Privacy Policy

Last updated: 29 July 2026

1. About This Privacy Policy

Greasy Nipple Gift Shop respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share your personal information when you:

visit our website;
create an account;
place an order;
contact us;
subscribe to our mailing list;
enter a promotion or competition;
leave a review; or
otherwise interact with us.

This policy should be read alongside our Cookie Policy, Terms and Conditions, and Refunds, Returns and Cancellations Policy.

2. Who We Are

Greasy Nipple Gift Shop is operated by:

Legal business name: Big Boolies.com Ltd
Trading name: Greasy Nipple Gift Shop
Business address: Unit 4D Showfield Ln, Malton YO17 6BT
Email: sales@bigboolies.com
Telephone: 01653 699660

For the purposes of UK data protection law, Big Boolies.com Ltd is the data controller responsible for the personal information described in this policy.

3. Personal Information We Collect

The information we collect depends on how you interact with us.

Information You Provide

We may collect:

your name;
billing and delivery addresses;
email address;
telephone number;
account username and password;
products ordered;
clothing sizes, colours and product preferences;
order and transaction details;
delivery instructions;
personalisation details;
photographs, logos, text or artwork submitted for custom products;
messages and correspondence;
returns, refund and complaint information;
product reviews and feedback;
marketing preferences;
competition or promotional-entry information; and
any other information you choose to provide.

Please avoid sending sensitive personal information unless it is genuinely necessary for your request.

Payment Information

Payments are processed through third-party payment providers such as Stripe, PayPal or another provider displayed at checkout.

We do not normally receive or store your complete debit or credit card number.

We may receive limited payment information such as:

payment status;
transaction reference;
payment method type;
the last few digits of a payment card; and
billing confirmation information.

Payment providers process information under their own privacy policies and security procedures.

Information Collected Automatically

When you visit our website, we may automatically collect:

your IP address;
browser type and version;
device type;
operating system;
approximate location;
pages viewed;
referring website;
dates and times of visits;
products viewed;
basket activity;
checkout activity;
account and login activity;
cookie identifiers; and
information about how you use the website.

This information may be collected through cookies, server logs, Google Site Kit, Google Analytics and similar technologies.

More information is available in our Cookie Policy.

4. How We Collect Your Information

We collect personal information:

directly from you when you place an order, create an account or contact us;
when you subscribe to our mailing list;
when you submit personalisation details or product artwork;
automatically when you use our website;
from payment processors when a payment is made;
from delivery companies regarding tracking and delivery;
from marketing and analytics providers;
from social-media platforms when you interact with our pages or adverts; and
from publicly available sources where appropriate and lawful.

5. How We Use Your Information

We may use personal information to:

process and fulfil orders;
take and confirm payments;
manufacture or personalise products;
arrange delivery;
provide order and delivery updates;
create and administer customer accounts;
respond to enquiries;
process cancellations, returns and refunds;
investigate faulty, damaged, missing or fraudulent orders;
provide customer service;
maintain tax and accounting records;
prevent fraud and protect our website;
improve our website, products and services;
analyse website performance;
remember shopping baskets and preferences;
request and display product reviews;
send marketing communications where legally permitted;
manage competitions and promotions;
establish, exercise or defend legal claims;
comply with legal and regulatory obligations; and
protect our rights, property, customers and staff.

We will not use your information for an unrelated purpose unless we have a lawful reason to do so and provide any additional privacy information required.

6. Our Lawful Bases

UK data protection law requires us to have a lawful basis for using personal information.

Depending on the activity, we rely on the following bases.

Contract

We use your information where it is necessary to:

process an order;
take payment;
produce personalised goods;
deliver products;
manage returns and refunds;
provide customer support connected to an order; and
take steps requested by you before entering into a contract.

Without this information, we may be unable to fulfil your order.

Legal Obligation

We use and retain information where necessary to comply with obligations relating to:

taxation;
accounting;
company records;
consumer protection;
fraud prevention;
product safety;
law-enforcement requests; and
other legal or regulatory requirements.

Legitimate Interests

We may use information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights.

These interests may include:

operating and improving our business;
securing our website;
preventing fraud and misuse;
responding to customer enquiries;
keeping appropriate business records;
understanding website and product performance;
managing complaints and legal claims;
requesting customer feedback;
promoting similar products to existing customers where legally permitted; and
protecting our legal rights.

Where required, we assess whether the processing is necessary and whether its impact on you is proportionate.

Consent

We rely on consent where you actively agree to particular processing, such as:

subscribing to marketing emails where consent is required;
accepting non-essential analytics or advertising cookies;
agreeing to receive certain promotional communications; or
giving permission for customer photographs or content to be used for marketing.

You may withdraw consent at any time. Withdrawing consent does not affect processing that took place before it was withdrawn.

7. Orders and Customer Accounts

When you place an order, we use your information to:

identify you;
verify and process payment;
produce the ordered items;
contact you about your order;
arrange delivery;
prevent fraud;
provide after-sales support; and
comply with accounting and consumer-law requirements.

