Privacy policy

Last updated: 24 September 2026

This Privacy Policy explains how Ivan Stefchev trading as Pretzel ("Pretzel", "we", "us" or "our") collects, uses, stores and shares personal information when you visit or use PretzelShop.co.uk, purchase products from us, submit personalisation information or files, communicate with us, or otherwise interact with our website, products and services (collectively, the "Services").

Pretzel's online store is powered by Shopify, which provides the ecommerce platform that enables us to offer our products and Services to you.

For the purposes of applicable UK data protection law, Ivan Stefchev trading as Pretzel is the data controller in relation to personal information for which we determine the purposes and means of processing.

Certain service providers, including Shopify, may also act as independent controllers for particular processing they undertake for their own purposes.

Please read this Privacy Policy carefully so that you understand what information we collect, why we use it, who we may share it with, how long we may retain it and the rights available to you.

Nothing in this Privacy Policy affects your rights under applicable data protection law.

1. Who We Are

The data controller responsible for this Privacy Policy is:

Ivan Stefchev trading as Pretzel
25 Upton Lawn Grove
Northampton
NN5 4XP
United Kingdom

Trading name: Pretzel
Email: hello@pretzelshop.co.uk

2. Personal Information We Collect

"Personal information" means information relating to an identified or identifiable individual.

The information we collect depends on how you interact with Pretzel and may include the following categories.

Contact and Identity Information

This may include:

• your name;

• email address;

• telephone number;

• billing address;

• shipping address;

• recipient details; and

• other contact information you provide.

Order and Transaction Information

This may include:

• products ordered;

• product variants and options;

• quantities;

• personalisation selections;

• order numbers;

• order dates;

• order status;

• prices and discounts;

• delivery information;

• returns;

• refunds;

• cancellations;

• previous purchases; and

• communications relating to your order.

Personalisation Information

Because Pretzel sells personalised and made-to-order products, we may collect information specifically provided by you for the preparation or manufacture of your order.

This may include:

• personalised text;

• names;

• initials;

• dates;

• messages;

• usernames;

• social-media handles;

• selected fonts;

• colours;

• sizes;

• positioning;

• layout selections;

• design instructions;

• product preferences; and

• other information you ask us to reproduce or incorporate into a product.

Customer-Uploaded Photographs, Images, Artwork and Files

Some Pretzel products allow or require customers to upload or otherwise provide:

• photographs;

• images;

• logos;

• artwork;

• graphics;

• designs; or

• other digital files.

For example, this may include material supplied for personalised pet stickers, personalised stickers, personalised T-shirts, custom printed products, engraved products or other personalised products.

These files may contain personal information about you or another identifiable individual.

We process customer-supplied files where reasonably necessary to create, manufacture, review, approve, fulfil and support your personalised order and for the other purposes explained in this Privacy Policy.

Please provide only information and files reasonably necessary for your order.

Information About Other People

You may sometimes provide information relating to another person, for example:

• a recipient's name or delivery address;

• a photograph;

• a name for personalisation;

• a username; or

• other identifying information contained within customer-supplied content.

Where you provide personal information relating to another person, you are responsible for ensuring that you are entitled to provide that information to us for the intended purpose.

Please do not provide personal information about another person where you do not have an appropriate basis or permission to do so.

Payment Information

Payment transactions may involve information such as:

• payment method;

• payment status;

• transaction identifiers;

• payment confirmation;

• billing information;

• refund information; and

• other information relating to the transaction.

Payment card and other payment information may be collected and processed directly by Shopify and/or the applicable payment provider.

Pretzel does not necessarily receive or store complete payment card numbers.

Account Information

Where customer-account functionality is available, we may process information such as:

• account identifiers;

• account contact details;

• saved addresses;

• preferences; and

• account settings.

Authentication credentials and related security information may be processed by Shopify or another provider responsible for the relevant account functionality.

Communications

We collect information that you provide when communicating with us, including through:

• email;

• contact forms;

• customer-support enquiries;

• order-related communications;

• complaints;

• return or refund requests;

• proof or design approvals; and

• other correspondence.

Delivery and Fulfilment Information

We may process information relating to delivery and fulfilment, including:

• shipping address;

• recipient details;

• tracking numbers;

• dispatch information;

• delivery status;

• attempted-delivery information;

• delivery confirmation;

• collection information;

• delivery instructions; and

• information supplied by the relevant delivery provider.

