Privacy policy

Last updated: October 29, 2026

Who we are and what this covers

John & Mary Copper owns and runs this website and online shop. In this policy, "our shop" means the website together with everything offered on it: its information, content, features and tools, and the products and services we sell. Our shop is built on Shopify's platform, and that is how we're able to offer it to you.

This policy describes the personal information we gather about you, what we do with it, and who we may pass it to. It applies when you browse or use our shop, when you place an order or make any other transaction through it, and whenever else you're in contact with us.

Where this policy and our Terms of Service say different things about how personal information is collected, handled or disclosed, this policy is the one that applies.

Please read it carefully. By using any part of our shop, you confirm that you've read this policy and that you understand what we collect and how we use and share it, as explained here.

What we mean by personal information

Personal information is anything that identifies you or another person, or that could reasonably be tied back to you or to them. In this policy we also call it "your information" for short. It doesn't include details we collect anonymously, or details that have been de-identified so they can no longer point to you or reasonably be tied to you.

What we collect

Exactly what we collect or process depends on how you use our shop, where you live, and what the law permits or requires. It may include the types below, and any conclusions we draw from them:

Who you are and how to reach you: your name, home, billing and delivery addresses, phone number and email.
Payment details: numbers for your credit card, debit card or financial accounts; payment card and account information; how you chose to pay; details and confirmations of your transactions; and other payment information.
Your account: username, password, security questions, and the settings and preferences you pick.
What you shop for: pieces you view, add to your cart or wishlist, buy, send back, exchange or cancel, plus your earlier orders.
Your messages: anything you tell us when you get in touch, such as a question for customer support.
Your device: details about the device, browser and network connection you use, your IP address, and other identifiers unique to you or your device.
How you use our shop: how and when you visit it, browse it and interact with it.

Where we get it

Straight from you: when you set up an account, browse or use our shop, write to us, or share details with us some other way.
Automatically: collected from your device whenever you browse our websites or use what we offer, including through cookies and similar tools.
From companies that work for us: when we hire service providers to run certain technology and they collect or process information on our behalf.
From partners and other third parties.

What we use it for

Which of these apply to you depends on how you deal with us and what parts of our shop you use.

To run our shop and make it better

We use your information to keep our side of the bargain when you buy from us. That means taking payment, packing and shipping your order, and handling purchases, returns, exchanges and other transactions. We also use it to open and look after your account and send you account notices, to keep track of your preferences and the pieces you've shown interest in, to let you leave reviews, and to make shopping feel more personal, for instance by suggesting pieces that go with something you've bought. This can include using it to tailor our shop to you and improve it.

To tell you about our pieces

We use it for marketing and promotions: sending you offers and news by email, text or post, and showing you online ads for products or services, in our shop and on other websites. Those ads may reflect what you've bought, what you've put in your cart, and other things you've done in our shop.

To keep you and our shop safe

We use it to confirm that it's really you signing in, to make paying and shopping secure, to spot, investigate and deal with activity that might be fraudulent, illegal, unsafe or malicious, to protect public safety, and to keep our systems secure. If you create an account, keeping your sign-in details safe is up to you. Please keep your username, password and any other sign-in details to yourself.

To look after you

We use it to answer your questions and give you customer support, to give you good service, and to keep our relationship with you going.

When the law requires it

We use it to comply with the law and to answer valid legal process, such as demands from law enforcement bodies or government agencies; to look into or take part in civil discovery, threatened or actual lawsuits, or any other adversarial legal proceeding; and to enforce our terms and policies or check whether they may have been broken.

When we share it

We may disclose your information to others for legitimate reasons, always within the limits of this policy. For example:

Companies that help us run the shop. This includes Shopify and other vendors and third parties that provide services for us, such as payment processing, IT management, customer support, data analytics, cloud storage, order fulfillment and shipping.
Business and marketing partners, who provide marketing services and show you ads. We use Shopify, for instance, to support personalized ads through third-party services, drawing on what you do online at different merchants and websites. These partners treat your information according to their own privacy notices. In some places you have a right to tell us not to share your information for ads and marketing aimed at you on the basis of that cross-site activity. You can do this by emailing info@johnandmarycopper.com.
Anyone you ask us to share with, or where you've otherwise agreed, for example a carrier delivering your order, or when you use a social media widget or sign in with another account.
Companies in our own group, including our affiliates.
Others, when it's necessary: as part of a business deal such as a merger, or in a bankruptcy; to meet our legal duties, for example answering subpoenas, search warrants and similar demands; to enforce our terms of service or other policies; and to defend or protect our shop and our own rights, as well as the rights of people who use our shop or anyone else.

Shopify and your information

Our shop is hosted by Shopify. To provide our shop to you and improve it, Shopify gathers and handles personal information about how you access and use it. What you submit through our shop is passed to and shared with Shopify, and with third parties that may be based outside your country, for that same reason.

