Privacy Policy

Privacy Policy

Last updated: November 11, 2025

1. Introduction

Tissue & Ribbon ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website tissueandribbon.com and make purchases from our store.

2. Information We Collect

We collect information that you provide directly to us, including:

  • Name, email address, postal address, and phone number
  • Payment information (processed securely through our payment providers)
  • Order history and preferences
  • Communications with us

We also automatically collect certain information about your device, including:

  • IP address and browser type
  • Cookies and similar tracking technologies
  • Pages visited and time spent on our site

3. How We Use Your Information

We use your personal information to:

  • Process and fulfill your orders
  • Communicate with you about your orders and our products
  • Improve our website and customer service
  • Send marketing communications (with your consent)
  • Comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

  • Contract performance: To fulfill orders and provide services you've requested
  • Legitimate interests: To improve our services and communicate with you
  • Consent: For marketing communications and non-essential cookies
  • Legal obligation: To comply with applicable laws and regulations

5. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA) or UK, you have the following rights:

  • Right to access: Request a copy of your personal data
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data
  • Right to restrict processing: Limit how we use your data
  • Right to data portability: Receive your data in a portable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent for marketing or cookies at any time

To exercise any of these rights, please contact us using the details below.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Order information is typically retained for 7 years for tax and accounting purposes.

7. Sharing Your Information

We may share your information with:

  • Service providers who assist with order fulfillment, payment processing, and shipping
  • Marketing and analytics partners (with your consent)
  • Law enforcement or regulatory authorities when required by law

We do not sell your personal information to third parties.

8. International Data Transfers

Your information may be transferred to and processed in countries outside the EEA. We ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

9. Cookies

We use cookies and similar technologies to enhance your browsing experience. You can manage cookie preferences through your browser settings. For more information, please see our Cookie Policy.

10. Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the internet is 100% secure.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: hello@tissueandribbon.com
Address: 20, Glasfryn. Brackla. Bridgend. CF31 2JN.

You also have the right to lodge a complaint with your local data protection authority.