Privacy policy
Plain English, because you shouldn't need a solicitor to find out what happens to your address. Last updated September 2026.
WHO WE ARE
Gaffby is a small online shop registered in England, selling seasonal home essentials. We are the data controller for the information described here. Write to us through the contact page about anything on this page.
WHAT WE COLLECT
When you order: your name, delivery and billing address, email, phone number if you give one, and what you bought. Card details are handled by our payment provider and never reach us.
When you sign up to the newsletter: your email address, and whether you opened the last one.
When you browse: standard analytics about pages viewed and products added to the basket, so we know which sizes to stock.
WHAT WE USE IT FOR
Taking payment, getting the parcel to you, answering your messages, handling returns, and keeping the accounts as the law requires. If you've opted in, we also send the newsletter. We do not sell your details to anyone, ever.
WHO ELSE SEES IT
Only the people needed to complete your order: our shop platform, our payment provider, the courier, and the supplier packing your item when it ships direct. Suppliers receive your delivery address and nothing else. Some of them are outside the UK, and where that happens we rely on standard contractual clauses approved for UK transfers.
HOW LONG WE KEEP IT
Order records for six years, because HMRC says so. Newsletter details until you unsubscribe. Support messages for two years, in case the same problem comes back.
COOKIES
The ones that keep your basket working are essential and always on. Analytics and advertising cookies only run if you accept them, and you can change your mind from the banner at any time.
YOUR RIGHTS
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it where we're not required to keep it. Ask and we'll answer within 30 days. If you're not happy with how we've handled it, you can complain to the Information Commissioner's Office.