Skip to content

Privacy policy

Lottie Luvs is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be in accordance with our privacy statement and General Data Protection Regulation (GDPR).

This privacy notice provides you with details of how we collect and process your personal details through your use of our website.

Lottie Luvs aims to take reasonable steps to allow you to correct, amend, delete or limit the use of your Personal Data. We have adequate controls in place including the security of your data and other personal information to help prevent unauthorised disclosure, and set up suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online too. 

If you wish to be informed about what Personal Data we hold about you and if you want it to be removed from our systems, please contact us using the contact details below.

Lottie Luvs Ltd do not disclose buyers' information to third parties other than when order details are processed as part of the order fulfilment. In this case, the third party will not disclose any of the details to any other third party.

We do not store customer financial information provided on our website, and we do not share this information with any third party.


1. Purpose

Lottie Luvs Ltd is committed to protecting the privacy and personal data of all individuals it works with, including customers, suppliers, beneficiaries, staff, and volunteers. This policy explains how we collect, use, store, and protect personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


2. Scope

This policy applies to:

  • All employees, management, contractors and volunteers of Lottie Luvs Ltd

  • All personal data processed by the company, whether held electronically or in paper form


3. Data Protection Principles

We process personal data in accordance with the UK GDPR principles. Personal data must be:

  • Processed lawfully, fairly, and transparently

  • Collected for specified, explicit, and legitimate purposes

  • Adequate, relevant, and limited to what is necessary

  • Accurate and kept up to date

  • Kept for no longer than necessary

  • Processed securely to protect against unauthorised access, loss, or damage

  • Processed in a way that ensures appropriate accountability


4. Lawful Basis for Processing

Lottie Luvs Ltd will only process personal data where there is a lawful basis, including:

  • Consent

  • Contractual necessity

  • Legal obligation

  • Legitimate interests

  • Vital interests

  • Public task (where applicable)

  • The lawful basis used will depend on the purpose for which the data is collected.


5. Types of Data We Collect

The Company may collect and process the following types of personal data:

  • Names, addresses, email addresses, and phone numbers of adopters & supporters 

  • Customer orders

  • Invoices

  • Records relating to beneficiaries and service users

  • Communications and correspondence

  • HR records of staff & volunteers (volunteers are covered by risk assessment rather than personal details, these are held by the charity Street Hearts UK)


6. How We Use Personal Data

Personal data may be used for:

  • Take and fulfil customer orders 

  • Demographic information such as: Address, town, county, post code and country

  • Administer and enhance the site and service

  • Only disclose information to third parties for goods delivery purposes.

  • Managing internal record keeping

  • Providing internal data and analysis

  • Helping to improve our products and services

  • Informing you about new products, offers and initiatives

  • Sending you newsletters and other promotional emails you have consented to

  • From time to time, we may also use your information to contact you about marketing activities we are organising using your preferred method of contact

  • Identifying market trends and analysis

  • Managing volunteers and staff

  • Fulfilling legal and regulatory obligations

We will not use personal data for purposes that are incompatible with the reasons it was collected.


7. Data Sharing

We will not sell personal data. Personal data may be shared only when:

  • It is necessary to deliver our services

  • We are legally required to do so

  • We have consent from the individual

Data only pertaining to monies raised and donated may be shared between Street Hearts UK & Street Hearts BG under the terms of this policy.

Any additional third parties we work with will be required to handle data securely and in accordance with data protection law. 


8. Data Security

Lottie Luvs Ltd takes appropriate measures to protect personal data, including:

  • Secure storage of paper records

  • Password protection and access controls for electronic data

  • Use of reputable IT systems and software

  • Regular review of data handling practices

  • All staff are responsible for keeping personal data secure. Volunteers have no contact with data held by Lottie Luvs Ltd


9. Data Retention

Lottie Luvs will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. Data will be securely deleted or destroyed when no longer needed.


10. Individual Rights

Under data protection law, individuals have the right to:

  • Be informed about how their data is used

  • Access their personal data

  • Request correction of inaccurate data

  • Request deletion of their data (where applicable)

  • Object to or restrict processing

  • Request data portability

  • Withdraw consent at any time (where consent is the lawful basis)

  • Requests should be made in writing to the contact details below and will be responded to within statutory timeframes.





11. Data Breaches

Any actual or suspected data breach must be reported immediately to the Directors of Lottie Luvs Ltd. The Company will:

  • Investigate the breach

  • Take steps to reduce any risk

  • Report the breach to the Information Commissioner’s Office (ICO) where required

  • Inform affected individuals where appropriate


12. Responsibilities

The directors have overall responsibility for data protection compliance.

A designated person will oversee data protection matters and act as the point of contact.

All staff and volunteers must follow this policy and report concerns promptly.


13. Training and Awareness

Appropriate data protection guidance or training will be provided to staff and volunteers where necessary to ensure compliance.


14. Review of Policy

This policy will be reviewed at least annually or when there are changes to legislation, guidance, or Company activities.

Drawer Title
Similar Products