Privacy Policy
Last updated: 23 September 2026
Three Little Cubs Ltd (“Three Little Cubs”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, place an order, create an account, contact us, subscribe to our marketing communications or otherwise interact with Three Little Cubs.
We are the data controller responsible for your personal information.
1. Who we are
Three Little Cubs Ltd
Email: [email protected]
Three Little Cubs is a UK-based business selling crochet products, crochet kits, finished products and digital crochet patterns.
If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the email address above.
2. What personal information do we collect?
Depending on how you interact with us, we may collect:
Information you provide to us
This may include:
- Your name
- Billing address
- Delivery address
- Email address
- Telephone number
- Account login information
- Order details and purchase history
- Information you provide when contacting us
- Information you provide when completing forms, surveys or reviews
- Marketing preferences
- Any other information you voluntarily provide to us
Payment information
When you make a purchase, payment is processed through third-party payment providers. We do not normally receive or store your full payment card details.
Depending on the payment method you choose, your payment information may be processed by providers such as Stripe, PayPal, WooCommerce or other payment providers available at checkout.
These providers process your payment information in accordance with their own privacy policies.
Information collected automatically
When you use our website, certain information may be collected automatically, including:
- IP address
- Browser type and device information
- Operating system
- Pages visited
- How you interact with our website
- Website usage information
- Cookie and similar technology information
This information helps us operate, secure and improve our website.
3. How do we collect your personal information?
We collect personal information when you:
- Create an account on our website
- Place an order
- Purchase a digital product
- Purchase a physical product
- Contact us by email or through our website
- Sign up to our mailing list
- Submit a review or feedback
- Complete a survey or competition
- Interact with our website
- Accept non-essential cookies or similar technologies
- Otherwise voluntarily provide information to us
We may also receive limited information from third parties where necessary to process transactions, prevent fraud, process payments or provide our services.
4. How do we use your personal information?
We use your personal information for the following purposes:
Processing and fulfilling orders
We use your information to:
- Process your order
- Take and process payment
- Provide digital products
- Prepare and dispatch physical products
- Arrange delivery
- Provide order updates
- Deal with returns, refunds and customer service enquiries
- Maintain records of your purchases
The lawful basis for this processing is generally contract, because we need to use your information to fulfil your order.
Managing your account
If you create an account, we use your information to:
- Create and maintain your account
- Allow you to view your orders
- Provide account-related services
- Help you access digital purchases
The lawful basis is generally contract.
Customer service
We use information you provide to respond to questions, complaints, requests and other enquiries.
The lawful basis may be contract or legitimate interests, depending on the circumstances.
Legal and accounting requirements
We may use and retain personal information where necessary to:
- Comply with tax and accounting requirements
- Maintain business records
- Comply with legal obligations
- Prevent and detect fraud
- Protect our legal rights
- Resolve disputes
The lawful basis may be legal obligation or legitimate interests, depending on the circumstances.
Website security and improvement
We may use technical information and website usage information to:
- Maintain website security
- Detect fraudulent or suspicious activity
- Troubleshoot technical problems
- Improve our website and services
- Understand how visitors use our website
Where appropriate, this will be based on our legitimate interests or, where required, your consent.
5. Marketing
If you choose to subscribe to our marketing communications, we may use your name and email address to send you information about:
- New products
- Crochet patterns
- Offers and promotions
- Discounts
- News and updates from Three Little Cubs
Where consent is required, we will only send marketing communications where you have provided the appropriate consent.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link contained in the email or by contacting us at:
Withdrawing consent will not affect the lawfulness of processing carried out before you withdrew your consent.
6. Who do we share your personal information with?
We do not sell your personal information.
We may share information with trusted third parties where this is necessary to operate our business and provide our services.
These may include:
Website and ecommerce providers
We use website and ecommerce services to operate our online shop, process orders and manage customer accounts.
Payment providers
Payment information may be processed by third-party payment providers such as:
- Stripe
- PayPal
- WooCommerce
- Other payment providers made available through our website
Delivery and fulfilment providers
We may provide your name, address, telephone number and/or email address to delivery or fulfilment providers where necessary to deliver your order.
Email and marketing providers
Where applicable, your information may be processed by third-party email or marketing services used by Three Little Cubs – currently Brevo.
Professional advisers
We may share information with professional advisers such as accountants, auditors, insurers or legal advisers where reasonably necessary.