Where made available by a delivery provider, this may also include evidence connected with delivery, such as tracking events, delivery scans, delivery photographs or other delivery confirmation information.

Fraud, Security and Dispute Information

Where necessary, we may process information connected with:

• suspected fraudulent transactions;

• account or payment security;

• payment verification;

• chargebacks;

• payment disputes;

• unauthorised-payment claims;

• non-receipt claims;

• customer complaints; and

• other disputes.

Website, Device and Usage Information

When you visit or use our website, information may automatically be collected about your device and interaction with the Services.

This may include:

• IP address;

• browser type;

• device information;

• operating system;

• network information;

• online identifiers;

• pages viewed;

• interactions with products;

• products viewed;

• items placed in your basket;

• checkout activity;

• referring pages; and

• other website usage information.

Some of this information may be collected using cookies and similar technologies.

3. How We Collect Personal Information

We may collect personal information from the following sources.

Directly From You

For example, when you:

• place an order;

• enter personalisation information;

• upload a photograph or file;

• create or use an account;

• communicate with us;

• request support;

• request a return or refund;

• approve a design or proof;

• subscribe to marketing communications; or

• otherwise provide information to us.

Automatically Through the Services

Certain information may be collected automatically when you interact with our website through technologies such as:

• cookies;

• pixels;

• local storage;

• server logs; and

• similar technologies.

From Shopify and Service Providers

We may receive information from Shopify and other providers that assist us with:

• ecommerce;

• payments;

• fraud prevention;

• website operation;

• order management;

• file handling or storage;

• shipping;

• analytics;

• communications; and

• customer support.

From Payment and Financial-Service Providers

We may receive transaction status, payment confirmation, fraud indicators, dispute information and other information necessary to administer transactions or investigate payment issues.

From Delivery Providers

We may receive tracking, delivery status, attempted-delivery information, delivery confirmation and other information concerning delivery of an order.

From Other Third Parties

We may receive personal information from other third parties where permitted by law and reasonably necessary for the operation, security or protection of our Services.

4. How We Use Personal Information

Depending on the circumstances, we may use personal information for the following purposes.

Processing and Fulfilling Orders

We use information to:

• receive and process orders;

• process payments;

• verify transactions;

• manufacture products;

• personalise products;

• review customer-supplied artwork and files;

• produce proofs where applicable;

• obtain customer approval where required;

• prepare orders;

• arrange delivery;

• provide tracking;

• administer returns and refunds; and

• provide customer service relating to orders.

Creating Personalised Products

Where you order a personalised product, we may use the text, photographs, artwork, usernames, images, instructions and other materials you provide for the purpose of producing your order.

This may involve reviewing, resizing, positioning, formatting, preparing, printing, cutting, engraving or otherwise processing customer-supplied material as reasonably necessary to manufacture the requested product.

Communicating With You

We may use your information to:

• confirm orders;

• provide order updates;

• request information necessary to complete an order;

• request or confirm design approval;

• answer questions;

• provide dispatch and delivery information;

• respond to enquiries;

• handle complaints;

• process returns or refunds; and

• provide customer support.

Transactional and service communications are separate from marketing communications.

Operating and Improving Our Services

We may use information to:

• operate our website;

• maintain website functionality;

• administer customer accounts;

• understand how customers interact with our Services;

• diagnose technical problems;

• improve products and Services;

• improve customer experience; and

• maintain the reliability and security of our systems.

Security and Fraud Prevention

We may process information where reasonably necessary to:

• authenticate or protect accounts;

• provide a secure shopping experience;

• detect suspected fraud;

• investigate suspicious transactions;

• verify transactions;

• prevent unauthorised activity;

• investigate malicious or unlawful activity;

• secure our website and systems; and

• protect Pretzel, our customers and other people.

Returns, Complaints, Chargebacks and Payment Disputes

We may use and retain information where reasonably necessary to investigate, establish, exercise or defend claims relating to an order.

This may include responding to:

• refund claims;

• return claims;

• delivery disputes;

• payment disputes;

• chargebacks;

• buy-now-pay-later disputes;

• complaints;

• allegations that an order was unauthorised;

• allegations that goods were not received;

• allegations that goods were faulty or materially not as described;

• allegations that a personalised product was produced incorrectly; or

• other disputes relating to an order.

