram, subject to your marketing consent where required.
  • Judge.me: product-review collection and display.
  • Shopify Forms and email tools: newsletter signup, contact capture and email communications.
  • Delivery, payment, accounting and professional service providers: only where needed to complete an order, keep lawful records or obtain professional advice.

These providers may process information as our processors or, for some activities, as separate controllers under their own privacy notices. The exact cookies and technologies present may change when we add, remove or update store services, so the cookie-preferences panel and this page should be read together.

Shopify Network Intelligence

Shopify may use customer interactions across participating Shopify services to provide enhanced features, fraud prevention, measurement and personalisation. Our automated main Privacy Policy contains the current Shopify disclosures. Where consent is required, non-essential uses depend on the choice you make in our cookie banner. If you ask Hughies to delete eligible personal information, the associated information is also submitted for deletion from Shopify Network Intelligence. You may also contact Shopify directly through its privacy portal.

Who receives your information?

We disclose only the information reasonably needed to:

  • Shopify and connected store applications;
  • payment processors and fraud-prevention providers;
  • delivery providers;
  • analytics, review, marketing and customer-service providers, subject to your choices;
  • accountants, insurers, legal advisers, regulators or law-enforcement bodies where necessary or legally required.

We do not permit service providers to use personal information for unrelated purposes merely because they provide a service to us.

International transfers

Some providers, including Shopify, Google, Microsoft and Meta, process information outside the United Kingdom, including in the United States. Where UK personal information is transferred internationally, we rely on an applicable adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to approved Standard Contractual Clauses, or another lawful safeguard.

How long we keep information

We keep personal information only for as long as it is needed for the purpose collected, including:

  • orders and accounting records: for at least five years after the 31 January Self Assessment submission deadline for the relevant tax year, and longer where an enquiry, dispute, safety matter or other legal requirement applies;
  • customer-service messages and general enquiries: normally for up to two years after the matter is closed, unless needed for an order, complaint, legal claim or safety record;
  • marketing records: until you unsubscribe or withdraw consent, with a minimal suppression record retained where necessary to honour your choice;
  • reviews and user-generated content: while published or needed to manage the review, plus reasonable backup and dispute periods;
  • Microsoft Clarity: normally 30 days for playback data and up to nine months for labelled/favourited sessions and heatmaps;
  • other analytics information: according to our current provider settings and only for as long as reasonably needed to analyse and improve the store.

We may retain information longer where required by law, to establish or defend legal claims, to handle product-safety matters, or where deletion is temporarily prevented by secure backup cycles.

Your rights

Depending on the circumstances, UK data-protection law may give you the right to:

  • ask for a copy of your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete information;
  • ask us to restrict how information is used;
  • object to processing based on legitimate interests or to direct marketing;
  • receive certain information in a portable format;
  • withdraw consent at any time;
  • complain about how we use your information.

These rights are not absolute and legal exemptions may apply. To make a request, email nigel@hughies.dog. We may request proportionate information to verify your identity.

Privacy complaints

Please email nigel@hughies.dog with the subject line Privacy complaint. We will acknowledge a data-protection complaint within 30 days and respond without undue delay.

If you remain dissatisfied, you may complain to the UK Information Commissioner’s Office at ico.org.uk or telephone 0303 123 1113.

Security

We use Shopify and reputable service providers, limit access to personal information and take proportionate technical and organisational measures to protect it. No online system is completely risk-free, so please avoid sending payment-card details or other sensitive information by ordinary email.

Children

Our store is intended for adults buying dog accessories. We do not knowingly collect personal information from children. A parent or guardian may contact us if they believe a child has provided information.

Changes to this page

We may update this page when our services, providers or legal obligations change. The latest revision date will always appear at the top.