Privacy policy
Last updated: 10 August 2026
Yousuf Chaudhry, trading as Plenistry ("Plenistry", "we", "us" or "our"), operates this store and website, including the related information, content, features, tools, products and services offered through it (the "Services").
Our store is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit our website, use our Services, make a purchase or otherwise communicate with us.
Please read this Privacy Policy carefully so that you understand how your personal information is handled.
Personal Information We Collect
When we use the term "personal information", we mean information that identifies you or can reasonably be linked to you.
Depending on how you interact with Plenistry, we may collect or process the following categories of personal information:
- Contact information, including your name, billing address, shipping address, telephone number and email address.
- Payment and transaction information, including payment method, payment confirmation and details relating to purchases, returns, exchanges or cancellations. Payment card information may be processed by Shopify and our payment providers rather than being stored directly by Plenistry.
- Account information, where applicable, including account details, preferences and settings.
- Order information, including products you view, place in your basket, purchase, return or cancel.
- Communications, including information you provide when contacting us about an order, product or customer-service enquiry.
- Device information, including information about your device, browser, network connection, IP address and other online identifiers.
- Usage information, including information about how and when you access, browse and interact with our website.
Your existing policy already covers substantially the same categories of information.
How We Collect Your Personal Information
We may collect personal information:
- Directly from you, for example when you place an order, create an account, sign up for marketing, contact us or otherwise provide information to us.
- Automatically, when you visit or interact with our website, including through cookies and similar technologies.
- From service providers, including Shopify, payment processors, delivery providers and technology providers that help us operate our business.
- From business, advertising or marketing partners and other third parties, where permitted by applicable law.
This reflects the sources already identified in our existing Shopify privacy notice.
How We Use Your Personal Information
Depending on how you interact with Plenistry, we may use your personal information to:
Provide and fulfil our Services
We may use your information to:
- process and fulfil orders;
- process payments;
- arrange delivery;
- process returns and refunds;
- manage customer accounts;
- provide information relating to your order;
- provide customer support; and
- otherwise perform our contract with you.
Communicate with you
We may use your contact information to respond to questions, enquiries, complaints or requests and to provide customer service.
Marketing and advertising
Where permitted by law, we may use personal information to send marketing and promotional communications, including emails about Plenistry products, launches, offers and other updates.
You can unsubscribe from promotional emails at any time by using the unsubscribe link included in our marketing emails.
Unsubscribing from marketing does not prevent us from sending necessary non-marketing communications, such as information about an order you have placed.
Improve Plenistry
We may use information about how customers interact with our website to understand how our Services are used, improve our website and customer experience, and develop our products and services.
Security and fraud prevention
We may process information where necessary to detect, investigate and prevent fraudulent, malicious or unlawful activity and to protect Plenistry, our customers and our Services.
Legal obligations
We may process and retain personal information where necessary to comply with applicable legal, regulatory, accounting or tax requirements.
These purposes are consistent with those described in the policy currently on your website.
Our Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for processing your personal information.
Depending on the circumstances, we may rely on:
Contract — where processing your personal information is necessary to enter into or perform our contract with you, including processing orders, taking payment, arranging delivery and managing returns.
Legal obligation — where we need to process or retain information to comply with a legal requirement, including applicable tax, accounting and consumer-protection obligations.
Legitimate interests — where processing is necessary for our legitimate business interests, such as operating and improving Plenistry, providing customer support, protecting our website and preventing fraud, provided those interests are not overridden by your rights and interests.
Consent — where you have given us permission to process your information for a particular purpose, including where consent is required for certain marketing communications or cookies. Where we rely on consent, you can withdraw it at any time.
Cookies and Similar Technologies
We and our service providers may use cookies and similar technologies to operate our website, remember preferences, understand how customers use our Services and, where applicable and permitted, support advertising and marketing.
Where consent is required by law for non-essential cookies or similar technologies, we will seek your consent before using them.
You can manage applicable cookie choices through the cookie controls available on our website.
How We Disclose Personal Information
We may disclose personal information where reasonably necessary to operate Plenistry, including:
- Shopify, which hosts and powers our online store.
- Payment providers that process transactions.
- Delivery and fulfilment providers that enable us to deliver orders.
- IT, hosting, analytics and customer-service providers that support our business.
