Privacy policy
Rhiannon’s Talons Privacy & Cookies Policy
Last updated: 8 September 2026
Rhiannon’s Talons (“Rhiannon’s Talons”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy & Cookies Policy explains what information we collect when you visit rhiannonstalons.co.uk, purchase from us, create an account, join our Talon Points loyalty programme, leave a review, use our wishlist, contact us or otherwise interact with Rhiannon’s Talons.
Rhiannon’s Talons operates as a UK sole trader and is the data controller for personal information collected in connection with our business.
If you have any questions about this policy or how we use your information, please contact:
Email: Rhiannon@rhiannonstalons.co.uk
What personal information we collect
The information we collect depends on how you interact with us.
We may collect:
- your name
- billing and delivery address
- email address
- telephone number
- account information
- details of products you purchase
- order and transaction information
- correspondence you send to us
- custom-order information you provide
- product reviews, ratings, photographs or other content you voluntarily submit
- wishlist activity
- Talon Points loyalty information, including points earned, redeemed rewards and programme activity
- marketing preferences
- survey or feedback responses
- information relating to refunds, returns or customer-service enquiries;
device, browser and operating-system information
- IP address
- approximate location derived from your device or IP address
- pages visited and actions taken on our website
- referring websites or marketing sources
- cookie and similar technology information
We do not receive or store your full card details. Payments are handled securely by the relevant payment provider.
We do not currently collect your date of birth as part of the Talon Points programme.
How we use your information and our lawful bases
Under UK data protection law, we must have a lawful basis for processing your personal information.
Orders and providing our services
We use information such as your name, contact details, delivery address and order details to:
- process your order
- take payment
- manufacture or prepare your products
- arrange delivery
- communicate with you about your order
- process cancellations, returns and refunds and provide customer support.
Our lawful basis is generally performance of a contract with you.
We may also retain transaction information where necessary to comply with our legal, tax and accounting obligations.
Customer accounts
If you create an account, we use your information to provide and administer that account, including allowing you to access order information and related customer features.
Our lawful basis is generally performance of our agreement with you and our legitimate interest in providing an efficient customer-account service.
Talon Points loyalty programme
Rhiannon’s Talons operates a loyalty programme called Talon Points, powered by Growave.
If you choose to join Talon Points, information may be processed including:
- your name and email address
- your customer account
- eligible purchases
- points earned
- points redeemed
- rewards issued
- loyalty-programme activity
- other information required to operate the programme
Customers may be required to provide consent through the Rewards interface before participating in Talon Points.
We use this information to operate and administer the programme, calculate points, provide rewards and respond to loyalty-related enquiries.
Our lawful basis is generally performance of the loyalty programme you have chosen to participate in and our legitimate interests in rewarding customers and encouraging customer loyalty. Where consent is legally required, we rely on your consent.
Growave acts as a service provider processing customer information on our behalf for functionality including loyalty rewards, reviews and wishlists. Growave states that it may process information such as customer names, email addresses, order information, IP/device information, review content and other information required to provide its services.
For the rules governing Talon Points, please see our Talon Points page and Terms & Conditions.
Product reviews
Customers may voluntarily submit product reviews through our website.
Depending on what you choose to provide, a review may include:
- your rating
- written comments
- your displayed name
- images or other media you upload
- information linking the review with your purchase.
Reviews may be displayed publicly on our website.
Growave provides our product-review functionality and may process information required to collect, verify, display and manage reviews.
Where required, you may be asked to consent to the processing and publication of review content before submitting it.
You can contact us if you wish to ask about information associated with a review you have submitted.
Wishlist
Our website offers wishlist functionality through Growave.
If you use the wishlist, information about products you save and related customer/account information may be processed so that the wishlist can be provided to you.
Our lawful basis is generally performance of the service you request and our legitimate interest in improving the shopping experience.
Google Customer Reviews
We participate in Google Customer Reviews.
After completing an order, you may be offered the option to participate in a Google Customer Reviews survey.
Participation is optional.
If you choose Yes, information necessary for Google to administer the survey may be provided to Google.
This can include:
your order confirmation email address
- order ID
- delivery country
- estimated delivery date
- where applicable, product identifiers associated with your order
Google may then email you after the estimated delivery date and invite you to rate your shopping experience. Google confirms that the customer’s order-confirmation email address is shared with Google when the customer opts in.