We also use some of Shopify's enhanced features to help keep our business safe, help it grow, and improve it. Those features rely on data from the way you interact with our shop, with Shopify itself and with other merchants, and Shopify may use the personal information collected from those interactions to run them. Whenever that happens, Shopify is the one responsible for processing your information, including dealing with any request you make to use your rights over that use.

Shopify explains how it uses personal information, and the rights you may have, in its Consumer Privacy Policy. Depending on your location, you can also use certain rights over your information through the Shopify Privacy Portal.

Texts from us

If you agree to get text messages from us:

we won't give your mobile information to third parties or affiliates for them to use in marketing or promotion;
the record of your opt-in and consent to receive texts is never passed to any third party, apart from the vendors and aggregators who help get our messages to your phone;
the number of texts we send varies;
your carrier's standard charges for messages and data may apply;
you can reply STOP at any time to stop receiving them, or HELP to get help.

Your rights

Depending on your location, you may hold some of the rights below, or all of them. They aren't absolute: some only apply in particular situations, and sometimes we may say no to a request where the law lets us.

To know and to see: you can ask for access to the information we hold about you.
To delete: you can ask us to erase information we keep about you.
To correct: you can ask us to fix information about you that's wrong.
To take it with you: you can ask for a copy of your information and, in some circumstances and subject to some exceptions, ask us to send it on to a third party.
To say no to sale, sharing and targeted ads: in some places you can stop us from "selling" or "sharing" your information, or from using it for "targeted advertising", in the sense the privacy laws that apply give those words. To do this, email info@johnandmarycopper.com. When you visit our website with Global Privacy Control (GPC) turned on, we will, depending on your location, automatically treat that signal as an opt-out request for the browser and device you're using. If we can connect that device to a Shopify account, the opt-out will cover that account too. You can read about GPC at globalprivacycontrol.org. Other than GPC, we don't act on "Do Not Track" signals or similar signals from your browser or device.
To choose your emails: you can unsubscribe from our promotional emails whenever you like, using the link in any of them. Afterwards we may still email you about non-promotional things, such as your account or an order you've placed.

People in the UK or the European Economic Area may also have the following rights, within the exceptions and limits that local law sets:

To object or restrict: you can ask us to stop using your information for certain purposes, or to limit the ways we use it.
To withdraw consent: where we rely on your consent to use your information, you can take that consent back. That won't make anything we did with your consent before you withdrew it unlawful.

Using your rights

You can use any of these rights through the tools in our shop where we offer them, or by getting in touch using the details at the bottom of this page. To find out how Shopify uses your information and what rights you have, including over data that Shopify processes, visit privacy.shopify.com.

You will never be treated any differently for using these rights. We may have to check who you are before handling a request, as the law permits or requires. Where the law allows, someone you've authorized can make requests for you. Before we act on an agent's request, we'll need proof that you gave them permission, and we may ask you to confirm who you are with us yourself. We'll answer requests promptly and within any deadline the law sets.

If you have a complaint

If you're not happy with the way we handle your information, please tell us using the details at the bottom of this page. Depending on your location, you may be able to appeal our decision through those same details, or to complain to the data protection authority where you live. If you're in the EEA, the European Data Protection Board publishes a list of the supervisory authorities responsible for data protection.

How we protect your information, and how long we keep it

No method of protecting data is perfect or unbreakable, so we can't promise you "perfect security." Information you send us may also be exposed while it's on its way. That's why we ask you not to send us anything sensitive or confidential over unsecured channels.

How long we keep it depends on a few things, such as whether we need it to keep your account open, to provide our shop to you, to meet our legal duties, to settle disagreements, or to enforce our other contracts and policies.

Sending information abroad

Your information may be transferred to, stored in and processed in countries other than the one you live in. If it leaves the UK or the European Economic Area, we use recognized transfer safeguards, such as Standard Contractual Clauses approved by the European Commission or an equivalent contract from the relevant UK authority, unless the destination country has been officially found to protect data adequately.

Children

Our shop isn't meant for children, and we don't knowingly collect information about anyone under the age of majority where they live. If you're a parent or guardian and your child has given us personal information, get in touch using the details below to ask us to delete it.

As of this policy's effective date, we have no actual knowledge of "selling" or "sharing" (in the sense applicable law gives those words) the personal information of anyone younger than 16.

Other websites

Our shop may include links to websites and online platforms run by other people. If you click through to a site we don't control or work with, please read its own privacy and security policies and terms. We can't vouch for those sites and aren't responsible for their privacy or security, or for whether what they publish is accurate, complete or reliable.

Anything you share in public or semi-public spaces, including social networks run by third parties, may be seen by other people who use our shop or those platforms, and there's no limit on how it may then be used, whether by us or by anyone else. Linking to a platform does not, on its own, mean we endorse it, its content, or its owners or operators, unless we say so in our shop.

Updates to this policy

We may change this policy from time to time, for example when our practices change, or for operational, legal or regulatory reasons. If we do, we'll publish the new version here on our website, change the date at the top of this page, and give you notice where the law requires it.