Relevant information may include:

• order details;

• product selections;

• personalisation details;

• customer-supplied text;

• photographs;

• artwork;

• uploaded files or records relating to them;

• proofs;

• customer approvals;

• customer acknowledgements;

• acceptance of relevant terms or policies;

• communications;

• production records;

• fulfilment records;

• payment information;

• dispatch information;

• tracking;

• delivery information; and

• other information reasonably relevant to the claim or dispute.

Where appropriate and lawful, relevant information may be provided to parties involved in investigating or resolving the matter, including payment providers, banks, card issuers, buy-now-pay-later providers, Shopify, delivery providers, professional advisers, insurers, courts, regulators or law-enforcement authorities.

Legal and Regulatory Purposes

We may process information where necessary to:

• comply with applicable law;

• maintain appropriate accounting, tax and business records;

• respond to valid legal processes;

• respond to courts, regulators, law enforcement or public authorities;

• establish, exercise or defend legal claims;

• enforce or investigate potential breaches of our Terms of Service or other policies; and

• protect our legal rights.

5. Our Lawful Bases for Processing

Under applicable UK data protection law, we must have a lawful basis for processing personal information.

The appropriate lawful basis depends on the purpose and circumstances.

Performance of a Contract

We may process information where necessary to enter into or perform our contract with you.

This includes processing necessary to:

• process an order;

• produce a personalised product;

• process payment;

• communicate about an order;

• arrange delivery;

• provide customer support; and

• administer returns, refunds or other contractual matters.

Legal Obligation

We may process information where necessary to comply with legal obligations, including applicable tax, accounting, consumer-protection and regulatory requirements.

Legitimate Interests

We may process information where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• operating and improving Pretzel;

• providing customer service;

• maintaining appropriate business records;

• preventing and detecting fraud;

• securing our website and systems;

• investigating complaints;

• establishing, exercising and defending legal claims;

• responding to payment disputes and chargebacks;

• protecting Pretzel against fraudulent or abusive claims;

• understanding the performance of our Services; and

• protecting the rights, property and security of Pretzel, our customers and others.

Where required, we consider and balance these interests against the potential impact on individuals.

Consent

Where applicable, we may rely on consent, including for certain marketing activities or cookies and similar technologies where consent is legally required.

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Information Required to Fulfil an Order

Certain information is necessary for us to enter into or perform a contract with you.

For example, we may need:

• your name;

• contact information;

• billing or payment information;

• delivery address;

• product selections; and

• information necessary to produce a personalised product.

Where a personalised product requires text, photographs, artwork, sizing, design instructions or another selection, we may be unable to manufacture or fulfil the product without that information.

If you do not provide information reasonably required for an order, we may be unable to accept, process, manufacture, dispatch or complete that order.

We will not require you to provide personal information that is unnecessary for the relevant purpose.

7. Personalised Product Files and Customer Content

Customer-supplied content is particularly important to Pretzel because many of our products are personalised.

When you provide photographs, artwork, logos, text, usernames, images or other files for an order, we may use them as reasonably necessary to:

• manufacture your product;

• prepare or modify the file for production;

• create a proof or preview where applicable;

• perform quality control;

• communicate with you about the design;

• fulfil the order;

• investigate a complaint;

• process a return, replacement or refund;

• investigate suspected fraud;

• respond to a payment dispute or chargeback; or

• establish, exercise or defend a legal claim.

We will not treat the fact that you supplied photographs or artwork for an order as granting Pretzel an unrestricted right to use that content for unrelated advertising or promotional purposes.

We will not intentionally publish a customer's private photograph or personalised design for marketing purposes merely because it was supplied to fulfil an order.

If we wish to use identifiable customer-supplied material for a separate promotional purpose, we will ensure that we have an appropriate lawful basis and obtain permission where required.

Customer-supplied material may nevertheless be processed by service providers where reasonably necessary to operate our systems or fulfil the purposes described in this Privacy Policy.

8. Sensitive and Special Category Personal Information

Pretzel does not ordinarily request or require special category personal information to provide its products and Services.

Under UK data protection law, special category information includes certain information concerning matters such as health, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, genetics, biometric identification, sex life or sexual orientation.

A normal photograph of a person is not automatically biometric information or special category personal information merely because the individual can be recognised from the photograph.

