Last updated: January 2026

At Two Tiny Turtles, we respect your privacy and are committed to protecting your personal information. This policy explains what information we collect, how we use it, and your rights.


Who We Are

We’re Bethan Forrester, trading as Two Tiny Turtles
Address: Unit 158238, PO Box 7169, Poole, BH15 9EL
Email: hello@twotinyturtles.co.uk
Website: www.twotinyturtles.co.uk

We’re the “data controller” of your personal information, which means we’re responsible for how it’s collected and used.


What Information We Collect

When you shop with us or use our website, we collect:

Information You Give Us

  • Name and contact details (email address, delivery address, phone number)
  • Payment information (processed securely by our payment provider – we don’t store your full card details)
  • Order history (what you’ve purchased, when, and where we delivered it)
  • Account information (if you create an account – username, password)
  • Communications (emails or messages you send us)

Information We Collect Automatically

  • Website usage (pages visited, how you found us, device type, browser)
  • Cookies (small files that help our site work better – see our Cookie Policy for details)
  • IP address (your device’s internet address)

How We Use Your Information

We use your information to:

Fulfill Your Orders

  • Process and deliver your purchases
  • Send order confirmations and shipping updates
  • Handle returns and refunds
  • Provide customer support

Improve Your Experience

  • Remember your preferences
  • Personalize your shopping experience
  • Improve our website and products
  • Understand how customers use our site

Stay in Touch (With Your Permission)

  • Send marketing emails about new products and offers
  • Ask for feedback and reviews
  • Send important updates about our service

Legal & Security Reasons

  • Prevent fraud and protect our business
  • Comply with legal obligations
  • Enforce our terms and conditions
  • Resolve disputes

Legal Basis for Processing

Under UK GDPR, we process your data based on:

  • Contract: We need your information to fulfill your order
  • Legitimate interests: To improve our service, prevent fraud, and run our business
  • Consent: For marketing emails (you can opt out anytime)
  • Legal obligation: To comply with tax, accounting, and other legal requirements

Who We Share Your Information With

We only share your information with trusted partners who help us run our business:

Essential Service Providers

  • Payment processors (to handle transactions securely)
  • Shipping carriers (to deliver your orders)
  • Email service providers (to send you order updates and marketing)
  • Website hosting (to keep our site running)
  • Analytics providers (like Google Analytics – to understand website traffic)

Legal Requirements

We may share information if required by law, court order, or to protect our legal rights.

We never sell your personal information to third parties.


How Long We Keep Your Information

We keep your information for as long as necessary:

  • Order information: 7 years (for tax and accounting purposes)
  • Marketing preferences: Until you unsubscribe or ask us to delete your data
  • Account information: Until you close your account or request deletion
  • Website analytics: Typically 26 months

Your Rights

You have important rights over your personal information:

Right to Access

Request a copy of the personal information we hold about you.

Right to Correct

Ask us to correct any inaccurate or incomplete information.

Right to Delete

Request deletion of your personal information (in certain circumstances).

Right to Restrict

Ask us to limit how we use your information.

Right to Object

Object to us processing your information (especially for marketing).

Right to Data Portability

Request your information in a portable format to transfer to another service.

Right to Withdraw Consent

Withdraw consent for marketing emails or other processing at any time.


How to Exercise Your Rights

To exercise any of these rights, email us at hello@twotinyturtles.co.uk with:

  • Your full name
  • Email address used for your order/account
  • Details of your request

We’ll respond within one month.


Marketing Emails

We’d love to keep you updated about new products and special offers!

Opting In

  • We’ll only send marketing emails if you’ve given permission (usually at checkout)
  • You can also sign up for our newsletter separately

Opting Out

Every marketing email has an unsubscribe link at the bottom. Click it anytime to stop receiving marketing emails.

Important: We’ll still send essential emails about your orders (confirmations, shipping updates, etc.) – these aren’t marketing emails.


Cookies

We use cookies to make our website work properly and improve your experience.

For full details about what cookies we use and why, please see our Cookie Policy at twotinyturtles.co.uk/cookie-policy.

You can manage your cookie preferences through the cookie banner when you first visit our site, or through your browser settings.


Security

We take security seriously and use appropriate measures to protect your information:

  • Secure payment processing (we don’t store full card details)
  • Encrypted connections (SSL/HTTPS)
  • Regular security updates
  • Access controls (only authorized staff can access customer data)
  • Secure data storage

However, no internet transmission is 100% secure. While we do our best to protect your information, we can’t guarantee absolute security.


Third-Party Links

Our website may contain links to other websites (social media, payment providers, etc.). This privacy policy only applies to our website – when you click to another site, read their privacy policy to understand how they handle your information.


Children’s Privacy

Our website is not intended for children under 18. We don’t knowingly collect information from children. If you’re a parent and believe your child has provided us with information, please contact us and we’ll delete it.


International Transfers

Your information is primarily stored and processed in the UK. If we transfer data outside the UK, we’ll ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR.


Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We’ll post any changes here and update the “Last updated” date.

For significant changes, we’ll notify you by email or through a notice on our website.


Questions or Concerns?

If you have any questions about how we handle your personal information, please get in touch:

📧 hello@twotinyturtles.co.uk

Making a Complaint

We hope to resolve any concerns directly, but you also have the right to complain to the UK’s data protection authority:

Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113


Thank you for trusting Two Tiny Turtles with your information! 🐢🐢