Privacy Policy

Last updated: 21 August 2026

This policy explains what personal information Karen Mabon Limited collects when you shop with us or get in touch, why we collect it, who we share it with, and what rights you have over it. We have tried to write it in plain English rather than legal boilerplate, because a policy nobody can read isn't much of a policy.

WHO WE ARE

Karen Mabon Limited is the data controller for the personal information described here. We are a company registered in Scotland, company number SC600219, with our registered office at 34 Millbank Road, Munlochy, Scotland, IV8 8ND.

If you have a question about anything in this policy, email shop@karenmabon.com.

WHAT WE COLLECT

When you place an order: your name, billing and delivery address, email address, phone number, order contents and order history. We do not see or store your full card number — payment details go directly to our payment providers.

When you create an account: your name, email address, password (stored encrypted), and saved addresses.

When you sign up to our emails: your email address, and your first name if you give it.

When you contact us: whatever you choose to tell us, along with your email address or phone number so we can reply.

When you browse the site: your IP address, device and browser type, the pages you visit, how you arrived, and how long you stay. This comes from cookies and similar technologies — see the cookies section below.

WHY WE USE IT, AND ON WHAT BASIS

To fulfil your order — taking payment, packing, shipping, handling returns and answering questions about it. Legal basis: performance of our contract with you.

To run and improve the shop — understanding which pages and products work, fixing faults, preventing fraud, and keeping the site secure. Legal basis: our legitimate interests in operating a functioning, secure business.

To send you marketing emails, if you have asked us to. Legal basis: your consent, or our legitimate interests where you are an existing customer and we are telling you about similar products. You can unsubscribe at any time.

To show you relevant advertising on other platforms. Legal basis: your consent, given through our cookie banner.

To meet our legal obligations — keeping accounting and tax records, and complying with consumer law. Legal basis: legal obligation.

WHO WE SHARE IT WITH

We do not sell your personal information. We share it only with the companies that help us run the shop, and only what each of them needs:

• Shopify — our ecommerce platform. It hosts the site and holds your account and order records.
• Payment providers — Shopify Payments, Stripe, PayPal, Apple Pay, Google Pay and Shop Pay. They process your payment; we never see your full card details.
• Our fulfilment partner — receives your name, delivery address, email address and phone number in order to pack and dispatch your order.
• Delivery carriers, including Royal Mail, to get the parcel to you and give you tracking.
• Mailchimp — sends our marketing emails and holds your subscription preferences.
• Google — analytics and advertising, including Google Analytics, Google Ads and our Google Shopping listings.
• Meta (Facebook and Instagram), Pinterest and TikTok — advertising and shopping listings.
• Trustpilot — invites you to review your order, if you have agreed to receive one.
• Professional advisers — our accountants and, if ever needed, our lawyers.

We may also disclose information where the law requires it, or to protect our rights, property or safety.

SENDING INFORMATION OUTSIDE THE UK

Some of the companies above operate outside the United Kingdom, and where your order is fulfilled by a partner outside the UK we share the details needed to pack and send it — your name, delivery address, email address and phone number.

Where personal information is transferred outside the UK, we do so under the safeguards required by UK data protection law, such as the International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses. You can ask us for more detail about the safeguards that apply by emailing shop@karenmabon.com.

HOW LONG WE KEEP IT

We keep order and transaction records for six years after the end of the relevant financial year, because HMRC requires it.

We keep account details for as long as your account is open. If you ask us to close it, we delete what we are not legally required to keep.

We keep marketing contact details until you unsubscribe, and then only enough information to make sure we do not email you again by mistake.

Analytics data is kept in a shortened or aggregated form and is not used to identify you individually.

COOKIES

Cookies are small files stored on your device. We use four kinds:

• Essential — keep you logged in, remember your basket, and make checkout work. The site cannot function without these, so they do not require consent.
• Preference — remember choices like your country and currency.
• Analytics — tell us how the site is being used so we can improve it. Set only with your consent.
• Advertising — used by Google, Meta, Pinterest and TikTok to show you relevant ads and to measure whether they worked. Set only with your consent.

You can accept or decline the non-essential categories when you first visit, and change your mind at any time through the cookie settings link in our footer. You can also block or delete cookies in your browser settings, though parts of the site may then stop working properly.

YOUR RIGHTS

Under UK data protection law you have the right to:

• Access the personal information we hold about you.
• Correct anything that is wrong or incomplete.
• Delete your information, where we have no legal reason to keep it.
• Object to us processing it, including for direct marketing — which you can do at any time, for any reason, and we will stop.
• Restrict how we use it while a question about it is resolved.
• Portability — receive a copy in a common, machine-readable format.
• Withdraw consent at any time, where consent is what we relied on.

To exercise any of these, email shop@karenmabon.com. We will respond within one month. We may need to confirm who you are first, which is a protection for you rather than an obstacle.

MARKETING

We only send marketing emails to people who have asked for them, or to customers who have bought from us and have not opted out. Every email has an unsubscribe link, and unsubscribing takes effect immediately. You will still receive transactional messages — order confirmations, dispatch notices and replies to your questions — because those are part of fulfilling your order rather than marketing.

CHILDREN

Our shop is intended for adults. We do not knowingly collect personal information from anyone under 16. We do sell children's clothing, but the customer is always the adult placing the order. If you believe a child has given us their information, email us and we will remove it.

SECURITY

Our site runs over an encrypted connection, payment details are handled entirely by PCI-DSS compliant payment providers, and access to customer data is limited to the people who need it to do their job. No system is perfectly secure, and we would rather say so than promise otherwise — but we take this seriously and we act quickly if anything goes wrong.

CHANGES TO THIS POLICY

We update this policy when what we do changes. The date at the top tells you when it was last revised. If we make a significant change we will say so clearly on the site.

COMPLAINTS

If something about how we handle your information concerns you, please email shop@karenmabon.com first — most things are quicker to fix directly.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113. Complaining to us first does not affect that right.