Privacy policy

Last updated: February 27, 2026

Prismatic Attic operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Prismatic Attic is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information including credit card, debit card, and payment information, transaction details, payment confirmations, and other payment-related details.
  • Account information including your username, password, preferences, and settings.
  • Transaction information including items you view, add to your cart or wishlist, purchase, return, exchange, or cancel, and your transaction history.
  • Communications with us including information you provide when contacting us for customer support or enquiries.
  • Device information including information about your device, browser, network connection, IP address, and other unique identifiers.
  • Usage information including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, place an order, contact us, or otherwise provide your information.
  • Automatically through the Services, including through cookies and similar technologies.
  • From service providers who help us operate the Services, such as payment processors, shipping providers, and analytics services.
  • From partners or other third parties, where permitted by law.

How We Use Your Personal Information

We only collect and use personal information that is necessary to operate Prismatic Attic and provide our Services.

We process your personal information only where we have a lawful basis to do so under UK data protection law. This will usually be because the processing is necessary to perform a contract with you (for example, to fulfill an order), to comply with a legal obligation, for our legitimate business interests (such as improving our Services), or because you have given your consent.

Depending on how you interact with us, we may use your personal information for the following purposes:

Provide, Tailor, and Improve the Services

To process payments, fulfill orders, manage accounts, arrange shipping, handle returns and exchanges, remember preferences, enable reviews, and improve the Services and customer experience.

Marketing and Communications

To send marketing and promotional communications where permitted by law, such as where you have given your consent or where a soft opt-in applies. You can opt out of marketing emails at any time using the unsubscribe link in our emails.

Security and Fraud Prevention

To authenticate accounts, process secure payments, detect and prevent fraud or misuse, and protect the security of the Services.

Communicating with You

To respond to enquiries, provide customer support, and maintain our relationship with you.

Legal Reasons

To comply with legal obligations, respond to lawful requests, enforce our terms, or protect our rights and the rights of others.

How We Disclose Personal Information

We may disclose personal information in the following circumstances:

  • With Shopify, service providers, and vendors who perform services on our behalf (such as payment processing, shipping, IT support, analytics, and hosting).
  • With marketing and advertising partners, where permitted by law, to help promote our products. These partners process information in accordance with their own privacy policies.
  • When you request or consent to the disclosure, such as for delivery or social media integrations.
  • With affiliates or within our business operations.
  • In connection with legal obligations, enforcement of our terms, or business transactions such as restructuring or insolvency.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal information to provide and improve the Services. Information you submit may be shared with Shopify and third parties located outside your country.

Shopify may process personal information independently for certain enhanced features. In these cases, Shopify is responsible for responding to rights requests related to that processing. You can learn more at https://privacy.shopify.com/en.

Third Party Websites and Links

The Services may contain links to third-party websites. We are not responsible for the privacy practices, content, or security of those sites. You should review their policies before providing any personal information.

Children’s Data

The Services are not intended for use by children. We do not knowingly collect, use, or share personal information relating to children, and we do not knowingly process personal data of individuals under the age of 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

Security and Retention of Your Information

We take reasonable steps to protect your personal information, but no system is completely secure. How long we retain personal information depends on legal requirements and business needs, such as fulfilling orders or maintaining records.

Your Rights and Choices

Depending on where you live, you may have rights including:

  • Access to your personal information
  • Correction of inaccurate information
  • Deletion of personal information
  • Data portability
  • Restriction or objection to processing
  • Withdrawal of consent (where processing is based on consent)

You can opt out of marketing emails at any time.

If you are based in the UK or EEA, you also have the right to restrict processing and object to certain uses of your personal information.

To exercise your rights, contact us using the details below. We may need to verify your identity before responding.

Complaints

If you have concerns about how we process your personal information, please contact us.

If you are based in the UK, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
If you are in the EEA, you may contact your local data protection authority.

International Transfers

Your personal information may be transferred outside the UK or EEA. Where this occurs, we rely on recognised safeguards such as UK or EU Standard Contractual Clauses, unless the destination country has been deemed adequate.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post any updates on this page and update the “Last updated” date.

Contact

If you have questions about this Privacy Policy or would like to exercise your rights, please contact us at:

Email: theprismaticattic@gmail.com

For the purposes of UK data protection law, Prismatic Attic is the data controller of your personal information.