Last Updated: July 16, 2026

This policy outlines how The Alchemical Filidh (“we,” “our,” or “us”) collects, uses, and discloses your Personal Information. As a UK shop, we process your data under the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

1. Data Collection & Lawful Bases
We collect information you provide directly (name, email, shipping address, and payment info via our processor, Fourthwall, Inc.) and data collected automatically (IP addresses, browser details, and cookies).

Under the UK GDPR, we handle your data via these lawful bases:
Contractual Necessity: To process payments, fulfil orders, and complete shipments.
Legitimate Interests: To protect our shop from fraud and improve user experience.
Consent: For marketing updates and non-essential tracking cookies.
Legal Compliance: To meet U.K. tax, accounting, and statutory duties.

2. DUAA 2025 Cookie Policy & Tracking Consent
We use cookies to optimise our digital storefront. Under DUAA 2025 frameworks, strictly necessary cookies operate automatically for these exempt categories:
Analytics: For aggregate, non-identifying metrics to improve the store (opt-out available).
Security & Functionality: Essential cookies for fraud prevention and cart memory.
Interface Customisation: To preserve your display and layout preferences.

Tracking Pixels: We do not deploy advertising, profiling, cross-site tracking, or marketing pixels (such as Meta, TikTok, or Google Analytics Signals) without your explicit, opt-in consent via our banner.

3. Disclosures & Transfers
We share data with trusted partners who help operate our shop (including Fourthwall, Inc., printing networks, and shipping couriers). Your data may be transferred or stored outside the UK (such as in the US). We use approved legal safeguards to ensure your data remains secure during these cross-border transfers.

4. Your Rights & Subject Access Requests (SARs)
You have the right to access, update, restrict, or delete your personal data. You may submit a Subject Access Request (SAR) at any time. We will complete a proportionate search for your data and respond within one month, entirely free of charge.

5. Mandatory Internal Complaints Process
We aim to resolve any privacy concerns directly with our community. In compliance with DUAA 2025, if you have a grievance, you must first utilise our internal complaints process by emailing: thealchemicalfilidh@gmail.com.

We will acknowledge your complaint within 30 days and work to resolve it swiftly. If we cannot resolve the issue internally, you retain the right to escalate your complaint to the Information Commissioner's Office (ICO).

Thank you for reading. For privacy inquiries, contact us at: thealchemicalfilidh@gmail.com.