Privacy Policy

This website is owned by Sarah & Duck Limited, and we are the data controller of your personal data. This means we control, manage, and decide how we use your personal information as part of our business activities.

By using the website, you consent to the collection and use of information as described in this Privacy Policy. If you do not agree with the terms of this policy, please do not use the website.

We take care of your personal data and undertake to guarantee its confidentiality and security. Any changes made to this privacy policy in the future will be posted on this page. Please check back from time to time to make sure you are aware of any updates or changes.

If you have any questions related to this policy, please don’t hesitate to contact the team at [email protected]

What information we collect, use and why

We may collect a variety of information from or about you or your devices from various sources, as described below. We will never sell your information to a third party.
Personal information may be given by consent directly from you, if you provide this data for the purpose of an email newsletter or as a competition entry. This could include information such as name, email address and age.

Device Information may be gathered automatically when you access our website such as IP addresses, location data such as time zone and general location, viewing history from installed cookies in your device, and website and app user journey information gathered whilst using our website.

We use analytics services such as Plausible Analytics to collect and process certain analytics data without the use of cookies. To help us understand how you use our Services and to help us improve them, we automatically receive information about your interactions with our Services, like the pages or other content you view and the dates and times of your visits. The data gathered using Plausible Analytics on this site is anonymous usage data for statistical purposes showing overall trends of how the website is used and doesn’t track individual users.

Links to other websites

Our website contains links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of such other websites and encourage you to check the privacy policy of these sites directly.

Information we receive from third parties

You may post photos, comments, or reviews on our pages available through third-party platforms, including Facebook, Instagram, and TikTok. If you do so, we and others may be able to view information that you make available through these third-party platforms.

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

• Your right of access
• Your right to rectification
• Your right to erasure
• Your right to restriction of processing
• Your right to object to processing
• Your right to data portability
• Your right to withdraw consent

If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful basis for collecting or using personal information for service updates or marketing purposes are that we’re collecting or using your information because it benefits our organisation, without causing an undue risk of harm to anyone. All your data protection rights may apply, except the right to portability. Our legitimate interests are: to study how our customers use our products and services, to keep our services updated and relevant, to develop our business and to inform our marketing strategy.

We may also collect information to manage and secure our services. This includes troubleshooting, testing, system maintenance, reporting, and data hosting, preventing fraud or other potentially illegal activities (including copyright infringement), blocking disruptive users, protecting the safety of users and enforcing our terms of service. Our legitimate interests are: for running our business, provision of administration and IT services, network security, and to prevent fraud.

How long we keep information

We will hold your personal information on our systems for as long as is necessary for the relevant service or as long as is set out in any relevant contract you hold with us, in accordance with our retention policy. After this time, your personal information will either be securely deleted or anonymised so that it can be used for analytical purposes.

Children accessing our website

Except where otherwise indicated, we do not knowingly collect or store any personal information from children under the age of 16. In some cases, we may restrict our services, such as competitions, to those aged 18 or over. If appropriate, we will take steps to determine the age of persons submitting their information to us and may seek to obtain the consent of your parent or guardian.

If you are under 16, we request that you do not provide us with information relating to you or to others. Please seek the guidance of your parent or guardian before using our services.

If you are the parent or guardian of a child who is under 16 and you become aware that your child has provided us with information without your consent, please contact us using the details above. We will delete such information from our records within a reasonable time.

How to secure your information

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorised access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorised access, use, modification, and personal data disclosure in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

If you believe that your personal information under our control has been compromised, including access to any accounts you hold with our services, please contact us immediately using the contact details at the top of this policy.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint

Last updated
20 March 2025