Last updated: 21 September 2026
This Privacy Policy explains how Alina Olaru, trading as The Bunny Hat (“The Bunny Hat”, “we”, “us” or “our”) collects, uses, stores and shares personal information when you visit thebunnyhat.co.uk, create an account, place an order, contact us or otherwise use our website and services.
We are committed to protecting your privacy and handling your personal information in accordance with applicable UK data protection law, including the UK GDPR and Data Protection Act 2018.
Who We Are
The Bunny Hat is operated by:
Alina Olaru trading as The Bunny Hat
13 Cheers Drive
Speedwell
Bristol
BS5 7FQ
United Kingdom
Privacy enquiries can be sent to:
For data protection purposes, we are the controller of the personal information described in this Privacy Policy.
Personal Information We Collect
Depending on how you use our website, we may collect the following information:
Contact Information
This may include:
- your name
- email address
- billing address
- delivery address
- telephone number where provided
Order and Transaction Information
We collect information relating to purchases you make from us, including:
- products ordered
- product variations
- sizes and colours
- personalisation details
- embroidery wording
- uploaded files or photographs
- order value
- delivery method
- order history
- refunds, cancellations or replacements
Personalisation Information
Many of our products are made to order.
You may provide information such as:
- names
- initials
- dates
- wording
- company names
- company logos
- photographs
- pet photographs
- artwork or other files required to create your personalised product
We use this information only where necessary to produce and fulfil your order, provide customer support or resolve an issue relating to your purchase.
Please avoid uploading unnecessary sensitive or confidential information.
Account Information
If you create an account, we may process:
- your name
- email address
- account login information
- saved addresses
- previous orders
- account preferences
Passwords are handled through the website’s secure account system and are not visible to us in plain text.
Payment Information
Payments are processed by third-party payment providers such as Stripe and, where enabled, PayPal.
We do not normally receive or store your full payment-card number.
Payment providers may process information such as:
- card or payment details
- billing information
- payment confirmation
- transaction identifiers
- fraud-prevention information
Their processing is also subject to their own privacy policies.
Communications
If you contact us by email, through the website or through another customer-service channel, we may keep a record of your message and our response.
Technical and Device Information
When you use our website, certain technical information may be collected automatically, including:
- IP address
- browser type
- device information
- operating system
- pages visited
- website interactions
- cookie information
Some of this information is necessary for the website to function securely and correctly.
How We Use Your Personal Information
We may use personal information to:
- process and fulfil your order
- personalise and embroider products
- arrange delivery
- contact you about your order
- process payments
- handle returns, refunds, replacements and complaints
- maintain customer accounts
- provide customer support
- prevent fraud and misuse
- maintain the security of our website
- comply with tax, accounting and legal obligations
- improve the operation of our website and services
- respond to legal or regulatory requests
Where you have specifically agreed, we may also use your information for marketing communications.
You can withdraw marketing consent at any time.
Our Legal Bases for Processing
Under UK data protection law, we rely on different legal bases depending on why we use your information.
Contract
We process information where it is necessary to:
- accept your order
- take payment
- create personalised products
- deliver your purchase
- provide customer service relating to your order
Legal Obligation
We may retain and process certain information where required by law, including for tax, accounting and regulatory purposes.
Legitimate Interests
We may process information where reasonably necessary for legitimate business purposes, such as:
- preventing fraud
- protecting our website
- improving our services
- resolving disputes
- maintaining appropriate business records
We consider your privacy rights when relying on legitimate interests.
Consent
Where required, we rely on your consent for activities such as certain cookies or marketing communications.
You can withdraw consent at any time.
Cookies
Our website uses cookies and similar technologies.
Some cookies are strictly necessary for functions such as:
- shopping basket operation
- checkout
- customer accounts
- security
- payment processing
- remembering website preferences
Other cookies may require your consent.
We use Complianz to manage cookie consent on the website.
When you first visit the site, you can accept, deny or manage your cookie preferences.
For further information, please see our Cookie Policy (UK).
WooCommerce and Website Hosting
Our online shop operates using WordPress and WooCommerce.
Our website is hosted through Hostinger.
