Your privacy matters
Privacy Policy
This policy explains what personal information we collect, why we use it, and the choices you have.
Last updated: 19 June 2026
Who we are
Suggested text: Our website address is: https://www.tarmarastreasures.co.uk.
Comments
Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Suggested text: If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Suggested text: Visitor comments may be checked through an automated spam detection service.
1. Who we are
Tarmaras Treasures operates the website at https://www.tarmarastreasures.co.uk/. We are the controller of the personal information described in this policy.
You can add the legal business name, postal address, company number and ICO registration number in the page editor. Content entered there appears in the highlighted box above.
2. Information we collect
Depending on how you use the site, we may collect:
- Your name, billing and delivery addresses, email address and telephone number.
- Order details, including products purchased, order value, delivery method, transaction status and customer notes.
- Account information, such as your username and encrypted password.
- Payment status and transaction identifiers supplied by our payment processor. We do not receive or store your full card details.
- Messages, reviews and refund or customer-service requests you send to us.
- Cookie identifiers, approximate location, browser and device information, referring pages and interactions with the site.
- Information needed to prevent fraud, keep the site secure and comply with the law.
3. How and why we use your information
| Purpose | Lawful basis |
|---|---|
| Take payment, fulfil and deliver orders, provide updates and handle refunds. | Performance of our contract with you. |
| Create accounts, answer enquiries and provide customer support. | Our contract and legitimate interest in supporting customers. |
| Keep tax, accounting and business records and respond to lawful requests. | Legal obligation. |
| Prevent fraud and protect our site, customers and business. | Legitimate interests in security and fraud prevention, and legal obligation where applicable. |
| Measure site use and improve our products and services. | Your consent where analytics cookies require consent. |
| Send marketing messages. | Consent, or the soft opt-in where legally available. |
You can unsubscribe from marketing at any time using the link in an email or by contacting us.
4. Services we use
WooCommerce
WooCommerce powers our product pages, basket, checkout, customer accounts and order management. Information entered into these features is stored in our WordPress and WooCommerce database and used to run the store. WooCommerce also uses strictly necessary cookies to maintain baskets and checkout sessions.
Printful
Printful manufactures and fulfils products for us. We share the information needed to fulfil an order, which may include your name, delivery address, telephone number, email address, products ordered and relevant order details. Printful may use affiliated fulfilment facilities and delivery providers in different countries.
Read Printful’s privacy policy.
Google Analytics
With your consent where required, we use Google Analytics 4 to understand how visitors use the site. It may collect a client identifier in first-party cookies, session details, approximate location, browser and device information, referring pages and site interactions. Google states that GA4 does not log or store individual IP addresses, although an address may be used briefly to derive approximate location and protect the service.
The usual GA4 cookies include _ga and _ga_<container-id>. Google’s default expiry is two years, although our settings or your browser may shorten it. You can reject analytics cookies using our cookie controls.
6. Retention and security
We keep information only as long as necessary for the purposes described here, including tax, accounting, security and dispute-resolution requirements. Order and transaction records are generally retained for six years, unless a longer or shorter period is required. Account, support, analytics, security-log and backup retention depends on our operational settings and legal obligations.
We use appropriate technical and organisational safeguards, but no internet service is completely secure. Please use a unique password and contact us if you believe your information has been compromised.
7. Your rights
Depending on the circumstances, you may ask for access to or correction of your information, erasure, restriction, portability, or object to certain uses. You can withdraw consent at any time where we rely on it, and you always have the right to object to direct marketing. These rights are not absolute, and we may need to verify your identity.
You may complain to the UK Information Commissioner’s Office, although we would appreciate the opportunity to address your concern first. ico.org.uk/make-a-complaint.
8. Contact us
To ask a privacy question or exercise a data-protection right, email us at: shawn.c374@gmail.com.
We may update this policy when our practices, providers or legal obligations change. The latest version will always appear on this page.