Privacy policy
Privacy Policy
Last updated: 20 September 2026
The Red Shack Ltd (“we”, “us” or “our”) operates The Red Shack website and online store, including our products, content, features and related services (the “Services”).
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, create an account, place an order, contact us or otherwise use our Services.
The Red Shack Ltd is the data controller responsible for your personal information.
We take your privacy seriously, particularly because we provide adult wellness and intimate products.
1. Who we are
The Red Shack Ltd
Lytchett House
13 Freeland Park
Wareham Road
Poole
BH16 6FA
United Kingdom
Email: hello@theredshack.com
For data protection purposes, The Red Shack Ltd is the controller of the personal information we process.
2. Age requirement
Our website and products are intended for people aged 18 or over.
We do not knowingly provide our Services to anyone under 18.
If we become aware that personal information has been provided by someone under 18, we will take reasonable steps to delete it where appropriate.
3. Personal information we collect
Depending on how you use our Services, we may collect the following types of personal information.
Contact and order information
This may include your name, email address, telephone number, billing address, delivery address and order details.
Account information
If you create an account, we may collect your login details, account preferences and information associated with your account.
Payment and transaction information
We may receive information relating to payments, such as payment status, transaction references, order totals and payment confirmations.
Payment card details may be processed directly by our payment providers rather than being stored by us.
Customer service information
If you contact us, we may keep records of your communications, including emails, enquiries, complaints, returns and other customer service correspondence.
Technical and usage information
When you use our website, information may be collected automatically, including your IP address, browser type, device information, operating system, referring website, pages viewed and information about how you interact with our website.
This information may be collected through cookies and similar technologies.
4. How we collect your information
We may collect personal information:
• directly from you when you place an order, create an account or contact us
• automatically when you browse or use our website
• through cookies and similar technologies
• from payment providers and other service providers involved in processing your order
• from delivery and fulfilment providers where necessary to complete your order
We will only use personal information in accordance with applicable data protection law.
5. How we use your information
We may use your personal information to:
• process and fulfil your orders
• arrange delivery of your purchases
• process payments and refunds
• manage customer accounts
• provide customer support
• deal with returns, refunds, complaints and disputes
• communicate with you about your orders
• prevent and investigate fraud, misuse and unauthorised activity
• maintain and secure our website and systems
• comply with legal and regulatory obligations
• improve our website, products and customer experience
• send marketing communications where you have provided the appropriate consent or where otherwise permitted by law
We will not use your personal information for purposes that are incompatible with the purposes for which it was collected without an appropriate legal basis.
6. Our lawful bases for processing
Where the UK GDPR applies, we rely on one or more of the following lawful bases depending on the purpose of processing.
Contract
We process information where it is necessary to fulfil an order or provide a service you have requested.
This includes processing your name, delivery address and contact details so that we can fulfil and deliver your order.
Legal obligation
We may process information where necessary to comply with legal obligations, including accounting, tax, consumer protection and other regulatory requirements.
Legitimate interests
We may process information where necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.
This may include maintaining website security, preventing fraud, managing customer service and improving our Services.
Where we rely on legitimate interests, we will consider the impact on your privacy and your reasonable expectations.
Consent
Where consent is required, such as for certain marketing or non-essential cookies, we will ask for your consent before carrying out the relevant processing.
You can withdraw consent at any time where consent is the legal basis for processing.
7. Adult wellness and sensitive information
Because The Red Shack sells intimate and adult wellness products, some information associated with an order may be considered sensitive or private by nature.
We aim to minimise the personal information we collect and only use information that is necessary for legitimate business purposes.
We do not intentionally ask customers to provide information about their sex life, sexual orientation or health unless it is genuinely necessary for a specific service or support request.
We do not intentionally create profiles about customers' sex lives or sexual orientation from their purchases.
Where personal information falls within a special category under the UK GDPR, we will only process it where we have an appropriate lawful basis and special category condition required by law.
The ICO recognises information concerning a person's sex life and sexual orientation as special category data and notes that intentional inferences about these matters can also fall within the special category rules.
8. Discreet orders and packaging
We understand that privacy is particularly important when purchasing intimate wellness products.
All orders are shipped in discreet packaging.
We aim to avoid displaying product names or descriptions on the outside of parcels.