These services may process technical or customer information where necessary to operate, secure, host and maintain the website and online store.
Payment Providers
We use third-party payment services to securely process payments.
These may include:
- Stripe
- PayPal
Payment providers may independently collect and process information required to authorise payments, prevent fraud and meet legal obligations.
We do not control their independent use of personal information, and customers should refer to the relevant provider’s privacy policy for further information.
Delivery Providers
We may share the information necessary to deliver your order with delivery companies.
For UK orders this may include Royal Mail.
Information shared may include:
- recipient name
- delivery address
- contact details where required
- parcel and delivery information
Only information reasonably required to complete delivery is provided.
Other Service Providers
We may use trusted service providers to help operate our business, including providers involved in:
- website hosting
- ecommerce functionality
- payment processing
- email delivery
- website security
- backups
- shipping
- customer support
- technical maintenance
These providers may process personal information only where necessary to provide their services.
When We May Share Personal Information
We do not sell your personal information.
We may share information where reasonably necessary with:
- payment providers
- delivery companies
- website and hosting providers
- IT and security providers
- professional advisers
- government, regulatory or law-enforcement authorities where legally required
We may also disclose information where necessary to establish, exercise or defend legal claims or protect our customers, business or website from fraud or misuse.
Uploaded Images, Logos and Artwork
Where you upload photographs, company logos, pet photographs or other artwork for a personalised product, we use those files for the purpose of preparing and fulfilling your order.
Files may also be retained for a reasonable period after fulfilment where necessary for:
- customer support
- replacements
- repeat orders
- resolving complaints or order issues
If you would like us to delete an uploaded personalisation file when it is no longer required, you may contact us.
How Long We Keep Your Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.
Order and transaction records may be retained for longer periods where required for:
- accounting
- tax
- legal compliance
- fraud prevention
- resolving disputes
Customer account information may remain stored while the account is active.
Personalisation files may be deleted when they are no longer reasonably required for fulfilling orders, repeat orders or customer-service purposes.
Security
We take reasonable technical and organisational measures to protect personal information against:
- unauthorised access
- loss
- misuse
- alteration
- disclosure
Our website uses secure connections and trusted payment processors.
However, no method of transmitting or storing information online can guarantee absolute security.
International Data Transfers
Some service providers we use may process or store information outside the United Kingdom.
Where personal information is transferred internationally, appropriate legal safeguards should be used where required by applicable data protection law.
Your Rights
Under UK data protection law, depending on the circumstances, you may have the right to:
- request access to personal information we hold about you
- request correction of inaccurate information
- request deletion of your personal information
- request restriction of processing
- object to certain processing
- request transfer of information in a portable format
- withdraw consent where processing is based on consent
These rights are not absolute and may be subject to legal exceptions.
To make a privacy request, contact:
We may need to confirm your identity before completing certain requests.
Marketing Communications
If you choose to receive promotional emails or other marketing communications, you may unsubscribe at any time using the unsubscribe option provided or by contacting us.
Unsubscribing from marketing will not prevent us from sending necessary communications about an order, payment, delivery or customer-service request.
Children’s Privacy
Our website and purchasing services are intended for adults.
Although many of our products are designed for children, purchases should be made by a parent, guardian or other adult.
We do not knowingly ask children to create accounts or provide personal information directly to us.
Third-Party Websites
Our website may contain links to other websites or platforms, including social-media websites.
Once you leave our website, the privacy practices of the third-party website apply.
We are not responsible for the privacy practices or content of third-party websites.
Complaints
If you have concerns about how we use your personal information, please contact us first so we can try to resolve the issue.
You also have the right to complain to the UK data protection regulator:
Information Commissioner’s Office (ICO)
Information about making a complaint is available on the ICO website.
Changes to This Privacy Policy
We may update this Privacy Policy when our website, services, suppliers or legal obligations change.
The latest version will always be published on this website with the date of the most recent update shown at the top.
Contact Us
For privacy enquiries, data requests or questions about this Privacy Policy, contact:
Alina Olaru trading as The Bunny Hat
13 Cheers Drive
Speedwell
Bristol
BS5 7FQ
United Kingdom
Email: info@thebunnyhat.co.uk