Privacy policy
Who we are
Cockatoo is the trading name of Two Cockatoos Ltd, a company registered in England and Wales (company number 10383286). We are responsible for your personal information.
This policy explains what we collect when you shop on cockatooaccessories.com, sign up to our emails, contact us or visit our studio shop, and what we do with it.
Contact us about anything in this policy:
Email: info@cockatooaccessories.com
Phone: 01672 560 812
Post: Two Cockatoos Ltd, 2 The Street, Cherhill, Calne, Wiltshire SN11 8XP
What we collect
We only collect what we need to sell to you, deliver your order and look after you as a customer.
When you place an order: your name, email, phone, billing and delivery address, what you bought, and order and payment status. Card details are handled by our payment providers; we never see or store your full card number.
When you create an account: your name, email, password (stored securely by Shopify), saved addresses and order history.
When you sign up to our emails: your email address, when and where you signed up, and which emails you open or click.
When you contact us: your name, email, phone number and message, and our reply.
When you buy in our studio shop: what you bought and, if you give it, your email for a receipt.
When you use our website: your device and browser type, IP address, approximate location, pages viewed and how you arrived. Some of this comes from cookies (see Cookies).
We don’t collect special category information such as health, religion or ethnicity.
How we use it, and why we’re allowed to
UK data protection law says we need a lawful reason for each use.
Taking payment, delivering your order, and handling returns and refunds: contract (we need it to do what you asked).
Emailing you about your order or delivery: contract.
Answering your questions and complaints: legitimate interests (looking after our customers).
Keeping order and payment records for tax and accounts: legal obligation.
Preventing fraud and keeping the website secure: legitimate interests.
Sending you marketing emails: consent (you signed up, and you can unsubscribe at any time).
Analytics and advertising cookies: consent, through our cookie banner.
Understanding which products and pages work well, using essential and anonymous data: legitimate interests.
We don’t make decisions about you by automated means that have legal or similarly significant effects.
Marketing emails
We only send marketing emails if you have signed up, for example through our website pop-up or sign-up page.
If you signed up for a first-order discount, we send the code by email.
Every marketing email has an unsubscribe link. You can also email info@cockatooaccessories.com to be removed. Unsubscribing doesn’t affect emails about orders you have placed.
We never sell your details, and we don’t share them with other businesses for their own marketing.
Cookies
Cookies are small files stored on your device when you visit a website.
Essential cookies keep the website working, for example remembering your basket, your country and your cookie choices. These are always on.
Analytics cookies tell us how people use the site so we can improve it.
Marketing cookies let us and our advertising partners, such as Google and Meta, show you relevant adverts on other sites and measure how they perform.
We only use analytics and marketing cookies if you accept them in our cookie banner. You can change your choice at any time using the “Cookie preferences” link at the bottom of every page, or through your browser settings.
Who we share it with
We share only what each company needs to do its job for us. They may only use it on our instructions. Shopify, which runs our website, checkout and customer records.
Payment providers (Shopify Payments, PayPal, Shop Pay, Apple Pay and Google Pay), which take your payment and check for fraud.
Couriers (Royal Mail and DHL), which deliver your order and contact you about delivery.
Our email service, which sends order and marketing emails.
Google and Meta, for analytics and advertising, only if you accept those cookies.
Our accountants and professional advisers, who keep our accounts and give us advice.
We may also share information if the law requires it, for example with HMRC or the police, or if we sell or merge our business, in which case the new owner must treat it as this policy describes.
Sending information outside the UK
Some of the companies we use, such as Shopify, Google and Meta, store information outside the UK, including in Canada, the EU and the US. When they do, they use the legal safeguards UK law requires to keep it protected.
Contact us if you'd like more details.
How long we keep it
Orders, payments and refunds: 6 years after the end of the financial year, for tax and accounting law.
Customer account: until you ask us to close it, or 3 years after your last order.
Marketing email list: until you unsubscribe. We then keep your email on a suppression list so we don’t contact you again.
Messages and complaints: 3 years after we last hear from you.
Cookie and analytics data: as shown in our cookie banner, usually up to 2 years.
After that we delete it or make it anonymous.
How we keep it safe
Our website and checkout run on Shopify, which encrypts information sent between your browser and the site and meets the payment card industry’s security standard (PCI DSS). Only people who need your information to do their job can see it, and our accounts are protected by passwords and two-step sign-in.
If a data breach is likely to put you at risk, we will tell you and, where the law requires, the Information Commissioner’s Office.
Your rights
You have the right to get a copy of the personal information we hold about you; ask us to correct anything that is wrong or incomplete; ask us to delete your information, unless we have to keep it by law (for example order records); ask us to limit how we use it; object to us using it for our legitimate interests, and stop marketing at any time; ask for information you gave us in a format you can take to another company; and withdraw your consent at any time, where we rely on it.
To use any of these rights, email info@cockatooaccessories.com. It’s free, and we’ll reply within one month. We may ask you to confirm who you are first.
Complaints
If you’re unhappy with how we’ve used your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:
ico.org.uk or 0303 123 1113.
Children
Our website is not aimed at children under 13, and we don’t knowingly collect their information. If you think a child has given us their details, contact us and we’ll delete them.
Changes to this policy
We’ll update this policy when the way we use personal information changes. The date below shows when it was last updated.
Last updated: 28 September 2026