Nevertheless, customer-supplied text, photographs, artwork or other material could sometimes contain or reveal sensitive information.

Please do not provide unnecessary sensitive or special category information in an order, upload or communication.

We do not intend to analyse ordinary customer photographs or files in order to infer sensitive characteristics about the individuals depicted.

If we intentionally need to process special category personal information, we will only do so where an appropriate lawful basis and an applicable condition under data protection law are available.

We may decline, remove or request replacement of customer-supplied material where we cannot appropriately process it or where it is unnecessary for providing the requested product.

9. Data Minimisation and Accuracy

We aim to collect and use only personal information that is reasonably necessary for the purposes described in this Privacy Policy.

You are responsible for providing accurate information when placing an order and for updating information where necessary.

If you believe information we hold about you is inaccurate or incomplete, please contact us.

10. How We Disclose Personal Information

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy and as permitted or required by law.

Shopify

Our online store is powered by Shopify.

Shopify provides the ecommerce infrastructure through which customers browse our store, place orders and interact with ecommerce features.

Information submitted through the Services may therefore be transmitted to and processed by Shopify.

Shopify may process information on our behalf and may also process certain information for its own purposes as described in Shopify's applicable privacy notices.

Payment and Financial-Service Providers

Information may be shared with or processed by:

• payment processors;

• card networks;

• banks;

• card issuers;

• buy-now-pay-later providers; and

• other relevant financial-service providers

where necessary to process payments, issue refunds, authenticate transactions, prevent fraud or resolve payment disputes.

Delivery Providers

We may provide information to Royal Mail and, if applicable, other delivery providers where necessary to deliver your order.

This may include:

• recipient name;

• delivery address;

• contact information;

• parcel information; and

• order or delivery references reasonably necessary for fulfilment.

Technology and Service Providers

We may use third parties that provide services such as:

• ecommerce infrastructure;

• website hosting;

• cloud storage;

• customer-file handling;

• customer communications;

• analytics;

• security;

• fraud prevention;

• IT services; and

• other operational services.

These providers may process personal information where necessary to provide their services.

Professional Advisers and Authorities

Where appropriate or required, information may be disclosed to:

• accountants;

• legal advisers;

• insurers;

• regulators;

• law enforcement;

• courts;

• government bodies; and

• other professional or public authorities.

Business Transfers

If Pretzel or all or part of its business is sold, transferred, reorganised or otherwise changes ownership, relevant personal information may be disclosed or transferred as part of that transaction, subject to applicable data protection law.

11. Relationship With Shopify

The Services are hosted by Shopify.

Shopify collects and processes personal information relating to customers' access to and use of Shopify-powered stores in order to provide its services and functionality.

Information submitted through our store may therefore be transmitted to and shared with Shopify and relevant service providers, including organisations that may be located outside the United Kingdom.

Shopify may also provide features involving information obtained from interactions with Pretzel, Shopify and other merchants.

For certain processing undertaken by Shopify for Shopify's own purposes, Shopify may independently determine the purposes and means of that processing and be responsible for responding to applicable privacy-rights requests.

Further information is available in the Shopify Consumer Privacy Policy and through the Shopify Privacy Portal.

12. Marketing Communications

Where permitted by applicable law, we may use personal information to communicate information about Pretzel products, offers or promotions.

For electronic marketing such as email or text messages, we will comply with applicable data protection law and applicable electronic-marketing rules.

Depending on the circumstances, this may involve your consent or another legally permitted basis, such as applicable existing-customer provisions.

Where consent is required, marketing consent will not be treated as a condition of purchasing an ordinary product or Service unless legally appropriate.

You may unsubscribe from marketing emails at any time using the unsubscribe facility included in the communication or by contacting:

hello@pretzelshop.co.uk

If you unsubscribe, we may retain limited information necessary to record and respect your preference.

Opting out of marketing does not prevent us from sending necessary non-marketing communications concerning:

• an order;

• transaction;

• account;

• customer-service request;

• delivery;

• safety or security matter; or

• other Service you have requested.

You have the right to object at any time to the use of your personal information for direct marketing. If you object, we will stop using your personal information for that purpose.

13. Cookies and Similar Technologies

Our website and Shopify may use cookies, pixels and similar technologies.

