Last updated: 17 August 2026

This Privacy Policy explains how Cerisia Ta’Torin (“I”, “me”, “my”) collects, uses, and protects your personal information when you visit or make a purchase from cerisiatatorin.com (the “Site”).

I am a sole trader based in Cornwall, United Kingdom, and I am the data controller for the personal information described below.

Information I Collect

I collect information in the following ways:

Information you give me directly, such as your name, email address, postal address, and payment details when you place an order, sign up to my newsletter, or contact me through the site’s contact form.

Information collected automatically, such as your IP address, browser type, device information, and browsing behaviour on the Site, collected through cookies and similar technologies (see the Cookies section below).

Payment information: payments are processed securely by my payment provider (via Squarespace Payments and/or Stripe/PayPal, as applicable). I do not store your full card details on my own systems.

How I Use Your Information

I use the information I collect to process and fulfil your orders, including arranging delivery and handling payments; to communicate with you about your order, including confirmations, shipping updates, and customer service enquiries; to send you marketing emails and newsletter updates, but only if you have opted in to receive them; to improve the Site and understand how visitors use it; to comply with legal and tax obligations, such as keeping sales records; and to prevent fraud and protect the security of the Site.

Legal Basis for Processing

Under UK data protection law, I rely on the following legal grounds to process your personal data: Contract, to process and fulfil an order you have placed; Consent, where you have opted in to receive marketing emails or where cookies require your consent; Legal obligation, to meet accounting, tax, and record-keeping requirements; and Legitimate interests, to operate, maintain, and improve the Site, and to prevent fraud.

Sharing Your Information

I do not sell your personal information. I may share it with service providers who help me run the Site and fulfil orders, such as Squarespace (website hosting and e-commerce platform), payment processors, and delivery or courier companies; email marketing providers, if you have subscribed to my newsletter; and authorities, where required by law, such as HMRC for tax purposes.

Some of these service providers may be based outside the UK or the European Economic Area. Where this is the case, I take steps to ensure your data is protected in line with UK data protection law.

The Site uses cookies and similar technologies to help it function properly, remember your preferences, and understand how visitors use the Site. Some cookies are essential for the Site to work, for example to process orders through the shopping cart; others are optional and used for analytics.

You can control or disable cookies through your browser settings, though this may affect how the Site functions. Where required, you will be asked to consent to non-essential cookies when you first visit the Site.

How Long I Keep Your Information

I keep your personal information only as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements. Order and transaction records are typically kept for at least six years to comply with UK tax law. If you unsubscribe from marketing emails, I will stop using your information for that purpose, though I may keep a record that you unsubscribed.

Your Rights

Under UK data protection law (UK GDPR), you have the right to access the personal information I hold about you, ask me to correct inaccurate information, ask me to delete your information in certain circumstances, object to or restrict how I use your information, withdraw consent at any time (for example, by unsubscribing from marketing emails), request a copy of your information in a portable format, and complain to the UK Information Commissioner’s Office if you believe your data has been mishandled.

To exercise any of these rights, please contact me using the details below.

Children’s Privacy

The Site is not directed at children, and I do not knowingly collect personal information from anyone under the age of 16.

Changes to This Policy

I may update this Privacy Policy from time to time, for example to reflect changes in the law or how I run the Site. The “Last updated” date at the top of this page shows when it was last revised.

Contact Me

If you have any questions about this Privacy Policy or how your information is handled, please contact me at:

Cerisia Ta’Torin

Email: cerisiatatorin@gmail.com

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk if you are unhappy with how your data has been handled.

This policy is provided as a general template and does not constitute legal advice. You may wish to have it reviewed by a solicitor to ensure it fully reflects your specific business practices and complies with current law.