Privacy
Last updated: 15 September 2026
About this notice
This notice explains how the Duckiepoos website uses personal information. For privacy questions, requests or complaints, email privacy@vacuumstate.co.uk.
Website hosting
Our website is hosted by IONOS. Serving pages involves technical information such as your IP address, requested page, access time, browser, device and referring page where supplied. IONOS states that its standard hosting visitor records are anonymised on collection and retained for eight weeks for security and service quality. Its hosting also provides server-side visitor statistics. Read IONOS’s hosting data information.
Browsing and ordering
Sales are currently paused. Our shop uses Shopify to show products, manage a basket and provide checkout when ordering is available. These services receive technical connection and shopping information. If you place an order, the information can include your name, contact details, delivery and billing addresses, items purchased, payment status and information needed to fulfil or support the order. Payment information is handled by the checkout and payment services you use.
We use order information to fulfil your purchase, arrange delivery, respond to questions, process returns where applicable, prevent fraud and meet legal recordkeeping duties. Shopify, payment services and the delivery or fulfilment services used for your order receive information needed for their roles. Read Shopify’s consumer privacy information. Checkout has its own privacy and cookie controls.
Correspondence
When you contact us, we receive the name, email address, message and attachments you supply. We use them to answer, investigate a problem or handle a request. Providing details is voluntary, but we may need enough information to respond. Enquiries are handled through IONOS email and forwarded to Gmail, so copies may exist with both providers. Please send only information needed for your enquiry. We do not sell correspondence or use ordinary enquiries to sign you up for marketing.
Why we use information
We rely on legitimate interests to operate and secure the website, answer enquiries and investigate problems; contract where information is necessary for a service or purchase you request; and legal obligations for applicable privacy, tax and accounting duties. Optional Google Analytics rely on your consent. You can withdraw consent without affecting earlier lawful processing.
How long we keep information
Routine correspondence is kept for no more than three years after resolution or the last substantive contact about the matter, whichever is later. We review at least annually and delete routine closed cases over two years old so they are removed within that maximum. Unnecessary information may be removed sooner. This applies to copies we control in inboxes, sent mail, downloaded attachments and deleted-items folders.
Only relevant records are kept longer when needed for an unresolved complaint, claim, investigation or specific legal obligation; we review the reason at least annually. Provider backup and security records follow the provider’s own processes.
If ordering resumes, order records will be kept while needed to fulfil and support the purchase and for applicable tax, accounting and legal-claims requirements. The ordinary correspondence limit does not require deletion of records that must legally be retained. We review records when those purposes end and retain only what is still required.
Google Analytics retains reporting data under the retention controls for the property. User/event-level retention and aggregated reporting have different lifecycles; withdrawal of consent stops future collection but does not shorten existing server-side retention. See Google’s retention explanation, or contact us about the records relevant to your request.
International processing
IONOS and Google provide hosting or communications services. Shopify and the payment or fulfilment services involved in an order also process the information needed for that transaction. Providers may process information outside the UK. Google describes adequacy mechanisms, the UK Extension to the EU–US Data Privacy Framework and standard contractual clauses where required in its transfer information. Other providers describe their applicable safeguards in their linked privacy policies. You can contact us for information about the arrangements relevant to your data.
Your rights
Depending on the circumstances, you can ask for access, correction, deletion, restriction or a portable copy of your information. You can object to processing based on legitimate interests. Contact privacy@vacuumstate.co.uk to make a request or complaint. We may need proportionate information to verify your identity and respond within the applicable statutory time limit, normally one month, explaining any permitted extension. Deletion requests are considered when received, independently of our annual reviews.
You can also complain to the UK Information Commissioner’s Office or call 0303 123 1113.
Updates
We update this page when our services or data practices change. The date above identifies the latest revision.