Privacy Policy

Last updated: September 2025

Who we are

Yoni Witch is the trading name of Kate Megeary, sole trader, based in the United Kingdom. For the purposes of UK data protection law (UK GDPR & Data Protection Act 2018), Kate Megeary is the data controller of your personal data.

📧 Contact: kate@yoniwitch.com
Fenten Gwel, Bolenowe Lane, Troon, Cornwall TR14 9HP

What data we collect

We may collect:

Identity & contact: name, email, phone, billing/delivery address.
Transaction: order details, payments (processed by Stripe – we don’t store full card data).
Usage & technical: IP address, device/browser info, pages visited (via cookies/analytics).
Marketing & communications: preferences, feedback, survey responses.

We do not knowingly collect data from children under 13.

Why we use your data (lawful bases)

To provide services & fulfil orders – Contract.
To process payments & prevent fraud – Contract / Legitimate interest.
To comply with tax/legal obligations – Legal obligation.
To send marketing with your consent (or soft opt-in for similar products) – Consent / Legitimate interest.
To analyse and improve our website – Consent (non-essential cookies/analytics).

Sharing your data

We share data only where necessary, with trusted processors:

Website & hosting/ Email marketing: (Squarespace)
Payments: (Stripe/ Others)

Some providers transfer data outside the UK/EEA (e.g. to the US). Where this happens, safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses are used.
We never sell your data.

Retention
- Orders/transactions: 6 years (legal/tax requirement).
- Customer enquiries: up to 2 years.
- Marketing data: until you unsubscribe or after 24 months of inactivity.
- Cookies/analytics: see our Cookie Policy.
  
  Your rights
  You have the right to:
  - Access your data.
  - Rectify inaccurate data.
  - Request erasure (“right to be forgotten”).
  - Restrict or object to processing.
  - Data portability.
  - Withdraw consent at any time.
  - Complain to the UK Information Commissioner’s Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, www.ico.org.uk
    
    Cookies
    We use essential cookies to make the site function. With your consent, we also use analytics cookies. See our Cookie Policy for details. You can change your cookie preferences at any time via the banner or your browser settings.

Security & breaches

We use appropriate technical and organisational measures to protect your data. If a data breach poses a risk to you, we will notify the ICO within 72 hours and inform you where legally required.