Privacy policy

This Privacy Policy describes how mycomfypajama.shop collects, uses, stores, shares and otherwise processes personal information when you visit our website, purchase products, communicate with us or otherwise interact with our services.

For privacy-related enquiries, contact:

info@mycomfypajama.shop

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed in connection with:

• Visiting mycomfypajama.shop;
• Browsing products;
• Creating or using customer functionality where available;
• Placing or attempting to place an order;
• Processing payments;
• Shipping and delivery;
• Customer-service communications;
• Returns and refunds;
• Marketing communications;
• Fraud prevention;
• Website analytics;
• Cookies and similar technologies; and
• Other legitimate operation of our ecommerce services.

2. Data Protection Framework

Where applicable, we process personal information in accordance with relevant UK data-protection and privacy legislation, including the UK GDPR, Data Protection Act 2018, PECR and changes introduced by the Data (Use and Access) Act 2025.

The Data (Use and Access) Act 2025 made changes to UK data-protection and electronic-communications law, with its data-protection provisions fully in force by 19 June 2026.

3. Personal Information We May Collect

Depending on how you interact with us, we may collect information including:

Identity Information

• Name;
• Account information, where applicable; and
• Other identifiers reasonably necessary to provide our services.

Contact Information

• Email address;
• Telephone number where provided;
• Billing information; and
• Delivery information.

Order Information

• Products purchased;
• Product selections;
• Order number;
• Purchase history;
• Return and refund information; and
• Customer-service records.

Payment Information

Payments may be processed by Shopify, payment gateways, card networks, banks or other payment providers.

We may receive transaction-related information such as payment status, payment method type and transaction identifiers. Full payment-card details may be processed directly by authorised payment providers rather than stored by us.

Device and Technical Information

We or our service providers may collect:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Cookie identifiers;
• Website activity;
• Referral information;
• Approximate location derived from technical information; and
• Diagnostic and security data.

Communications

If you contact us, we may process:

• Your email address;
• Message content;
• Order information;
• Attachments;
• Customer-support history; and
• Other information you voluntarily provide.

4. Sources of Personal Information

We may obtain personal information:

• Directly from you;
• Automatically through your use of the website;
• From Shopify;
• From payment providers;
• From fulfilment and delivery providers;
• From fraud-prevention providers;
• From analytics providers;
• From marketing and advertising services where legally permitted; and
• From other service providers involved in operating our store.

5. How We Use Personal Information

We may process personal information to:

• Provide and operate our website;
• Process orders;
• Take and verify payments;
• Provide order confirmations;
• Arrange shipping and delivery;
• Process returns and refunds;
• Respond to customer enquiries;
• Prevent fraud and abuse;
• Maintain security;
• Detect technical problems;
• Comply with legal obligations;
• Maintain transaction and accounting records;
• Establish, exercise or defend legal claims;
• Improve our products and services;
• Understand website usage;
• Conduct analytics;
• Personalise website functionality where permitted;
• Send marketing communications where legally permitted; and
• Manage consent and privacy preferences.

6. Legal Bases for Processing

Depending on the particular processing activity, we may rely on one or more lawful bases recognised under applicable UK data-protection law.

Contract

We may process information where necessary to enter into or perform a contract with you, including:

• Processing an order;
• Taking payment;
• Arranging delivery;
• Providing customer service relating to an order; and
• Processing returns or refunds.

Legal Obligation

We may process information where necessary to comply with legal requirements, including taxation, accounting, consumer-protection and lawful regulatory obligations.

Legitimate Interests

Where permitted, we may process information where necessary for legitimate business interests, provided those interests are not overridden by your applicable rights and interests.

Such interests may include:

• Securing our website;
• Preventing fraud;
• Improving our services;
• Managing business operations;
• Analysing performance; and
• Protecting legal rights.

Consent

Where consent is required, we may rely on your consent for activities such as certain marketing communications, advertising technologies, cookies or similar technologies.

Where processing is based on consent, you may withdraw consent at any time, subject to applicable law.

7. Shopify

Our store may be hosted and supported by Shopify.

