Privacy policy
Who we are
Fig & Fox is a trading name of Whodavila, Meadow Place Road. We are the data controller for the personal information described here. You can contact us about anything in this policy at whodavila1@gmail.com.
What we collect
- Information you give us: name, delivery and billing address, email address, telephone number, order history, and anything you write to us in a message or review.
- Payment information: your card details are handled directly by our payment providers. We never see or store your full card number.
- Information collected automatically: IP address, device and browser type, pages viewed, and how you arrived at our site, gathered through cookies and similar technologies.
Why we use it, and our lawful basis
- To take payment and deliver your order. Lawful basis: performance of a contract.
- To answer your questions and handle returns. Lawful basis: performance of a contract.
- To meet our tax, accounting and product safety obligations. Lawful basis: legal obligation.
- To send marketing emails, where you have asked us to. Lawful basis: consent, which you can withdraw at any time using the unsubscribe link in any email.
- To understand how our site is used and improve it, and to measure advertising. Lawful basis: consent for non essential cookies, legitimate interests for basic site security and fraud prevention.
Who we share it with
- Shopify, which hosts our store and processes orders on our behalf.
- Payment providers, who process your payment.
- Our supply and fulfilment partners, who receive your name, address and order details so your parcel can be delivered. Some are located outside the UK.
- Delivery carriers.
- Email and analytics providers, and advertising platforms where you have consented to marketing cookies.
- Professional advisers and authorities, where we are required by law.
We do not sell your personal information.
International transfers
Some of our providers and supply partners are based outside the UK. Where personal information is transferred outside the UK, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, so that your information keeps an equivalent level of protection.
How long we keep it
Order and transaction records are kept for six years plus the current financial year, to meet HMRC requirements. Marketing consents are kept until you withdraw them. Account information is kept while your account is open and for a reasonable period afterwards.
Your rights
Under UK GDPR you have the right to access your personal information, to have inaccurate information corrected, to have information erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. Email whodavila1@gmail.com and we will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.
Cookies
We use cookies that are strictly necessary for the site to work, and, with your consent, cookies for analytics and advertising. You can manage your choices through the cookie banner or in your browser settings.
Children
Our products are for babies and toddlers, but our store is intended for adults. We do not knowingly collect personal information from anyone under 16.
Changes
We may update this policy. The version shown here is always the current one, and we will note the date of the last update.
Last updated: 14/08/2026