Your Privacy

Privacy Policy

At Dotty Fish, we take your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, who we may share it with and the rights you have in relation to your information.

We only collect and use personal information where we have a lawful reason to do so and take appropriate steps to keep your information safe.

Who We Are

This website is operated by Dotty Fish Ltd. Dotty Fish Ltd is the data controller responsible for the personal information we collect and use through our website and when you shop with us.

If you have any questions about this Privacy Policy or how we use your personal information, you can contact us at [email protected].

Information We Collect

The personal information we collect depends on how you interact with Dotty Fish. This may include:

Your name
Billing and delivery address
Email address and telephone number
Order and purchase information
Account information if you create an account with us
Payment and transaction information
Information you provide when contacting our customer service team
Your marketing preferences
Technical information relating to your use of our website, such as your IP address, browser and device information

We ask you to provide the information needed to process and deliver your order. If this information is not provided, we may be unable to fulfil your order or provide the service you have requested.

How We Use Your Information

We may use your personal information to:

Process, manage and fulfil your orders
Take and manage payments
Arrange delivery and provide tracking information
Manage returns, refunds and exchanges
Provide customer service and respond to enquiries
Create and manage your customer account
Send service messages relating to your order
Send marketing communications where permitted
Maintain our business, financial and transaction records
Help prevent fraud and protect the security of our website
Understand how our website is used and improve our products, services and customer experience
Meet our legal and regulatory obligations

Our Lawful Bases for Using Your Information

Under UK data protection law, we need a lawful basis for using your personal information. Depending on why we are using your information, we may rely on:

Contract

We use information where it is necessary to fulfil our contract with you, for example to process your order, take payment, arrange delivery or deal with a return.

Legal Obligation

We may need to use or retain certain information to comply with our legal obligations, including financial, accounting, tax and other regulatory requirements.

Legitimate Interests

We may use information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. This may include operating and improving our business, providing customer service, maintaining security and preventing fraud.

Consent

Where we rely on your consent, for example for certain marketing or cookie activities, you can withdraw your consent at any time.

Payments

We use trusted third-party payment providers, including Stripe and PayPal, to securely process payments.

Payment information is processed securely by the relevant payment provider. Dotty Fish does not store your full payment card details on our own servers.

Orders & Deliveries

To process and deliver your order, we may share the information needed to fulfil your purchase with trusted service providers.

These include Linnworks for order and inventory management, Sendcloud for shipping and delivery management, and delivery providers including Royal Mail and InPost.

We only provide these companies with the information reasonably required to provide their services, such as your name, delivery address, contact information and relevant order details.

Email Marketing

If you choose to receive marketing emails from Dotty Fish, we may use your name, email address and marketing preferences to send you news, offers, product information and other Dotty Fish updates.

We use Brevo to help us manage and send our email marketing communications.

You can unsubscribe from marketing emails at any time by clicking the Unsubscribe link at the bottom of our marketing emails or by contacting us at [email protected].

Unsubscribing from marketing will not prevent us from sending you essential service communications relating to an order you have placed with us.

Who We Share Your Information With

We do not sell your personal information.

We may share information with trusted companies that help us operate Dotty Fish and provide our services. These may include:

Payment processors, including Stripe and PayPal
Order and inventory management providers, including Linnworks
Shipping and delivery management providers, including Sendcloud
Delivery companies, including Royal Mail and InPost
Email and communications providers, including Brevo
Website, hosting, IT and security service providers
Professional advisers such as accountants or legal advisers where necessary
Government authorities, regulators or law enforcement agencies where we are legally required to do so

Where another organisation processes personal information on our behalf, we expect it to handle that information appropriately and only as necessary to provide the relevant service.

Cookies & Website Information

Our website uses cookies and similar technologies to provide essential website functionality and, depending on your preferences, to help us understand how our website is used.

You can choose which optional cookies and tracking technologies you allow through our Cookie Notice and can change your preferences at any time.

For more information, please see our Cookie Policy.

How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil orders, provide customer service and meet our legal, accounting and regulatory obligations.

The length of time we keep information will depend on the type of information, why we hold it and whether we are required to retain it for legal or business purposes. When personal information is no longer required, we will delete, anonymise or securely dispose of it where appropriate.

International Data Transfers

Some of the service providers we use may process or store personal information outside the UK.

Where personal information is transferred internationally, we take steps to ensure that an appropriate level of protection is in place in accordance with applicable UK data protection law. This may include relying on an applicable adequacy decision or approved contractual safeguards.

You can contact us if you would like further information about the safeguards used for international transfers of your personal information.

Keeping Your Information Secure

We take appropriate technical and organisational measures to protect the personal information we hold against loss, misuse, unauthorised access, alteration or disclosure.

Our website uses encryption technology to help protect information transmitted between your browser and our website, and access to personal information is limited to those who need it for legitimate business purposes.

While we take reasonable measures to protect your information, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

Your Data Protection Rights

Depending on the circumstances and the way we use your information, UK data protection law gives you a number of rights. These may include the right to:

Ask for access to the personal information we hold about you
Ask us to correct inaccurate or incomplete information
Ask us to delete your personal information in certain circumstances
Ask us to restrict how we use your information in certain circumstances
Object to certain uses of your personal information
Ask us to transfer certain information to you or another organisation where applicable
Withdraw your consent where we rely on consent to use your information

You have the right to object at any time to the use of your personal information for direct marketing purposes.

If you would like to exercise any of your rights, please contact us at [email protected].

There is normally no charge for exercising your data protection rights. We may need to ask you for information to confirm your identity before dealing with your request.

Making a Complaint

If you have any concerns about how we use your personal information, please contact us first and we will do our best to resolve the issue.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK regulator for data protection.

You can find further information about your data protection rights and how to make a complaint on the ICO website.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services or legal requirements. Any updates will be published on this page.

Last updated: September 2026

Contact Us

If you have any questions about this Privacy Policy or how Dotty Fish uses your personal information, please contact us:

Dotty Fish Ltd
3 Upper Wield Drive
Fleet
Hampshire
GU51 1EP

Email: [email protected]

Telephone: +44 (0) 1252 541820