Order and delivery information is only shared with the relevant fulfilment, payment and delivery providers where necessary to complete your purchase.
9. Who we share your information with
We may share personal information with trusted service providers where necessary to operate our business and provide our Services.
These may include:
• Shopify, which provides our ecommerce platform
• payment processors and payment service providers
• delivery and fulfilment providers
• IT, website hosting and technical service providers
• analytics and website performance providers
• customer service and communication providers
• professional advisers such as accountants, legal advisers or insurers where necessary
• government bodies, regulators, law enforcement agencies or other authorities where we are legally required to do so
We do not sell your personal information.
Where third-party service providers process personal information on our behalf, we take reasonable steps to ensure that appropriate data protection requirements are in place.
10. Marketing
We may send marketing communications about The Red Shack where we have a lawful basis to do so.
This may include information about products, offers, new collections and other updates.
You can unsubscribe from marketing communications at any time by using the unsubscribe option included in the message or by contacting us at hello@theredshack.com.
Even if you opt out of marketing, we may still send essential service communications relating to your orders, payments, deliveries, returns or other transactions.
11. Cookies and similar technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to operate, including functions such as shopping baskets, checkout and security.
Other cookies may be used for analytics, performance, preferences or marketing.
Where consent is required for non-essential cookies, we will ask for your consent through our cookie consent mechanism.
You can manage or withdraw your cookie preferences where the relevant tools are available.
The ICO states that visitors should be told about cookies and that consent is generally required for cookies that are not strictly necessary.
12. Data retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, tax, regulatory and dispute-resolution requirements.
Retention periods may vary depending on the type of information.
For example:
Order and transaction information
We may retain information relating to purchases for as long as necessary to meet accounting, tax, legal and consumer protection requirements.
Customer service and complaints
We may retain relevant communications for as long as reasonably necessary to deal with the enquiry, resolve disputes and protect our legitimate interests.
Marketing information
Where you have consented to marketing, we may retain your marketing preferences until you unsubscribe or otherwise withdraw consent, subject to our legal obligations.
Website and analytics information
Retention periods vary depending on the type of cookie, analytics service or technical information involved.
We periodically review the information we hold and securely delete or anonymise information when it is no longer required.
The ICO expects privacy notices to explain how long information is kept, or the criteria used to determine retention periods.
13. International transfers
Some of the service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.
These safeguards may include adequacy regulations or appropriate contractual protections.
You can contact us if you would like further information about the safeguards used for a particular international transfer.
14. Your data protection rights
Depending on the circumstances and the lawful basis for processing, you may have rights including:
Right of access
You can request a copy of the personal information we hold about you.
Right to rectification
You can ask us to correct inaccurate or incomplete personal information.
Right to erasure
You may ask us to delete your personal information in certain circumstances.
Right to restriction
You may ask us to restrict how we use your information in certain circumstances.
Right to object
You may have the right to object to certain processing, including processing based on legitimate interests.
Right to data portability
In certain circumstances, you may request your personal information in a structured, commonly used and machine-readable format.
Right to withdraw consent
Where we rely on your consent, you can withdraw that consent at any time.
These rights are subject to legal exceptions and may not apply in every circumstance.
15. How to exercise your rights
To exercise your data protection rights, please contact:
Email: hello@theredshack.com
Please provide enough information for us to identify you and understand your request.
We may need to verify your identity before providing personal information or making changes to your account.
We will respond to valid requests within the timeframe required by applicable data protection law.
16. Complaints
If you have concerns about how we use your personal information, please contact us first at:
You also have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
The ICO provides information about data protection rights and how to make a complaint.
You can find further information through the ICO's official website.
17. Third-party websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices, security or content of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
18. Data security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no website, online service or electronic transmission can be guaranteed to be completely secure.
Where we become aware of a personal data breach that requires notification under applicable law, we will take the appropriate steps required by law.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, Services, technology or legal requirements.
The latest version will be published on our website and the “Last updated” date will show when it was most recently revised.
We recommend checking this page periodically for updates.
20. Contact us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:
The Red Shack Ltd
Lytchett House
13 Freeland Park
Wareham Road
Poole
BH16 6FA
United Kingdom
Email: hello@theredshack.com