Privacy policy
Privacy Policy
Last updated: June 2026
Introduction
The Zen Woodpecker ("we", "our", "us") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, purchase products, create or use an account, contact us, or otherwise interact with us.
Data Controller
The Zen Woodpecker
Email: hello@thezenwoodpecker.com
Address: Flat 6, 19 Seaview Road, Mundesley, Norfolk, NR11 8DH, United Kingdom
If you have any questions about this Privacy Policy or your personal data, please contact us using the details above.
Personal Data We Collect
Information You Provide Directly
We may collect personal information that you provide to us, including:
Name
Billing address
Shipping address
Email address
Telephone number
Payment information, processed securely by our payment providers
Account information, if you create or use a customer account
Information you provide when contacting us
Information relating to purchases, returns, reviews, preferences, and marketing choices
Information Collected Automatically
When you visit our website, we may automatically collect certain information, including:
IP address
Browser type and version
Device information
Operating system
Time zone settings
Website usage data
Pages viewed
Referral source information
Cookie and tracking technology information
Information about how you interact with our website, emails, ads, and services
How We Use Your Personal Data
We use personal data to:
Process and fulfil orders
Deliver products and services
Process payments
Communicate with you about orders, enquiries, reviews, and customer service matters
Provide customer support
Manage customer accounts
Prevent fraud and maintain website and checkout security
Improve our website, services, and customer experience
Analyse website performance and visitor behaviour
Personalise your experience
Send marketing communications where permitted by law or where consent has been provided
Run and improve email campaigns, including cart recovery and related marketing activities
Support advertising, marketing, and customer discovery activities where permitted by law and, where required, with your consent
Comply with legal, tax, regulatory, and accounting obligations
Lawful Bases for Processing
Under UK data protection law and, where applicable, the GDPR, we rely on the following lawful bases:
Contract
Where processing is necessary to fulfil an order, provide products or services, manage your account, or respond to requests relating to your purchase
Legitimate Interests
To operate and improve our business, maintain website security, prevent fraud, analyse website performance, manage customer relationships, and improve our products, services, and marketing
Consent
Where you have consented to receive marketing communications or where consent is required for certain cookies, tracking technologies, analytics, personalisation, or advertising activities
Legal Obligation
Where processing is necessary to comply with tax, accounting, consumer protection, or other legal requirements
How Shopify Processes Personal Data
Our store is hosted by Shopify. Shopify collects and processes personal data to provide us with services and to support the operation of our online store.
Where Shopify Network Intelligence and related enhanced Shopify services are enabled, Shopify may process information about customer activity on our store to help provide and improve services that can support a more customised customer experience, more relevant marketing, and a better understanding of how customers interact with our store and related services.
Information about customer activity may be processed by Shopify and may also be shared with third parties that help provide these services, including parties located in other countries.
You can read more about how Shopify processes personal data in the Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/app-users
You can also learn more about privacy choices that may be available through Shopify here: https://privacy.shopify.com
Sharing Your Personal Data
We share personal data with trusted third-party service providers and partners who help us operate our business and provide our services.
These may include:
-
Shopify
, which powers our online store and provides ecommerce, account, checkout, analytics, marketing, and related services
-
Payment providers
, which securely process payments
-
Shipping and delivery providers
, which help us fulfil orders
-
Google Analytics
, which helps us understand how visitors use our website and improve user experience
-
Technology, analytics, and marketing providers
, where used, to help us understand how visitors use our website, improve user experience, personalise services, send communications, and support marketing activities
-
Professional advisers and authorities
, where necessary for legal, accounting, tax, regulatory, compliance, or fraud-prevention purposes
We may also disclose personal data where necessary to comply with legal obligations, respond to lawful requests, protect our rights, or prevent fraud and security threats.
International Transfers
Some of our service providers and partners, including Shopify and Google Analytics, may process personal data outside the United Kingdom or the European Economic Area.
Where personal data is transferred internationally, appropriate safeguards are used to protect that information, including:
Countries recognised as providing an adequate level of protection
Standard Contractual Clauses (SCCs)
The UK International Data Transfer Agreement (IDTA)
Other lawful transfer mechanisms recognised under applicable data protection law
Marketing Communications
If you subscribe to our newsletter, create an account, make a purchase, or otherwise interact with our store, we may send you service-related communications and, where permitted by law or where you have consented, marketing communications about products, promotions, special offers, and updates.
You may unsubscribe from marketing emails at any time by:
Clicking the unsubscribe link in any marketing email; or
Contacting us directly
We will only send marketing communications where permitted by applicable law.
Cookies and Similar Technologies
Our website uses cookies and similar technologies to ensure the website functions properly, personalise your experience, perform analytics, support customer accounts and checkout functionality, and, where permitted, support advertising and marketing activities.
We and our partners, including Shopify and Google Analytics, may use these technologies for these purposes. Where required by law, we request your consent before using non-essential cookies or similar technologies.
If Shopify Network Intelligence and related enhanced services are enabled, information collected through cookies and similar technologies may also be used by Shopify in connection with the services described above, subject to applicable law and customer privacy choices.
Managing Cookie Preferences
You can accept or decline non-essential cookies through our cookie banner and manage your preferences at any time using our cookie settings tool. You can also control cookies through your browser settings.
Where available, customers may also exercise certain privacy choices through Shopify here: https://privacy.shopify.com
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, reporting, and compliance requirements.
Order and transaction records may be retained for up to 6 years after the end of the relevant tax year to comply with UK accounting and tax obligations.
Where personal data is no longer required, it will be securely deleted or anonymised.
Your Rights
Depending on where you are located, you may have rights in relation to your personal data, including the right to:
Access your personal data
Correct inaccurate or incomplete information
Request deletion of your personal data
Restrict processing
Object to processing
Request transfer of your personal data to another organisation
Withdraw consent at any time where processing is based on consent
Complain to the relevant data protection authority
If you are in the United Kingdom, you have the right to make a complaint to the Information Commissioner's Office (ICO). Information about how to contact the ICO is available on its website: https://ico.org.uk
If you are in the European Union, details of our EU representative are available on our separate EU representative page.
To exercise any of your rights, please contact us using the details provided in this Privacy Policy.
Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or misuse.
However, no method of internet transmission or electronic storage is completely secure and we cannot guarantee absolute security.
Minors
We do not knowingly collect personal information from children. Our website is intended for adults, including parents or guardians making purchases on behalf of children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the details in this Privacy Policy and we will take steps to delete that information where appropriate.
Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing personal information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, services, legal requirements, Shopify settings, or regulatory obligations.
Any changes will be published on this page together with an updated revision date.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
The Zen Woodpecker
Email: hello@thezenwoodpecker.com
Address: Flat 6, 19 Seaview Road, Mundesley, Norfolk, NR11 8DH, United Kingdom