Legal and regulatory authorities
We may disclose information where required to do so by law, regulation, court order or other legal process, or where necessary to prevent or detect fraud or protect our rights.
We only share information where there is an appropriate lawful basis for doing so.
7. International transfers
Some of the service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law and that appropriate safeguards are in place where required.
8. How do we store and protect your information?
We take reasonable technical and organisational measures to protect your personal information against:
- Unauthorised access
- Accidental loss
- Destruction
- Misuse
- Alteration
- Unauthorised disclosure
Access to personal information is restricted to those who need it for legitimate business purposes.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
9. How long do we keep your information?
We only keep personal information for as long as reasonably necessary for the purposes for which it was collected.
We may retain information for longer where necessary to:
- Fulfil an order
- Provide customer service
- Maintain business and accounting records
- Comply with tax or other legal obligations
- Deal with disputes
- Prevent fraud
- Establish, exercise or defend legal claims
When information is no longer required, we will securely delete it or anonymise it where appropriate.
10. Your data protection rights
Depending on the circumstances, you have rights under UK data protection law, including:
Right of access
You can request a copy of the personal information we hold about you.
Right to rectification
You can ask us to correct inaccurate or incomplete personal information.
Right to erasure
You can ask us to delete your personal information in certain circumstances.
This right is not absolute and we may need to retain certain information where we have a legal obligation or another lawful reason to do so.
Right to restrict processing
You can ask us to restrict how we use your personal information in certain circumstances.
Right to object
You can object to certain types of processing, including direct marketing.
Right to data portability
In certain circumstances, you can request your personal information in a structured, commonly used and machine-readable format and ask us to transfer it to another organisation.
Right to withdraw consent
Where we rely on your consent to process your information, you can withdraw your consent at any time.
You can withdraw marketing consent by using the unsubscribe option in our marketing emails or by contacting us.
These rights do not apply in every circumstance and may be subject to certain legal exemptions.
11. How to exercise your rights
If you would like to exercise any of your rights or ask a question about how we use your information, please contact:
Email: [email protected]
Please provide enough information to allow us to identify you and understand your request.
We will normally respond to a valid data protection request within one month, although this may be extended where permitted by law for complex or multiple requests.
12. Cookies
Our website uses cookies and similar technologies.
Cookies are small text files stored on your device that help websites function and remember certain information.
We may use cookies to:
- Keep items in your shopping basket
- Keep you signed in
- Remember your preferences
- Maintain website security
- Process transactions
- Understand how visitors use our website
- Improve website performance and functionality
Some cookies are strictly necessary for the operation of our website. Other cookies, such as certain analytics or marketing cookies, may require your consent.
Where consent is required, we will ask for your consent before placing non-essential cookies on your device.
You can manage your cookie preferences through our cookie settings or through your browser settings.
The ICO states that non-essential cookies generally require active consent and that users should be given a clear way to accept or reject them.
13. Third-party websites
Our website may contain links to third-party websites, including websites belonging to suppliers, affiliates, social media platforms and other organisations.
If you follow a link to another website, that website will have its own privacy policy and terms.
We are not responsible for the privacy practices or content of third-party websites.
We recommend that you read the privacy policy of any third-party website you visit.
14. Social media
We use social media platforms to communicate with customers and promote our products.
Our website and marketing communications may contain links or features connected to social media platforms.
If you interact with us through social media, the relevant platform may collect and process your personal information in accordance with its own privacy policy.
15. Children’s privacy
Our website is not specifically directed at children and we do not knowingly collect personal information from children for the purpose of marketing to them.
If you believe that a child has provided personal information to us without appropriate consent, please contact us at:
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal requirements.
Any changes will be published on this page and the “Last updated” date will be amended accordingly.
We recommend checking this page periodically for the latest version.
17. How to contact us
If you have any questions about this Privacy Policy, the personal information we hold about you, or how we process your information, please contact us:
Three Little Cubs Ltd
Email: [email protected]
18. Complaints
We hope that we can resolve any concerns you may have about how we use your personal information.
If you are unhappy with how we have handled your personal information, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority.
Information Commissioner’s Office (ICO)
Website: ICO website
You can contact the ICO through its website or by using the contact details published on the ICO website.
The ICO recommends that UK businesses tell individuals about their right to complain to the ICO.