When you create an account, we store information such as your name, contact details, addresses and order history so that you can access and manage your account.

You are responsible for keeping your password confidential. Contact us promptly if you believe that your account has been accessed without permission.

8. Personalised Products

Where you provide names, registration numbers, photographs, artwork, logos or other content for a personalised product, we use that information to:

assess the request;
prepare artwork;
produce the product;
communicate with you about approvals or problems; and
handle any later complaint or replacement.

You must ensure that you have permission to submit personal information relating to another person.

For example, you should not provide another person’s photograph, name or registration information without appropriate authority.

We may share submitted content with our printers, embroiderers, manufacturers or fulfilment providers where necessary to produce your order.

9. Marketing Communications

We may send you marketing about products, offers and news where:

you have actively consented; or
the law permits us to contact an existing customer about similar products and you were given a clear opportunity to opt out.

You can stop marketing emails at any time by:

clicking the unsubscribe link in an email;
changing your communication preferences where available; or
contacting sales@bigboolies.com.

Service messages about an order, delivery, refund, account security or another transaction are not marketing and may still be sent after you unsubscribe.

Agreeing to receive marketing is not a condition of making a purchase.

Marketing consent must be freely given and separate from accepting general terms. Existing customers may only be contacted under the customer “soft opt-in” where the relevant legal conditions and opt-out opportunities have been met.

10. Brevo and Mailing Lists

We may use Brevo or another email-marketing provider to:

manage mailing lists;
record marketing preferences;
send newsletters and promotions;
record email delivery;
measure email opens and clicks, where permitted; and
process unsubscribe requests.

Your name, email address, preferences and engagement information may therefore be processed by our email provider on our behalf.

We keep a limited suppression record after you unsubscribe so that we can ensure we do not accidentally send further marketing to that address.

11. Cookies and Analytics

Our website uses cookies and similar technologies.

Some cookies are necessary for:

maintaining the shopping basket;
processing checkout;
maintaining account sessions;
preventing fraud;
remembering privacy choices; and
keeping the website secure.

Other cookies may be used for:

analytics;
performance measurement;
advertising;
remarketing;
understanding visitor behaviour; and
measuring campaign results.

We will request consent before placing non-essential cookies where legally required.

You can accept, reject or manage optional cookies using our cookie banner or settings tool.

Please see our Cookie Policy for further information.

12. Who We Share Information With

We may share personal information with carefully selected organisations where necessary.

These may include:

WooCommerce and WordPress service providers;
website hosting and maintenance providers;
payment processors such as Stripe or PayPal;
Brevo or other email-marketing providers;
printers, embroiderers and product manufacturers;
fulfilment and packaging providers;
Royal Mail, couriers and delivery companies;
Google Analytics and Google Site Kit;
fraud-prevention and website-security providers;
cloud-storage and IT providers;
accountants, bookkeepers and professional advisers;
insurers;
banks and payment institutions;
customer-review platforms;
advertising and social-media platforms, where consent or another lawful basis applies;
HM Revenue & Customs;
courts, regulators and law-enforcement authorities; and
prospective purchasers or advisers in connection with a sale, merger or restructuring of the business.

We only share information that is reasonably necessary for the relevant purpose.

Service providers acting on our behalf are expected to protect personal information and only process it in accordance with our instructions and applicable law.

We do not sell personal information to third parties.

13. Delivery Companies

We share information with delivery providers where necessary to deliver your order.

This may include:

your name;
delivery address;
telephone number;
email address;
delivery instructions;
parcel contents or category where required; and
tracking information.

Delivery providers may contact you directly regarding delivery arrangements.

Some delivery companies act as independent data controllers for parts of their service and may provide their own privacy information.

14. Fraud Prevention and Security

We may use personal information to detect, investigate and prevent:

fraudulent payments;
stolen payment details;
account misuse;
chargeback abuse;
malicious website activity;
false claims; and
other unlawful conduct.

This may involve sharing information with payment providers, banks, fraud-prevention services, insurers or law-enforcement authorities.

Automated tools may flag an order as higher risk, but we do not intend to make solely automated decisions that have a legal or similarly significant effect on you without appropriate safeguards.

We may request additional information before accepting or dispatching a suspicious order.

15. International Data Transfers

Some of our service providers may process information outside the United Kingdom.

This may happen where providers operate international cloud, analytics, payment, marketing or support systems.

Where personal information is transferred outside the UK, we take reasonable steps to ensure that an appropriate legal safeguard is used where required, such as:

UK adequacy regulations;
the UK International Data Transfer Agreement;
the UK Addendum to approved contractual clauses; or
another safeguard permitted by UK data protection law.

You may contact us for further information about the safeguards used for a particular provider.

International transfers must use an applicable UK GDPR transfer mechanism where the destination is not covered by UK adequacy regulations.

16. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, security and dispute-resolution requirements.

Our typical retention periods are:

Order and Accounting Records

Order, invoice, payment and accounting records will normally be retained for up to six years after the end of the relevant financial year, or longer where legally required.

