Privacy Policy – Me & My Friend

Effective date: 1 November 2026

 1. Introduction

This Privacy Policy explains how Me & My Friend Designs Limited trading as Me & My Friend (“we”, “us” or “our”) collects, uses, stores and protects your personal information when you visit or use our website, place an order, create an account, contact us, or otherwise interact with our business.

We understand that your privacy is important to you and that you care about how your personal data is used and shared online. We are committed to protecting and respecting your privacy and ensuring that your personal information is handled securely, lawfully and transparently.

We process personal information in accordance with applicable UK data protection and privacy legislation, including:

• The UK General Data Protection Regulation (UK GDPR)
• The Data Protection Act 2018, as amended
• The Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR) as amended
• The Data (Use and access) Act 2005

Please read this Privacy Policy carefully and ensure that you understand it. Your acceptance of our Privacy Policy is deemed to occur upon your first use of our site and you will be required to read and accept this Privacy Policy when signing up for an Account.

If you do not accept and agree with this Privacy Policy, you must stop using Our Site immediately.

2. Definitions and Interpretation

In this Policy, the following terms shall have the following meanings:

3. Information About Us

• Our Site is owned and operated by Me & My Friend Designs Limited trading as Me & My Friend.
• Our registered address is 25, Cornflower Way, Rushwick, Worcester, WR2 5XP
• Our company registration number is 07240973
• Our Contact is Debbie Blake, and can be contacted by email at debbie@meandmyfriend.com
•  

For the purposes of UK data protection legislation, we are the data controller responsible for determining how and why your personal information is processed.

4. What Does This Policy Cover?

This Privacy Policy applies only to your use of our site. Our site may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.

5. Your Rights

As a data subject, you have the following rights under the GDPR, which this Policy and our use of personal data have been designed to uphold:

• The right to be informed about our collection and use of personal data;
• The right of access to the personal data we hold about you (see section 12);
• The right to rectification if any personal data we hold about you is inaccurate or incomplete (please contact us using the details in section 14);
• The right to be forgotten – i.e. the right to ask us to delete any personal data we hold about you (we only hold your personal data for a limited time, as explained in section 6 but if you would like us to delete it sooner, please contact us using the details in section 14);
• The right to restrict (i.e. prevent) the processing of your personal data;
• The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);
• The right to object to us using your personal data for particular purposes; and
• Rights with respect to automated decision making and profiling.

6. What Data Do We Collect?

Depending upon your use of our site, we may collect and process the following categories of personal information:

Personal identification information

• Full name
• Billing address
• Delivery address
• Email address
• Telephone number

Order and transaction information

• Products purchased
• Order numbers and order history
• Payment status and transaction references
• Delivery and tracking information
• Returns, refunds and exchanges
• Communications relating to purchases

We do not ordinarily store complete payment details. Payments are processed securely through our appointed payment service providers including Stripe and PayPal.

Account information

When you create an account, we may collect:

• Username and account details
• Login credentials, stored in an appropriately protected form
• Saved addresses
• Order history
• Account preferences

Technical and website usage imformation

• Internet Protocol (IP) address
• Web browser type and version
• Operating system
• Website pages visited
• Date and time of visits
• Referring website addresses
• Website interaction and browsing information

Marketing and communication information

We may collect your marketing preferences, newsletter subscruption status, consent records and records of communications with us.

Customer service information

Where you contact us, we may retain information contained in your enquiries, complaints, feedback and correspondence to enable us to respond and maintain appropriate business records.

7.  How we collect your personal information

We collect personal information through various methods including:

• When you place an order through our website
• When you create a customer account
• When you subscribe to our newsletter or marketing communications
• When you contact us by email, telephone or through our website
• When you complete forms or submit enquiries
• Through cookies and similar website technologies
• Through third-party service providers involved in operating our website, processing payments and delivering orders

We may also receive information from third parties where this is lawful and necessary for the purposes explained in this privacy policy.

8. How and why we use your data?

All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with our obligations and safeguard your rights under the General Data Protection Regulations at all times. We only process personal information where we have a valid lawful basis under applicable data protection legislation. For more details on security see section 8, below.

The purposes for which we process personal information include:

Processing and fulfilling orders

We use your personal information to:

• Process and confirm orders
• Arrange payment
• Arrange delivery
• Provide order updates
• Process cancellations, returns and refunds
• Respond to queries relating to your purchases

Lawful basis: Performance of a contract and, where applicable, compliance with legal obligations.

Managing customer accounts

We use account information to create and maintain customer accounts, provide access to account facilities and manage customer preferences.

Lawful basis: Performance of a contract and, where applicable, legitimate obligations.

Customer service and enquiries

We use your information to respond to enquiries, resolve complaints, provide assistance and maintain records of customer communications.

Lawful basis: Performance of a contract, legitimate interests or compliance with legal obligations, depending on the circumstances.

Marketing communications

Where permitted by law, we may use your email address or other contact details to send information about products,services, offers and promotions.

We will obtain consent where required by PECR. Where the existing customer soft opt-in applies, we may send marketing communications about our own similar products or services, provided the applicable legal conditions are satisfied.

You can unsubscribe from marketing communications at any time using the unsubscribe facility in our emails or by contacting us directly.

Lawful basis: Consent or legitimate interests under the UK GDPR, together with compliance with PECR where applicable.

Website administration and improvement

We may use technical and usage information to:

• Maintain and operate our website
• Monitor website performance
• Improve website functionality
• Identify and resolve technical problems
• Protect our website against fraud and security threats
• Understand how visitors interact with our website

Lawful basis: Legitimate interests or consent depending on the technology and processing involved.

