Privacy Policy
How we look after the personal information you share with us.
Last updated: 21 October 2026
1. Who we are
Southwish is a brand of Earlybird Designs Ltd, a company registered in England and Wales under company number 4829678, with its registered office at C/O Outrise, 76 Canterbury Innovation Centre, University Road, Canterbury, CT2 7FG, United Kingdom. Our VAT number is GB 835 7934 88.
Earlybird Designs Ltd is the data controller for personal data collected through https://southwish.com (the “website”). If you have any questions about this policy or your data, please email us at [email protected].
We process personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (“PECR”).
2. The information we collect
Our website is a catalogue. We do not offer online payments, user accounts or a checkout, so we collect very little information.
Information you give us
- Request and contact forms: your name, email address, phone number (optional), the items or categories you are interested in, the occasion (optional) and your message.
- Emails and order correspondence: anything you send us by email, and — if you go on to place an order — your delivery address and the details needed to process and record your payment.
Information collected automatically
- Technical data: like all websites, our hosting server records standard log information such as your IP address, browser type and the pages requested. This is used only to keep the website secure and working.
- Essential cookies: a session cookie that helps protect our forms from spam. See our Cookie Policy.
We do not use analytics, advertising or tracking cookies, and we do not knowingly collect information from children under 13.
3. How and why we use your information
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Replying to your request, checking availability and sending you a quote and payment details | Steps taken at your request before entering into a contract (Art. 6(1)(b)) and our legitimate interest in answering enquiries (Art. 6(1)(f)) |
| Processing, packing and delivering an order you have paid for | Performance of a contract (Art. 6(1)(b)) |
| Keeping accounting and tax records | Compliance with a legal obligation (Art. 6(1)(c)) |
| Keeping the website secure and preventing spam or misuse | Legitimate interests (Art. 6(1)(f)) |
| Handling complaints, cancellations and legal claims | Legal obligation and legitimate interests (Art. 6(1)(c) and (f)) |
We will never sell your data, and we will not send you marketing emails unless you have specifically asked us to.
4. Who we share your information with
We only share personal data where necessary, with:
- our website hosting and email providers, who store data on our behalf;
- delivery and postal services, so that your order can reach you;
- our bank or payment provider, when you pay for an order;
- our accountants and professional advisers;
- public authorities such as HMRC, where we are legally required to.
Our website loads fonts from Google Fonts. When a page loads, your browser connects to Google’s servers, which receive your IP address. Google is based in the United States; such transfers rely on the UK Extension to the EU–US Data Privacy Framework or other appropriate safeguards recognised under UK law.
All our service providers are required to keep your information secure and to use it only on our instructions.
5. How long we keep your information
- Requests that do not lead to an order: up to 12 months after our last contact, then deleted.
- Orders and payment records: six years from the end of the financial year in which the order was placed, as required by UK tax law.
- Server logs: normally no longer than 30 days.
6. How we protect your information
Our website uses an encrypted (HTTPS) connection. Access to your information is limited to the people who need it to deal with your request or order, and we use reputable providers with appropriate security measures. No method of transmission over the internet is entirely secure, but we take reasonable steps to protect your data.
7. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to processing based on our legitimate interests;
- receive your data in a portable format, where applicable;
- withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, email [email protected]. We will respond within one month. There is usually no charge.
8. Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
9. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown at the top.