Google may also use order ID, delivery information and product identifiers to associate the survey with the relevant purchase.
If you are signed into a Google Account when participating, information you submit to Google may be associated with your Google Account. Reviews submitted to Google may be displayed publicly in accordance with Google’s own policies.
Choosing to participate in Google Customer Reviews does not subscribe you to Rhiannon’s Talons marketing communications.
Google processes information it receives through Google Customer Reviews in accordance with its own privacy terms.
Marketing communications
Where you have subscribed to marketing, we may send you information about:
- new products
- promotions
- offers
- news
- other Rhiannon’s Talons updates
We rely on your consent, or where permitted by law, the relevant UK electronic-marketing rules, including the existing-customer “soft opt-in”.
You can unsubscribe at any time by:
- clicking the unsubscribe link in a marketing email
- contacting Rhiannon@rhiannonstalons.co.uk.
Unsubscribing from marketing will not stop essential communications relating to an order, account or other service you have requested.
Website analytics
We use analytics tools, including Google Analytics, to understand how visitors use our website.
Analytics information may include:
- pages viewed
- time spent on pages
- device and browser type
- approximate location
- referring source
- interactions with our website
- other technical usage information
This information helps us understand website performance, identify problems and improve our products and customer experience.
Where analytics technology uses non-essential cookies or similar technologies, we use them only where the appropriate consent has been obtained.
Advertising and social media
Where enabled and permitted by your cookie choices, we may use advertising or social-media services to:
- measure the effectiveness of advertising
- understand how customers find our website
- show relevant advertising
- measure interactions with marketing campaigns
These providers may process information according to their own privacy policies.
Non-essential advertising and tracking technologies will be subject to the consent requirements that apply under UK law.
Cookies and similar technologies
Cookies are small files stored on your device that help websites operate and remember information.
We use different categories of cookies and similar technologies.
Strictly necessary cookies
These are required for core website functions such as:
- navigating the store
- keeping items in your basket
- checkout
- security
- remembering essential settings
- customer-account functionality
These cookies cannot generally be switched off where they are necessary to provide a service you request.
Functional cookies
These help provide optional functionality and remember preferences.
Analytics cookies
These help us understand how visitors use the website and how the website performs.
Advertising and marketing cookies
Where used, these help measure advertising and may be used to provide more relevant marketing.
We will request consent before using non-essential cookies where consent is required.
You can manage your choices through the cookie controls available on our website. You can also control cookies through your browser, although disabling essential cookies may prevent parts of the website or checkout from working correctly.
Our cookie technologies and providers may change as our website develops, so the cookie-management tool available on the website provides the most current information about the cookies in use.
Who we share personal information with
We only share personal information where necessary for a legitimate business purpose, to provide services you request, with your consent, or where required by law.
Recipients may include:
Shopify
Our online store is hosted on Shopify.
Shopify processes customer, account, order and website information as necessary to provide the ecommerce platform.
For UK customers, Shopify explains that information may be processed through Shopify International Limited and other Shopify companies and service providers internationally.
Payment providers
Payment information may be processed by providers such as:
- Shopify Payments
- PayPal
- Klarna
- Clearpay
- other payment services offered at checkout
The payment provider you choose may process your information under its own privacy policy.
Growave
Growave provides our:
- Talon Points loyalty programme
- product-review functionality
- wishlist functionality
For customer information processed through our store, Growave describes the merchant as the controller and Growave as a processor acting on the merchant's behalf.
Google
Google services we use may include:
- Google Analytics
- Google Merchant Center
- Google Customer Reviews
- other Google measurement or ecommerce services
In some circumstances Google processes information on our behalf, while in others Google may process information as an independent controller under its own privacy policies.
Delivery providers
We share the information necessary to deliver your order with the postal or courier provider selected for your shipment.
This will generally include your:
- name
- delivery address
- contact details where required
- relevant delivery information
Email and communications providers
We may use service providers to send transactional or marketing communications on our behalf.
Professional and legal advisers
Information may be shared with accountants, legal advisers, insurers, regulators, law enforcement bodies or other professional advisers where reasonably necessary or legally required.
Fraud prevention and security
We and our payment/ecommerce providers may process transaction, account, device and payment-related information to:
- prevent fraud
- protect customers
- secure our website
- investigate suspicious activity
- protect our legal rights
Our lawful basis is generally our legitimate interests in protecting our business and customers, together with legal obligations where applicable.