Legal and regulatory obligations

We may process and retain personal information where necessary to comply with applicable laws, accounting requirements, tax obligations,regulatory requirements and lawful requests from public authorities,

Lawful basis: Legal obligation.

Fraud prevention and security

We may process relevant personal information to detect, prevent and investigate fraudulent transactions, misuse of our website and other unlawful activities.

Lawful basis: Legitimate interests or another applicable lawful basis.

We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that we fully protect your rights and comply with our obligations under GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003.

9. How long and Where Do We Store Your Data?

We only keep your personal data for as long as we need to in order to use it as described above and/or for as long as we have your permission to keep it.

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, tax and regulatory requirements.

Your data will only be stored in the UK.

Data security is very important to Us, and to protect your data We have taken suitable measures to safeguard and secure data collected through Our Site.

10. Do We Share Your Data?

We do not sell your personal information to third parties.

However, we may share personal information with carefully selected third parties where necessary to operate our business and provide our services.

These may include:

• Payment providers: To process payments and refunds securely
• Delivery and courier companies: To deliver products and provide tracking information.
• Website hosting providers: To host and maintain our website
• E-commerce and technology providers: To support our online shop, customer accounts and order management.
• Marketing service providers: To manage newsletters and permitted marketing communications
• Analytics providers: To help us understand website performance and visitor behaviour.
• Professional advisers: Including accountants, insurers and legal advisers.
• Government authorities and regulators: Where disclosure is required by law or is otherwise lawful.

Where third parties process personal information on our behalf, we take appropriate steps to ensure that suitable contractual and security safeguards are in place.

11. Data security

We take appropriate technical and organisational measures to protect personal information againt accidental loss, destruction, alteration, unauthorised disclosure and unauthorised access.

These measures may include:

• Secure website connections and encryption where appropriate
• Restricted access to personal information
• Password protection and access controls
• Security monitoring and system updates
• Appropriate contractual arrangements with service providers
• Procedures for identifyig and responding to personal data breaches

Although we take reasonable steps to protect your information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12. What Happens If Our Business Changes Hands?

We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that data only for the same purposes for which it was originally collected by us.

13.How Can You Control Your Data?

In addition to your rights under the GDPR, set out in section 4, when you submit personal data via our site, you may be given options to restrict our use of your data. In particular, we aim to give you strong controls on our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from us which you may do by unsubscribing using the links provided in our emails and at the point of providing your details and by managing your Account).You may also wish to sign up to one or more of the preference services operating in the UK: The Telephone Preference Service (“the TPS”), the Corporate Telephone Preference Service (“the CTPS”), and the Mailing Preference Service (“the MPS”). These may help to prevent you receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receiving.

Your Right to Withhold Information

• You may access certain areas of our site without providing any data at all. However, to use all features and functions available on our site you may be required to submit or allow for the collection of certain data.
• You may restrict our use of Cookies. For more information, see our Cookie Policy.

How Can You Access Your Data?

You have the right to ask for a copy of any of your personal data held by Us (where such data is held). Under the GDPR, no fee is payable and We will provide any and all information in response to your request free of charge. Please contact us for more details at debbie@meandmyfriend.com or using the contact details below in section 18.

Our Use of Cookies

• Our Site may place and access certain First Party Cookies on your computer or device. First party Cookies are those placed directly by us and are used only by us. We use Cookies to facilitate and improve your experience of our site and to provide and improve our products and/or services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.
• By using our site you may also receive certain Third Party Cookies on your computer or device. Third party Cookies are those placed by websites, services, and/or parties other than us. Third party Cookies are sometimes used on our site for Social media. For more details, please refer to section 7 above, and to Cookie Policy These Cookies are not integral to the functioning of our site and your use and experience of our site will not be impaired by refusing consent to them.
• All Cookies used by and on our site are used in accordance with current Cookie Law. Please see our Cookie Policy for more details.

14. Complaints about the use of your personal information.

If you have any concerns about how we collect, use or process your personal information, we encourage you to contact us in the first instance.

We will operate an appropriate procedure for receiving, investigating and responding to data protection complaints in accordance with applicable legal requirements.

Please send complaints to:

debbie@meandmyfriend.com

We will acknowledge and investigate your complaint and inform you of the outcome within the applicable statutory requirements.

You also have the right to complain to the UK’s Information Commissioner’s Office (ICO).

You are not required to contact us before making a complaint to the ICO.

 15. Third-party websites

Our websites may contain links to third-party websites, services or platforms.

If you follow these links, please be aware that those websites may operate their own privacy policies and data protection practices.

We arenot responsible for the privacy practices or content of external websites. We recommend that you read their privacy policies before providing personal information.

16. Children’s privacy

Our website and products aew intended for the general public.

We do not knowingly collect personal information from children where doing so would be unlawful or inappropriate.

Where our sevices are likely to be accessed by children, we will take appropriate steps to ensure that personal information is collected and processed in accordance with applicable children’s data protection requirements.

If you believe that a child has provided us with personal information unlawfully please contact us, so that we can investigate.

17. Changes to Our Privacy Policy

We may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be immediately posted on our site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of our site following the alterations. We recommend that you check this page regularly to keep up-to-date.

 18. Contact us

If you have any questions about this Privacy Policy, how we handle your personal information or wish to exercise your data protection rights, please contact us:

Me & My Friend Designs Limited

Address: 25, Cornflower Way, Rushwick, Worcester WR2 5XP

Email: debbie@meandmyfriend.com

Website: meandmyfriend.co.uk

Last updated: 1 November 2026