These may be used for purposes including:

• essential website functionality;

• maintaining shopping-cart functionality;

• remembering preferences;

• security and fraud prevention;

• measuring website performance;

• analytics; and

• advertising or marketing where applicable.

Where applicable law requires consent before a non-essential cookie or similar technology is used, we will seek that consent through the relevant cookie or privacy controls.

You may be able to manage preferences through the cookie controls available on our website and through your browser settings.

Disabling certain technologies may affect website functionality.

Additional information may be available through our website's cookie controls or Cookie Policy, where applicable.

14. Third-Party Websites and Services

Our Services may contain links to websites, social-media platforms or other services operated by third parties.

If you follow a third-party link or interact with a third-party service, that third party may process information under its own privacy notice.

Pretzel does not control the privacy or security practices of independent third-party websites and services.

We encourage you to review their privacy information before providing personal information.

The inclusion of a third-party link does not by itself mean that Pretzel controls or endorses that third party's privacy practices.

15. Security

We take reasonable technical and organisational measures designed to protect personal information against:

• unauthorised access;

• unauthorised disclosure;

• loss;

• misuse;

• alteration; and

• destruction.

Access to personal information should be limited to persons and service providers who reasonably require it for legitimate purposes.

However, no internet transmission, website, storage system or security measure can be guaranteed to be completely secure.

Please avoid sending unnecessary sensitive or confidential information through unsecured communication channels.

If you use a customer account, you are responsible for keeping your account credentials secure and should not share them with other people.

16. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted by applicable law.

The appropriate retention period depends on factors including:

• the nature and sensitivity of the information;

• the purpose for which it was collected;

• whether an order or customer relationship remains active;

• accounting and tax requirements;

• consumer-law obligations;

• complaint or refund periods;

• fraud-prevention requirements;

• potential or actual disputes;

• chargeback and payment-dispute periods;

• limitation periods for legal claims;

• contractual requirements; and

• whether retention is reasonably necessary to establish, exercise or defend legal rights.

Order and transaction records may therefore be retained after an order has been completed where reasonably necessary for accounting, tax, customer-service, fraud-prevention, dispute-resolution or legal purposes.

Customer-supplied photographs, artwork, personalisation information and other files will not necessarily be deleted immediately after production or delivery where continued retention is reasonably necessary for purposes such as:

• resolving production issues;

• providing customer support;

• producing an agreed replacement;

• investigating complaints;

• preventing or investigating fraud;

• responding to chargebacks or payment disputes; or

• establishing, exercising or defending legal claims.

We will not retain personal information indefinitely merely because it might potentially be useful.

When personal information is no longer reasonably required, we will delete, anonymise or otherwise securely dispose of it as appropriate, subject to technical, legal and operational requirements.

17. Children's Information

Our Services are intended to be purchased by people capable of entering into a contract with us.

We do not knowingly seek to collect personal information directly from children for the purpose of allowing them to independently place orders.

However, because we provide personalised products, an adult customer may provide a photograph, name or other information relating to a child for inclusion in a personalised product.

Where you provide information or an image relating to a child, you are responsible for ensuring that you are entitled to provide that information to us for the requested purpose.

We will process such material only as appropriate for the purposes described in this Privacy Policy and in accordance with applicable law.

If you believe a child has provided personal information to us directly without appropriate authority, please contact:

hello@pretzelshop.co.uk

18. International Transfers

Shopify and some other service providers may process or store personal information outside the United Kingdom.

Where Pretzel is responsible for a restricted transfer of personal information outside the UK, we will use an appropriate lawful transfer mechanism where required.

Depending on the circumstances, this may include:

• UK adequacy regulations;

• an applicable International Data Transfer Agreement;

• the UK Addendum to approved Standard Contractual Clauses; or

• another lawful transfer mechanism permitted by applicable UK data protection law.

Where a service provider independently determines its own international-transfer arrangements, its applicable privacy information may provide further details.

You may contact us if you would like further information about safeguards relevant to international transfers for which Pretzel is responsible.

19. Your Data Protection Rights

Depending on the circumstances and the lawful basis on which information is processed, you may have the following rights under applicable UK data protection law.

Right of Access

You may have the right to ask whether we process your personal information and to obtain access to personal information we hold about you.

Right to Rectification

You may have the right to ask us to correct inaccurate personal information or complete information that is incomplete.