Payment providers may use automated fraud-detection systems under their own policies.
Rhiannon’s Talons does not currently make decisions about customers based solely on automated processing where those decisions would produce legal or similarly significant effects.
International transfers
Some of the service providers we use operate internationally.
This means your personal information may sometimes be processed or accessed outside the United Kingdom.
We do not claim that all customer information is stored exclusively in the UK.
Where personal information is transferred internationally, we and our service providers use appropriate legal safeguards where required, such as:
- UK adequacy regulations
-contractual safeguards
- approved standard contractual clauses or UK transfer mechanisms
- another lawful transfer mechanism.
Shopify, for example, processes data through an international infrastructure and describes safeguards for transfers outside the UK. Growave also publishes UK/EU international-transfer arrangements.
How long we keep your information
We only retain personal information for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, security and dispute-resolution requirements.
Retention periods vary according to the information involved.
For example:
-order and transaction records may be retained for several years where required for tax, accounting or legal purposes
-customer-account information may be kept while your account remains active and for a reasonable period afterwards
- customer-service correspondence may be retained for a reasonable period after your enquiry is resolved
- marketing information may be retained while you remain subscribed, together with sufficient records to honour and demonstrate your marketing preferences
- loyalty information may be retained while your Talon Points membership or customer account remains active and for a reasonable period afterwards;
reviews may remain published while relevant unless removed or deletion is required
- analytics information is retained according to the retention settings of the analytics service
- information may be retained for longer where required by law or reasonably necessary in connection with a legal claim
When information is no longer required, we will delete, anonymise or otherwise securely dispose of it as appropriate.
Security
We take reasonable technical and organisational measures to protect personal information against:
- unauthorised access
- accidental loss
- alteration
- disclosure
- misuse
We also choose service providers with appropriate security measures.
However, no internet-based service can guarantee absolute security.
You are responsible for keeping any customer-account login information secure.
Your data protection rights
Depending on the circumstances, UK data protection law gives you rights including:
- the right to be informed about how your information is used
- the right of access to personal information we hold about you
- the right to rectification of inaccurate or incomplete information
- the right to erasure in certain circumstances
- the right to restrict processing in certain circumstances
- the right to data portability in certain circumstances
- the right to object to certain processing, including direct marketing
- the right to withdraw consent where we rely on consent.
These rights do not apply in exactly the same way in every situation.
You will not normally be charged a fee for exercising your rights.
We will normally respond within one month, although the law permits additional time in certain circumstances.
To exercise any of these rights, contact:
Rhiannon@rhiannonstalons.co.uk
Children
Our website and services are not specifically directed at children.
Where a person is not legally able to enter into a transaction independently, a parent or guardian should make the purchase or otherwise provide any necessary permission.
We do not knowingly seek to collect personal information from children where doing so would be unlawful.
If you believe a child has provided us with personal information inappropriately, please contact us.
Third-party websites
Our website may contain links to websites operated by other organisations.
We do not control those websites and this Privacy & Cookies Policy does not apply to them.
You should review the privacy information provided by the relevant third party before submitting personal information to them.
Sale or transfer of the business
If Rhiannon’s Talons or substantially all of its business or assets are sold, transferred, reorganised or merged, relevant customer information may be transferred as part of that transaction where lawful.
Any recipient would be required to handle personal information appropriately and in accordance with applicable data protection law.
Complaints
If you are concerned about how we use your personal information, please contact us first so that we can try to resolve the issue.
Email: Rhiannon@rhiannonstalons.co.uk
You also have the right to complain to the Information Commissioner’s Office (ICO).
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Data protection legislation
References in this policy to Data Protection Legislation include applicable UK privacy and data protection laws in force from time to time, including:
- the UK General Data Protection Regulation (“UK GDPR”)
- the Data Protection Act 2018;
- the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”)
- amendments and replacement legislation applicable to the processing of personal information
Changes to this policy
We may update this Privacy & Cookies Policy from time to time, for example when:
- our services change
- we introduce new technology or providers
- our legal obligations change
- we change how personal information is processed
The latest version will always be published on our website with the date it was last updated.
Where a change materially affects how we use personal information, we will take reasonable steps to bring that change to the attention of affected customers where required.
Contact us
If you have any questions about this Privacy & Cookies Policy, your personal information or your data protection rights, please contact:
Rhiannon’s Talons
Email: Rhiannon@rhiannonstalons.co.uk