Privacy Policy

Freddie & Bear is a UK-based personalised children's clothing business trading at mollybear.uk. References to "we", "us" or "our" in this policy refer to Freddie & Bear.

Our contact email for data and privacy matters is hello@mollybear.uk.

We collect the following personal data when you place an order or contact us:

• Name and delivery address
• Email address
• Phone number (optional)
• Order details, including personalisation text you provide
• Payment information (processed securely by Stripe — we do not store card details)
• IP address and browser information (collected automatically via cookies)

We use your data to:

• Process and fulfil your order
• Communicate with you about your order
• Send you service-related emails (order confirmation, dispatch notification)
• Respond to enquiries and support requests
• Comply with legal obligations
• Improve our website and services (using anonymised analytics)

We will only send you marketing emails if you have specifically opted in to receive them. You can unsubscribe at any time.

We process your data on the following legal bases:

• Contract performance — processing your order and delivering your goods
• Legitimate interests — improving our website and detecting fraud
• Consent — marketing emails (where you have opted in)
• Legal obligation — retaining records for tax purposes

Our website uses cookies to improve your experience. Cookies we use include:

• Essential cookies — required for the shopping cart and checkout to function
• Analytics cookies — help us understand how visitors use our site (anonymised data only)

You can manage your cookie preferences using our cookie banner or by adjusting your browser settings. Refusing non-essential cookies will not affect your ability to shop with us.

We share data with the following trusted third parties only as necessary:

• Stripe — payment processing (Stripe's privacy policy applies to card data)
• Royal Mail / delivery partners — your name and address for delivery purposes
• Hosting provider — our website is hosted on servers in the EU/UK

We do not sell, rent or trade your personal data to any third parties.

We retain order records for 6 years as required by UK tax law. We delete or anonymise other personal data when it is no longer needed for the purpose it was collected.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to processing based on legitimate interests
• Request restriction of processing
• Data portability (receive your data in a structured format)
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email hello@mollybear.uk. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO), at ico.org.uk.

We may update this policy from time to time. The current version will always be available at mollybear.uk/pages/privacy. We will notify you of significant changes by email where appropriate.