Privacy Policy

This page explains what information we collect, why we use it and the practical steps we take to handle customer data responsibly.

Last updated: October 2026

This is a customer-facing baseline privacy page for a UK ecommerce store. You should review it against your actual data flows, analytics setup, email tools, payment providers and legal requirements before treating it as final compliance copy.

1. Who we are

Pebble Island is responsible for the personal information collected through this website. If you have questions about how we handle your data, please contact us through our contact page.

2. Information we may collect

Name, email address and phone number where provided.
Billing or delivery details used to process an order.
Order history, product selections, sizes and colours.
Customer account information if you register with the site.
Enquiry details if you contact us through the contact form.
Technical information such as IP address, browser information and session data used for security, fraud prevention and essential site operation.

3. How we use your information

To process, fulfil and support your order.
To send order confirmations, payment updates and customer service replies.
To maintain your account and shopping basket session.
To monitor site performance, prevent abuse and improve the service.
To meet legal, accounting and record-keeping obligations.

4. Payment information

Depending on the checkout option chosen, payment may be handled by bank transfer or by Stripe. We do not intend this site to store raw card details directly. Stripe payments are processed through Stripe's checkout flow, and bank transfer records may include payment references needed to match incoming payments to orders.

5. Lawful bases for processing

Performance of a contract, where we need your information to fulfil an order.
Legal obligations, including accounting and tax requirements.
Legitimate interests, such as fraud prevention, customer support and keeping the website secure and functional.

6. Sharing information

We do not sell personal data. We may share relevant information with service providers where needed to run the business properly, for example hosting providers, delivery partners, payment providers and professional advisers.

7. Data retention

We keep order and customer records for as long as reasonably necessary for fulfilment, support, fraud prevention, tax and accounting purposes, and to comply with legal obligations. Retention periods should be reviewed against the way the business actually operates.

8. Cookies and session data

This website uses essential cookies and session storage to keep the basket working, maintain secure sessions and support key site functionality. If you use analytics, advertising or other optional tools, this page should be expanded to describe them clearly.

9. Your rights

Under UK data protection law, you may have rights to request access to your personal data, correct inaccurate information, ask for deletion in some circumstances, restrict or object to certain processing, and complain to the Information Commissioner's Office if you believe your data has been handled improperly.

10. Keeping data secure

We aim to use reasonable technical and organisational measures to protect customer information against unauthorised access, loss, misuse or disclosure. No website or transmission method is completely risk free, so security should be reviewed on an ongoing basis.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page.