Privacy Policy
Privacy Policy
Last updated: 16 June 2026
This Privacy Policy describes how www.sootandty.com (the "Site" or "we") collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.
Collecting Personal Information
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual as "Personal Information".
Device information
Examples collected: Web browser version, IP address, time zone, cookie information, pages and products you view, search terms, and how you interact with the Site.
Purpose: To load the Site accurately and to perform analytics on Site usage to optimise our Site.
Source: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
Disclosed to: Shopify (our e-commerce platform), Google Analytics (site analytics), and Meta (Facebook/Instagram advertising).
Order information
Examples collected: Name, billing address, shipping address, payment information (credit and debit card details processed securely via Shopify Payments and PayPal), email address, and phone number.
Purpose: To fulfil our contract with you — processing your payment, arranging shipping, sending invoices and order confirmations, communicating with you, and screening orders for fraud risk.
Source: Collected directly from you at checkout.
Disclosed to: Shopify (e-commerce processing), Shopify Payments and PayPal (payment processing), and our shipping and fulfilment partners.
Customer support information
Examples collected: Name, order number, email address, and any information you choose to share with us when contacting us via our contact form.
Purpose: To respond to your enquiry and provide customer support.
Source: Collected directly from you.
Disclosed to: Internal use only.
Marketing information
Examples collected: Email address and marketing preferences.
Purpose: To send you updates about new drops, exclusive offers, and news — only where you have opted in.
Source: Collected directly from you via our newsletter sign-up.
Disclosed to: Our email marketing provider (Shopify Email / Klaviyo).
Sharing Personal Information
We share your Personal Information with service providers to help us provide our services and fulfil our contracts with you. Specifically:
- We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
- We use Google Analytics to understand how customers use the Site. You can read Google's privacy policy here: https://policies.google.com/privacy. You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
- We use Meta (Instagram/Facebook) advertising tools. You can manage your ad preferences here: https://www.facebook.com/settings/?tab=ads.
- We may share your Personal Information to comply with applicable laws and regulations, to respond to a lawful request for information, or to otherwise protect our rights.
Behavioural Advertising
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners, including Meta and Google.
You can opt out of targeted advertising by visiting:
- Meta (Facebook/Instagram): https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at: http://optout.aboutads.info/.
Using Personal Information
We use your Personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfilment of your order, and keeping you up to date on new products and offers where you have opted in.
Lawful Basis (GDPR)
If you are a resident of the United Kingdom or European Economic Area ("EEA"), we process your personal information under the following lawful bases:
- Your consent (e.g. for marketing emails)
- The performance of the contract between you and the Site (e.g. processing your order)
- Compliance with our legal obligations
- For our legitimate interests, which do not override your fundamental rights and freedoms (e.g. fraud prevention, analytics)
Retention
When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the 'Your Rights' section below.
Automated Decision-Making
We do not engage in fully automated decision-making that has a legal or otherwise significant effect on you using customer data.
Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you. This includes:
- Temporary denylisting of IP addresses associated with repeated failed transactions (persists for a few hours).
- Temporary denylisting of credit cards associated with denylisted IP addresses (persists for a few days).
Your Rights
UK & EEA Residents (GDPR / UK GDPR)
If you are a resident of the UK or EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. To exercise these rights, please contact us via our Contact page.
Your Personal Information will be initially processed in Ireland and then may be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify's GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
California Residents (CCPA)
We do not sell your Personal Information as defined by the California Consumer Privacy Act of 2018. If you are a California resident and wish to access, port, correct, update, or erase your Personal Information, please contact us via our Contact page.
Cookies
A cookie is a small amount of information downloaded to your computer or device when you visit our Site. We use functional, performance, advertising, and analytics cookies. Cookies make your browsing experience better by allowing the Site to remember your actions and preferences.
Cookies necessary for the functioning of the store
| Name | Function |
|---|---|
| _ab | Used in connection with access to admin. |
| _secure_session_id | Used in connection with navigation through a storefront. |
| cart | Used in connection with the shopping cart. |
| cart_sig | Used in connection with checkout. |
| cart_ts | Used in connection with checkout. |
| checkout_token | Used in connection with checkout. |
| secret | Used in connection with checkout. |
| secure_customer_sig | Used in connection with customer login. |
| storefront_digest | Used in connection with customer login. |
| _shopify_u | Used to facilitate updating customer account information. |
Reporting and analytics
| Name | Function |
|---|---|
| _tracking_consent | Tracking preferences. |
| _landing_page | Tracks landing pages. |
| _orig_referrer | Tracks landing pages. |
| _s | Shopify analytics. |
| _shopify_s | Shopify analytics. |
| _shopify_sa_p | Shopify analytics relating to marketing & referrals. |
| _shopify_sa_t | Shopify analytics relating to marketing & referrals. |
| _shopify_y | Shopify analytics. |
| _y | Shopify analytics. |
| _ga | Google Analytics — distinguishes users. |
| _gid | Google Analytics — distinguishes users. |
| _fbp | Meta Pixel — used for advertising and analytics. |
Most browsers automatically accept cookies, but you can control and manage cookies through your browser settings. Please be aware that removing or blocking cookies can negatively impact your experience and parts of our Site may no longer be fully accessible.
For more information on managing cookies, visit www.allaboutcookies.org.
Do Not Track
Please note that because there is no consistent industry understanding of how to respond to "Do Not Track" signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.
Changes
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will update the "Last updated" date at the top of this page when changes are made.
Contact
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us via our Contact page or by post:
Soot and Ty
744–745 Camden Stables Market
Chalk Farm Road
London, NW1 8AH
United Kingdom
If you are not satisfied with our response, you have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/.