- Marketing and advertising partners, where applicable and permitted by law.
- Professional advisers or authorities where necessary to comply with applicable law, enforce our rights or protect Plenistry and our customers.
- A purchaser or successor where our business or assets are involved in a legitimate business transaction.
We may also disclose information where you specifically request, direct or consent to us doing so.
Your existing Shopify policy similarly provides for disclosure to Shopify, vendors, payment processors, shipping providers and marketing partners.
Our Relationship With Shopify
Our online store is hosted by Shopify.
Shopify collects and processes certain personal information about your access to and use of our Services in order to provide and improve its services.
Information submitted through our store may therefore be transmitted to Shopify and other service providers, including providers located outside the United Kingdom.
Shopify may also process information obtained through your interactions with our store in connection with certain Shopify services and features.
For more information about how Shopify processes personal information, please refer to Shopify's Consumer Privacy Policy and privacy controls.
Your existing policy provides additional information about Shopify's role in processing information.
Third-Party Websites
Our website may contain links to websites, social-media platforms or other services operated by third parties.
We are not responsible for the privacy or security practices of third-party websites that we do not control.
If you follow a link to another website, we recommend reviewing that organisation's privacy policy before providing personal information.
Children's Privacy
Our Services are not intended for children, and we do not knowingly collect personal information from children for the purpose of selling our products to them.
If you believe that a child has provided personal information to us inappropriately, please contact us so that we can investigate and, where appropriate, delete that information.
Security
We take reasonable organisational and technical measures to protect the personal information we process.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
Please avoid sending sensitive or confidential information to us through unsecured communication channels.
How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:
- fulfil and administer orders;
- maintain appropriate business and financial records;
- comply with legal, accounting and tax obligations;
- resolve disputes;
- prevent fraud; and
- enforce our agreements and policies.
The exact retention period may therefore vary depending on the type of information and the reason we hold it.
Your previous policy also explains that retention depends on factors including providing Services, legal obligations and resolving disputes.
Your Data Protection Rights
Under UK data protection law, depending on the circumstances, you may have rights relating to your personal information, including:
- Right of access — to request a copy of personal information we hold about you.
- Right to rectification — to ask us to correct inaccurate or incomplete personal information.
- Right to erasure — to ask us to delete personal information in certain circumstances.
- Right to restriction — to ask us to restrict how we use your personal information in certain circumstances.
- Right to object — to object to certain processing of your personal information.
- Right to data portability — in certain circumstances, to receive personal information in a portable format or ask us to transfer it to another organisation.
- Right to withdraw consent — where we rely on consent, you can withdraw your consent at any time.
These rights are not absolute and may not apply in every circumstance.
We may need to verify your identity before fulfilling a request.
To exercise your rights, contact us at hello@plenistry.com.
Your existing policy already identifies rights including access, deletion, correction, portability, objection, restriction and withdrawal of consent.
Marketing Communications
You can opt out of receiving marketing emails from Plenistry at any time by selecting the unsubscribe link in our emails.
If you unsubscribe from marketing, we may continue to contact you where necessary regarding an order, account, customer-service request or other non-promotional matter.
International Transfers
Some of our service providers, including Shopify and other technology providers, may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, appropriate safeguards will be used where required by applicable data protection law.
These may include transfers to countries recognised as providing adequate protection or the use of approved contractual safeguards.
Your existing policy already provides for international transfers and appropriate transfer mechanisms.
Complaints
If you have concerns about how Plenistry handles your personal information, please contact us at hello@plenistry.com so that we can try to resolve the issue.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Information Commissioner's Office
If you live outside the UK, you may also have the right to contact the relevant data protection authority in your jurisdiction.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, Services, legal requirements or privacy practices.
When we make changes, we will publish the revised Privacy Policy on this website and update the "Last updated" date at the top of the page.
Contact Us
If you have any questions about this Privacy Policy, how we handle your personal information, or if you would like to exercise your data protection rights, please contact us:
Yousuf Chaudhry, trading as Plenistry
Email: hello@plenistry.com
Business correspondence address:
122 Queensway
Bletchley
Milton Keynes
MK2 2RU
United Kingdom
For the purposes of applicable data protection law, Yousuf Chaudhry, trading as Plenistry, is the data controller of your personal information.