Limited companies are generally required to retain accounting records for six years from the end of the relevant company financial year.

Customer Accounts

Account information will normally be retained while your account remains active.

We may delete or anonymise inactive accounts after a reasonable period, while retaining order records that we must keep for legal or accounting purposes.

Customer Enquiries

General enquiries that do not result in an order will normally be retained for up to two years after the enquiry is resolved, unless longer retention is necessary.

Complaints, Returns and Legal Claims

Complaint, refund, return and dispute records may normally be retained for up to six years after the matter is closed where needed to establish, exercise or defend legal claims.

Personalisation Files

Customer-supplied artwork and personalisation files will normally be retained only for as long as necessary to produce the order and handle reasonable after-sales queries.

They may be retained for up to two years after fulfilment unless:

you ask us to delete them earlier;
we need them for a dispute or legal obligation;
you have agreed that we may retain them for repeat orders; or
the content forms part of a business record we are legally required to keep.

Marketing Information

Marketing information is retained until you unsubscribe, withdraw consent or we determine that it is no longer appropriate to contact you.

We may retain a minimal suppression record indefinitely to respect your opt-out.

Website and Security Logs

Website and security logs will normally be retained for up to 12 months, unless a longer period is necessary to investigate a security incident or legal claim.

Cookie Data

Cookie retention periods vary by cookie and are described in our Cookie Policy or cookie settings tool.

When information is no longer required, we will delete, anonymise or securely dispose of it.

17. How We Protect Information

We use reasonable technical and organisational safeguards designed to protect personal information.

These may include:

encrypted website connections;
restricted administrative access;
access controls and passwords;
software updates;
security monitoring;
backups;
payment processing through specialist providers;
staff and contractor confidentiality obligations; and
appropriate agreements with service providers.

No internet or storage system can be guaranteed completely secure. You should use a strong, unique password and contact us if you suspect unauthorised access to your account.

18. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

be informed about how your information is used;
request access to your personal information;
request correction of inaccurate or incomplete information;
request deletion of your information;
request restriction of processing;
object to certain processing;
object to direct marketing at any time;
request transfer of information you provided in a suitable format;
withdraw consent;
challenge certain solely automated decisions; and
complain about how your information has been handled.

These rights are not absolute. For example, we may need to retain order information to comply with tax law or defend a legal claim even after you request deletion.

We will normally respond to a valid rights request within one calendar month. More time may be permitted for complex or multiple requests.

19. Exercising Your Rights

To exercise a data protection right, contact:

Email: sales@bigboolies.com
Postal address: Unit 4D Showfield Ln, Malton YO17 6BT

Please state:

your name;
the right you wish to exercise;
the information or account concerned; and
any details that will help us identify the relevant records.

We may request proof of identity where reasonably necessary to protect your information.

We will not normally charge a fee. A reasonable fee may be charged, or a request refused, where the law permits this because a request is manifestly unfounded or excessive.

20. Data Protection Complaints

Send complaints to:

Email: sales@bigboolies.com
Postal address: [BUSINESS OR REGISTERED ADDRESS]

Please include:

your name and contact details;
an explanation of your concern;
the outcome you are seeking; and
relevant order numbers or correspondence.

We will acknowledge and investigate the complaint in accordance with applicable data protection requirements.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

We would appreciate the opportunity to address your concern before you approach the ICO.

21. Children’s Information

Our website and products are not specifically directed at children, and customers must be legally capable of entering into a purchase contract.

We do not knowingly collect personal information directly from children for marketing purposes.

A parent or guardian should place an order where a personalised product contains information about a child.

22. Third-Party Websites

Our website may link to websites, payment services, social-media platforms or other services operated by third parties.

We do not control how those organisations use personal information.

You should read the privacy policy of any third-party service you use.

23. Social Media

When you interact with our social-media pages, the relevant platform may collect and process information under its own privacy policy.

We may receive:

your public profile information;
comments and messages;
reactions and engagement information;
competition entries; and
advertising performance information.

Do not send confidential payment information through social-media messages.

24. Customer Reviews and Photographs

Where you submit a product review, photograph or testimonial, we may publish the content together with your first name, display name or other agreed attribution.

We will obtain additional permission where required before using identifiable customer photographs in wider advertising or promotional material.

You may contact us if you wish to request removal of content that you submitted. Removal may not always be possible where the content has already been lawfully printed, distributed or incorporated into completed marketing material.

25. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

our business;
our website;
the services we use;
the personal information we collect; or
legal and regulatory requirements.

The latest version will be published on this page with a revised “Last updated” date.

Where a change materially affects how we use existing personal information, we will provide additional notice where required.

26. Contact Us

For privacy enquiries, rights requests or complaints, contact:

Greasy Nipple Gift Shop
Operated by Big Boolies.com Ltd

Email: sales@bigboolies.com
Address: Unit 4D Showfield Ln, Malton YO17 6BT
Telephone: 01653 699660