Privacy Policy

Privacy policy for stockingjoy.com

This policy explains what personal information we collect when you visit stockingjoy.com or buy from us, why we collect it, who we share it with and what your rights are. We handle your data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

WHO IS RESPONSIBLE FOR YOUR DATA

The data controller is Bfp Swiss Sàrl, trading as StockingJoy, Rue du Puits du Géant 1a, 1950 Sion, Switzerland, company identification number CHE-433.557.926. For anything in this policy, write to help@stockingjoy.com.

WHAT WE COLLECT

Order information. When you buy something: your name, billing and delivery addresses, email address, phone number, what you ordered and how you paid. Your card details are handled by our payment provider; we never see or store your full card number.

Gift and personalisation details. If you order a gift or a personalised item, we also process what you ask us to: the recipient's name and address, a gift message, or the name or text to be printed or engraved. Please only give us a recipient's details for the purpose of delivering their gift.

Device and browsing information. When you visit the site we collect information about your browser, IP address, time zone, the pages and products you view and how you arrived on the site. Some of this is collected through cookies — see our Cookie policy.

Messages. If you email us or use the contact form, we keep what you wrote so that we can answer you and keep a record of the exchange.

WHY WE USE IT, AND ON WHAT LEGAL BASIS

  • To perform our contract with you — taking your order and payment, preparing personalised items, delivering, handling returns and refunds, answering your questions.
  • To comply with the law — keeping accounting and tax records.
  • For our legitimate interests — preventing fraud, keeping the site secure, and understanding what sells so we can improve the shop. We weigh these interests against your privacy.
  • With your consent — our newsletter, and cookies that are not strictly necessary. You can withdraw your consent at any time; this does not affect what we did before you withdrew it.

If you buy from us, we may email you about similar products, as the Privacy and Electronic Communications Regulations 2003 allow; you can refuse this when you order and in every email we send.

WHO WE SHARE IT WITH

We share your data only with the service providers who make the shop work, and only what they need:

  • Shopify, which hosts the shop and the checkout — Shopify privacy policy;
  • our payment providers, to take payment and check for fraud;
  • our suppliers, workshops and carriers, to prepare, personalise and deliver your order;
  • Google (Analytics and advertising) and Meta (advertising), only if you accept the relevant cookies.

We may also disclose data where the law requires it, or to establish or defend a legal claim. We never sell your personal data.

TRANSFERS OUTSIDE THE UK

We are established in Switzerland and some of our providers are established outside the United Kingdom. Where your data leaves the UK, it goes either to a country covered by UK adequacy regulations (Switzerland and the European Economic Area are) or under safeguards approved under UK law, such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

HOW LONG WE KEEP IT

  • Order and invoice records: as long as accounting and tax law requires — up to 10 years, the period Swiss law imposes on our company's accounts.
  • Personalisation text and gift messages: deleted once the return and complaint period for the order has passed.
  • Customer service messages: up to 3 years after our last exchange.
  • Newsletter: until you unsubscribe.
  • Analytics data: up to 14 months.

YOUR RIGHTS

You have the right to obtain a copy of your data, to have it corrected, to have it erased, to restrict or object to how we use it (including, at any time, to direct marketing), and to receive it in a portable format. Write to help@stockingjoy.com. We answer within one month and we do not charge for it. We may ask you to prove your identity first.

If you are not satisfied with our answer, you can complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk/make-a-complaint, 0303 123 1113.

SECURITY

The site and the checkout are served over an encrypted connection, and access to customer data is limited to the people who need it to handle your order. No system is perfectly secure, so please do not send sensitive information, such as card details, by email.

DO NOT TRACK

The site does not respond to browser "Do Not Track" signals, because there is no agreed standard for what they mean. Your cookie choices are what control tracking on this site.

CHILDREN

Many of our products are gifts for children, but the shop itself is meant for adults. You must be 18 or over to place an order, and we do not knowingly collect data from children.

CHANGES TO THIS POLICY

We may update this policy when our practices or the law change. The date below shows when it last changed.

Last updated: 18 October 2026.