Privacy

We collect what an order needs, and not much else.

Who we are. The data controller is Fantana Limited, registered in England and Wales, company number 16658320, registered office Thames House, Unit 03 Longreach Road, Barking, England, IG11 0JR. Fantana Limited is registered with the Information Commissioner's Office as a data controller, registration ZC245021. Contact for anything privacy-related: hello@fantana.uk.

What we collect. Your name, email, delivery address and order details — because an order can't happen without them. If you create an account, your login details. If you write to us, what you write. And, like any website, the technical basics: your IP address, your browser, and which pages you visited. Payment is handled at checkout by Shopify Payments, or by PayPal if you choose it; your card details never reach us.

Why we're allowed to hold it. We process your name, address and order details to perform our contract with you — an order cannot be fulfilled without them. Marketing emails are sent only with your consent, which you can withdraw at any time. We keep order records to meet our legal obligations, use limited data to prevent fraud, which is our legitimate interest, and comply where the law requires it, such as a court order or a request from HMRC. No decisions about you are made by automated means.

Where your data goes. The store runs on Shopify, which processes this data on our behalf to fulfil your order and may process it outside the UK under the safeguards UK data protection law requires. Shopify also uses some of it for its own purposes, such as fraud detection across its platform, and handles those requests itself: see Shopify's consumer privacy policy at shopify.com/legal/privacy/app-users. If you pay with PayPal, PayPal handles that payment under its own privacy policy and gives us your name, email and delivery address. The courier delivering your order gets your name, address and phone number. Our order and marketing emails are sent through Klaviyo. Judge.me, our reviews tool, gets your name, email and what you bought so it can invite you to review it. If you tick the box on the order confirmation page to rate your experience with Google, we pass your email address, order number, country and expected delivery date to Google so that it can email you a one-question survey once your parcel has arrived. Leave the box unticked and nothing is sent. Microsoft Clarity records how the site is used — where people click, scroll and get stuck — with anything you type masked, so that we can fix what confuses people. It starts when you arrive and stops the moment you switch analytics cookies off in the banner or the cookie icon. If you accept advertising cookies, Meta (Facebook and Instagram), Google and Pinterest receive information about what you viewed and bought here, in a form that identifies your browser or a hashed version of your email rather than you by name, so that we can measure our advertising and show it to people who have visited. Several of these companies are based in the United States; transfers to them rely on the safeguards UK data protection law recognises. We don't sell your data. If Fantana is ever sold, customer records go to the buyer under these same rules.

How long we keep it. Order and transaction records for six years, as UK tax law requires. Account details until you close the account or ask us to. Marketing contacts until you unsubscribe.

Email. You'll get the emails an order needs — confirmation, dispatch, tracking. Marketing only ever arrives if you opted in, and every one has an unsubscribe link that works.

Cookies. The cookies the store needs to function — your basket, your session — are always on. Analytics cookies (Google Analytics, so we can see which pages work, and Microsoft Clarity, so we can see how pages are used) are on from your first page so we can see how the site is used; you can switch them off in the cookie banner or, at any time, with the cookie icon at the bottom of every page. Advertising cookies (Meta, Google and Pinterest, so we can measure our ads and show them to people who have visited) are set only if you accept them. To change your mind later, use the cookie icon, or email us and we'll switch them off for you. You can also limit what Meta does with this data in your Facebook account under Off-Facebook Activity.

Children. This store isn't for under-18s and we don't knowingly collect children's data. If a child has given us theirs, email us and we'll delete it.

Your rights. Under UK GDPR you can ask what we hold about you, have it corrected, have it deleted, have its use restricted, object to how we use it, or receive a copy to take elsewhere. We keep what tax and consumer law require us to keep — order records — for as long as they require it. Email us; we'll do it, though we may ask you to confirm who you are first.

If you're unhappy. Email us first and we'll try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes. If this policy changes, the date below changes with it, and where the law requires it we'll tell you directly.

Last updated 20 September 2026.