Privacy policy

Blush+Wren Privacy Policy

Last updated: 24 July 2026

This Privacy Policy explains how we collect, use and share personal information when you use the Blush+Wren store at blushwren.com and related services.

Who is responsible for your data

The data controller for your personal information is Oaty Design (United Kingdom), the merchant of record for the Blush+Wren store. Blush+Wren is a brand of Blush+Wren FZE LLC (United Arab Emirates); the brand owner does not have access to your personal information. We process payments and UK logistics.

You can contact us about privacy at info@blushwren.com.

We handle personal information in accordance with the UK GDPR and the Data Protection Act 2018.

Personal information we collect

Depending on how you interact with us, we may collect and process:

  • Account and contact details: business name, contact name, email address, phone number, billing and delivery addresses, and trade account information.
  • Order and transaction information: items viewed, added to cart, ordered, returned or cancelled, order history and communications about orders.
  • Payment information: processed securely by our payment provider; we do not store full card numbers.
  • Content you submit: for example returns requests, support enquiries, reviews, and any content you upload to our creator content programme (see the Creator Content Terms).
  • Technical and usage information: device, browser, IP address, and how you interact with the store, including through cookies and similar technologies.

How and why we use your information

We use personal information to:

  • set up and manage your trade account and verify eligibility;
  • process orders, payments, returns and exchanges, and arrange delivery;
  • provide customer support and manage our business relationship with you;
  • operate features such as custom colour orders, private label and brand partner services, and the creator content programme;
  • send service messages and, where permitted, marketing (you can opt out of marketing at any time);
  • prevent fraud and misuse and keep the store secure; and
  • comply with our legal obligations.

Our lawful bases for processing include performance of our contract with you, our legitimate interests in running and improving the business, your consent (for example for certain marketing), and compliance with legal obligations.

Who we share your information with

We share personal information with service providers and partners who help us run the business, including:

  • Shopify, which hosts the store and processes information about your use of it;
  • Shopify Payments, to process payments;
  • shipping and logistics carriers, to deliver your orders and provide tracking;
  • our email and communications providers (including Shopify and Resend), to send service and marketing messages;
  • our manufacturing and fulfilment partner in China, where necessary to produce and, for store-to-store dropshipping, to ship your orders. Where dropshipping is used, this may include the name and delivery address of the end recipient; and
  • professional advisers and authorities where required by law.

We do not sell your personal information.

International transfers

We are based in the United Kingdom. Some of our providers and partners are located outside the UK, so your personal information may be transferred internationally.

In particular, our manufacturing and fulfilment partner is located in China, which is not covered by a UK adequacy decision. Where we transfer personal information there, we put in place an appropriate safeguard, being the UK International Data Transfer Agreement (IDTA) or another mechanism recognised under UK data protection law, and we transfer only the information needed to fulfil your order.

Other providers may transfer information to countries including the United States and elsewhere. Where we do so, we rely on recognised transfer mechanisms such as the IDTA or the UK Addendum to the EU Standard Contractual Clauses, unless the destination benefits from a UK adequacy decision.

How long we keep your information

We keep personal information for as long as needed to provide the services, maintain your account, meet our legal and accounting obligations, and resolve disputes. Retention periods vary depending on the type of information and why we hold it.

Your rights

Subject to conditions and exceptions in law, you have rights to access, correct, delete, restrict or object to the processing of your personal information, to data portability, and to withdraw consent where we rely on it. To exercise a right, contact info@blushwren.com. We may need to verify your identity before acting on a request.

If you have a concern, you can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We use cookies and similar technologies to operate the store, remember your preferences, analyse usage and support marketing. You can manage cookies through your browser settings and any cookie controls we provide.

Children

The store is intended for trade businesses and is not directed at children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "last updated" date.

Contact

Oaty Design, merchant of record for Blush+Wren (a brand of Blush+Wren FZE LLC)
Email: info@blushwren.com
UK correspondence: Unit 154241, Courier Point, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FH, United Kingdom