Right to Erasure

In certain circumstances, you may have the right to ask us to delete personal information.

This right is not absolute.

We may be entitled or required to retain information where there is a lawful reason to do so, including compliance with a legal obligation or the establishment, exercise or defence of legal claims.

Right to Restriction

In certain circumstances, you may have the right to ask us to restrict the processing of your personal information.

Right to Data Portability

Where the relevant legal requirements are satisfied, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format and/or have it transmitted to another controller.

Right to Object

You may have the right to object to certain processing based on legitimate interests.

Right to Object to Direct Marketing

You have the right to object at any time to processing of your personal information for direct-marketing purposes.

Where you object to direct marketing, we will stop processing your personal information for that purpose.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

Rights Relating to Automated Decision-Making

Where applicable, you may have rights relating to certain decisions based solely on automated processing that produce legal or similarly significant effects.

Pretzel does not intend this statement to imply that we currently undertake such automated decision-making where we do not do so.

20. Exercising Your Rights

To exercise a data-protection right relating to information controlled by Pretzel, contact:

hello@pretzelshop.co.uk

Please provide enough information for us to identify you and understand your request.

We may request reasonable additional information where necessary to verify your identity before fulfilling a request.

We will respond within the period required by applicable law.

You will not be treated unfairly merely because you exercise a data-protection right.

Some rights are subject to legal conditions, limitations and exemptions, and we may therefore not always be required or permitted to fulfil a request exactly as submitted.

Where Shopify is independently responsible for particular processing, you may also need to exercise applicable rights directly with Shopify.

21. Deletion Requests and Order Records

A request to delete personal information does not necessarily require us to immediately erase every record connected with an order.

Where permitted or required by law, we may retain information that remains reasonably necessary for purposes including:

• tax and accounting records;

• compliance with legal obligations;

• fraud prevention;

• resolving complaints;

• maintaining records of refunds and returns;

• responding to chargebacks or payment disputes;

• establishing, exercising or defending legal claims; and

• recording marketing opt-outs.

Where only part of a record remains necessary, we may delete, restrict, anonymise or minimise other information where appropriate.

22. Payment Disputes, Chargebacks and Fraud Claims

If you raise a payment dispute, chargeback or similar claim, relevant personal information may be processed and disclosed where reasonably necessary to respond to that claim.

Depending on the nature of the dispute, this may include:

• your name;

• billing or delivery address;

• order details;

• transaction information;

• personalisation selections;

• customer-supplied instructions;

• records of customer uploads;

• proofs;

• approvals;

• customer acknowledgements;

• relevant policy or terms acceptance records;

• correspondence;

• production records;

• fulfilment records;

• dispatch records;

• tracking information;

• delivery evidence; and

• other information reasonably relevant to establishing what was ordered, produced, supplied, dispatched or delivered.

Relevant information may be disclosed to organisations involved in resolving the dispute, including Shopify, payment processors, banks, card issuers, card networks, buy-now-pay-later providers, delivery providers, professional advisers or other relevant parties.

We will only disclose information reasonably relevant to the purpose and subject to applicable data protection law.

Nothing in this section prevents a customer from making a legitimate complaint, exercising statutory rights or raising a genuine payment dispute.

23. Complaints About Our Use of Personal Information

If you have concerns about how Pretzel processes your personal information, please contact us so that we can investigate.

Email: hello@pretzelshop.co.uk

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator.

Your right to complain to the ICO is not affected by whether you contact Pretzel first.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect:

• changes to our Services;

• changes to the personal information we process;

• changes to service providers;

• changes to Shopify functionality;

• operational changes;

• changes to applicable law or regulatory guidance; or

• other legitimate business requirements.

When we update this Privacy Policy, we will publish the revised version and update the Last updated date.

Where applicable law requires additional notice or consent before a material change takes effect, we will provide that notice or obtain consent as required.

25. Contact Us

If you have questions about this Privacy Policy, our privacy practices or personal information we hold about you, or if you wish to exercise a data-protection right, please contact:

Ivan Stefchev trading as Pretzel
25 Upton Lawn Grove
Northampton
NN5 4XP
United Kingdom

Email: hello@pretzelshop.co.uk

For the purposes of applicable UK data protection law, Ivan Stefchev trading as Pretzel is the data controller for personal information where Pretzel determines the purposes and means of processing.