Privacy Policy

Effective date: 27th March 2026

1. About Us

This Privacy Policy explains how Bird Playing Cards (“we”, “us”, “our”) collects, uses, and protects your personal data.

Company number 07487991

Registered name: Nicky Bird Design Limited
Registered address: 6 Woodend Sutton Surrey, London, SM13LH
Email address:  nick @  nickybirddesign.com

We are the data controller responsible for your personal data.

2. What Personal Data We Collect

We may collect and process the following:

Information you provide:

  • Name
  • Billing and delivery address
  • Email address
  • Phone number
  • Order details

Automatically collected data:

  • IP address
  • Browser type
  • Device information
  • Pages visited on our website

Payment data:

We do not store full payment details. Payments are processed securely via third-party providers (e.g. Stripe, PayPal).

3. How We Use Your Data

We use your data to:

  • Process and deliver your orders
  • Communicate about your order
  • Provide customer support
  • Improve our website and services
  • Prevent fraud

If you opt in, we may also:

  • Send marketing emails (you can unsubscribe at any time)

4. Legal Basis for Processing

Under UK GDPR, we rely on:

  • Contract – to fulfil your order
  • Legal obligation – for tax and accounting
  • Legitimate interests – to improve services and prevent fraud
  • Consent – for marketing and cookies (where applicable)

5. Sharing Your Data

We only share your data where necessary, including:

  • Payment processors (e.g. Stripe, PayPal)
  • Delivery companies (e.g. Royal Mail, couriers)
  • Website hosting and analytics providers

We do not sell your personal data.

6. International Transfers

Some of our service providers may be based outside the UK.

Where this happens, we ensure appropriate safeguards are in place (e.g. standard contractual clauses).

7. Data Retention

We keep your data only as long as necessary:

  • Order data: typically up to 6 years (for legal/tax purposes)
  • Marketing data: until you withdraw consent

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability

To exercise your rights, contact: [Insert email]

You also have the right to complain to the
 Information Commissioner’s Office (ICO) if you believe your data has been mishandled.

9. Data Security

We take appropriate technical and organisational measures to protect your data, including secure servers and encryption where appropriate.

10. Third-Party Links

Our website may contain links to other websites. We are not responsible for their privacy practices.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website.