Privacy policy

Last updated: 27 September 2026

Who we are and how to contact us

The Rowan Tree is responsible for personal information used to operate our shop and fulfil your orders. Write to The Rowan Tree, 7 Fore Street, Budleigh Salterton, Devon, EX9 6NG, email shop@rowantreegifts.co.uk, or call 01395 446066 about privacy, your rights or a complaint.

Information we use and its sources

We receive names, contact details, billing and delivery addresses, order and payment confirmations, account preferences, saved gift ideas and messages from you when you shop, use an account or contact us. Payment providers process payment details; please never send full card details, passwords or login codes in chat or email.

Our website and service providers also receive device and usage information, including IP address, browser information, pages and products viewed, cart activity and cookie identifiers. Shopify, payment providers and delivery providers supply information needed for transactions, security and fulfilment. Information you choose to send in support or AI chat is included in your communications.

Purposes and legal bases

  • Orders and accounts: processing payments, delivering goods, administering accounts, cancellations and returns, and answering purchase enquiries to perform our contract with you or take steps you request before a contract. Required checkout information is needed to fulfil your order.
  • Legal obligations: keeping tax and accounting records, handling consumer rights and responding to lawful requests.
  • Legitimate interests: operating and securing the shop, preventing fraud, resolving complaints, maintaining appropriate records and improving customer support, where these interests are not overridden by your rights. You may object to processing based on legitimate interests.
  • Marketing: consent where required for promotional messages and optional tracking. Any existing-customer exception is used only where the applicable rules permit it and you are offered an opt-out. You can unsubscribe from marketing at any time. Buying from us or using support does not by itself consent to marketing.

Shopify and AI chat

Our store runs on Shopify. Information you provide and information about your use of the store is transmitted to Shopify and relevant service providers to run the shop.

Our Shopify-powered AI assistant processes your chat messages and relevant shopping context to answer questions, suggest products and provide support. Shopify uses this information to provide and improve its AI agent services. Depending on your sign-in state and Shopify settings, relevant Shop preferences and shopping history may also help personalise responses. The assistant can make mistakes; ask for the shop team when you need a person. Do not include sensitive information that is unnecessary for your enquiry.

Shopify may act as an independent controller for some processing. See the Shopify Consumer Privacy Policy and Shopify Privacy Portal for details and related rights. AI suggestions do not remove your consumer rights; you can ask us to review a support outcome.

Who receives information

Relevant information is shared with Shopify and providers of payments, hosting, customer support, email services, analytics, fulfilment and delivery. Marketing and advertising providers receive information where the relevant permissions and legal requirements allow it. We may disclose information to professional advisers, regulators or authorities where necessary and lawful, or to protect legal rights. We share delivery details with the recipient or carrier as needed for a delivery you request.

Cookies and marketing choices

Essential cookies and similar technologies support functions such as checkout, security and your requested services. Optional analytics, advertising and personalisation technologies are subject to the choices and legal requirements that apply. Use Cookie preferences in our website footer to review or change available choices. Browser settings also let you manage cookies, although disabling essential cookies may affect the shop. Withdrawing consent does not affect processing that was lawful before withdrawal.

Retention and security

We keep information only as long as needed for its purpose, including order administration, tax and accounting duties, fraud prevention, complaints and legal claims. The period depends on the record, applicable legal requirements and whether a dispute remains open. Support messages and preferences are assessed against their continuing purpose; an opt-out record may be retained to respect your marketing choice. Contact us for details about retention of your information.

We use appropriate organisational and technical safeguards. No online service is completely risk-free. Please use secure account access and avoid sending unnecessary sensitive information.

International transfers

Shopify and other providers may process information outside the UK. Where required, transfers use an applicable adequacy decision or appropriate contractual safeguards, such as approved UK transfer terms or the UK Addendum to standard contractual clauses. Contact us for information about safeguards relevant to your data; Shopify's policy also describes its international processing.

Your data protection rights

Subject to the applicable conditions, you can request access, correction, erasure, restriction or a portable copy of your information; object to processing based on legitimate interests; and withdraw consent. You can object to direct marketing at any time. Contact us using the details above. We may need proportionate information to verify your identity, and will normally respond to a rights request within one month, explaining any lawful extension.

Privacy complaints

Please contact us if you have a concern about how we handle your information. We will acknowledge a data protection complaint within 30 days, investigate without undue delay, keep you informed and explain the outcome. You also have the right to complain to the UK Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.

Children and other websites

The online shop is intended for adult purchasers. If you believe a child has provided personal information inappropriately, contact us so we can assess and address it. Other websites linked from our shop have their own privacy information.

Changes

We update this notice when our practices or requirements change and show the date above. Material changes will be communicated where required.