Shopify provides ecommerce infrastructure that may enable website hosting, checkout, payments, order administration, fraud prevention, analytics and other services.

Shopify may process personal information as described in its applicable privacy documentation and according to the configuration of our store.

Shopify advises merchants operating in the UK to identify applicable legal bases for processing in their privacy documentation and configure relevant customer-privacy tools appropriately.

8. Cookies and Similar Technologies

We may use cookies, pixels, local storage, tags and similar technologies.

These technologies may be used for:

• Essential website functions;
• Shopping-cart functionality;
• Checkout;
• Security;
• Authentication;
• Remembering preferences;
• Analytics;
• Performance measurement;
• Advertising; and
• Marketing attribution.

Where consent is legally required before using a particular non-essential technology, we aim to obtain appropriate consent.

Shopify provides customer-privacy functionality through which merchants can manage cookie banners and other privacy configurations.

9. Marketing Communications

Where legally permitted, we may send customers marketing emails or other communications concerning products, promotions or store updates.

Where consent is required, marketing will be sent on the basis of appropriate consent.

You may unsubscribe from marketing emails using the unsubscribe mechanism contained in the communication or by contacting:

info@mycomfypajama.shop

Transactional communications relating to an order or service are not necessarily marketing communications and may continue where necessary.

10. Sharing Personal Information

We may share personal information with service providers where reasonably necessary to operate our business.

Recipients may include:

• Shopify;
• Payment processors;
• Banks and card networks;
• Delivery companies;
• Fulfilment providers;
• Cloud and hosting providers;
• Customer-support providers;
• Analytics providers;
• Fraud-prevention providers;
• IT and security providers;
• Marketing providers where lawful;
• Professional advisers; and
• Governmental, regulatory or law-enforcement authorities where legally required.

We do not authorise service providers to use information contrary to applicable contractual and legal requirements.

11. International Data Transfers

Some providers that support our ecommerce operations may process personal information outside the United Kingdom.

Where UK data-protection law requires safeguards for an international transfer, appropriate lawful transfer mechanisms should be used.

Such safeguards may include applicable adequacy regulations, recognised contractual safeguards or another permitted transfer mechanism.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, regulatory, accounting, fraud-prevention and dispute-resolution requirements.

Retention periods may vary depending on:

• The nature of the information;
• The reason it was collected;
• Contractual requirements;
• Legal obligations;
• Potential disputes; and
• Security requirements.

When information is no longer reasonably required, it may be deleted or anonymised in accordance with applicable procedures.

13. Data Security

We use reasonable administrative, organisational and technical measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers should also take reasonable steps to protect their own devices, passwords and account credentials.

14. Your UK Data Protection Rights

Subject to applicable law and relevant limitations, you may have rights concerning your personal information, including rights to:

• Request access;
• Request correction of inaccurate information;
• Request deletion in qualifying circumstances;
• Request restriction of processing;
• Object to certain processing;
• Request data portability where applicable;
• Withdraw consent where processing depends on consent; and
• Challenge certain qualifying automated decisions where applicable.

To exercise a privacy right, contact:

info@mycomfypajama.shop

We may request reasonable information to verify identity before acting on a request.

15. Complaints

If you have concerns about our processing of personal information, please contact us first at:

info@mycomfypajama.shop

Individuals may also have the right to complain to the UK Information Commissioner's Office where applicable.

16. Children's Privacy

Our services are not intended to knowingly collect personal information from children in circumstances prohibited by applicable law.

If you believe a child has provided personal information improperly, contact info@mycomfypajama.shop.

17. Third-Party Websites

Our website may contain links to independent websites or services.

We are not responsible for the privacy practices of independent third parties. Customers should review the privacy notices provided by those third parties before supplying personal information.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our services;
• Technology;
• Business practices;
• Legal requirements;
• Regulatory guidance; or
• Service providers.

The updated version will be published on mycomfypajama.shop with an appropriate revision date.

19. Contact

For privacy questions or requests:

mycomfypajama.shop
Email: info@mycomfypajama.shop