Privacy policy

Last updated: 19th July 2026

Who we are

PUFF STUDIOS LIMITED, trading as PUFF, is responsible for your personal information.

Registered address: 779 Atherton Road, Hindley Green, Wigan, WN2 4SB Company number: 16317679, registered in England and Wales VAT number: GB 048160132 Email: info@puffstudios.co.uk ICO registration: [NUMBER]

What we collect

When you order: name, email, billing and delivery address, phone number, order details.

When you pay: payment is handled by Shopify Payments. We never see or store your full card number, only a confirmation and the last four digits.

When you join La Familia or subscribe: your email address.

When you take the Aura Test: your answers, your result, and your email if you give it.

When you contact us: whatever you tell us.

When you browse: IP address, device and browser type, pages viewed, referring site.

Why we use it

Marketing

We only email you if you've asked us to, or if you've bought from us and we're telling you about something similar. Every email has an unsubscribe link. One click and you're off the list.

Who we share it with

Only the services that let us run the shop:

• Shopify hosts the store, processes orders, and sends our marketing emails

• Shopify Payments and PayPal payments

• Delivery couriers they need your name, address and phone number to deliver your order

• Tally  the Aura Test

• Google and Meta website analytics and advertising, only if you accept cookies

• Our professional advisers accounting and tax

We never sell your personal information. We may disclose it where the law requires, or to defend legal claims.

Our relationship with Shopify

Our store is hosted by Shopify, which collects and processes personal information about your use of the site in order to provide and improve the service. Some of this information is also shared with Shopify for its own purposes, including improving its platform and supporting personalised advertising. Where Shopify processes your information for its own purposes, Shopify is responsible for that processing and for responding to requests about it. You can read the Shopify Consumer Privacy Policy at privacy.shopify.com.

Links to other sites

Our site may link to websites we don't control. If you follow one, that site's own privacy policy applies. We're not responsible for their content or their handling of your information.

International transfers

Some of these providers are based outside the UK, mainly in the US and Canada. When your information goes abroad we rely on UK adequacy regulations or the International Data Transfer Agreement, so it stays protected to UK standards.

How long we keep it

• Orders and transactions: 6 years after the relevant tax year

• Marketing contacts: until you unsubscribe, or 3 years of no engagement

• Customer emails: 2 years

• Aura Test results: 2 years, or until you ask us to delete them

• Analytics: up to 26 months

Cookies

Cookies are small files placed on your device when you visit a site. They're how your basket remembers what's in it.

Strictly necessary — these make the site work: your basket, your login, secure checkout. The site can't run without them, so they don't need your consent.

Analytics — these show us how people find and use the site. Only set if you agree.

Marketing — these let us show you relevant ads elsewhere and measure whether they worked. Only set if you agree.

When you first visit you'll see a banner letting you accept or reject the non-essential ones. You can change your mind at any time through the cookie settings link in our footer. You can also block cookies in your browser, though blocking essential ones will break parts of the site.

Some cookies are set by Shopify, Google and Meta. Their own privacy policies cover how they use that data.

Your rights

You can ask us to:

• give you a copy of what we hold

• correct anything wrong

• delete it, where we have no reason to keep it

• restrict how we use it

• stop using it, including for marketing, at any time

• send it to you in a portable format

• withdraw consent, where consent is what we rely on

Email info@puffstudios.co.uk. We'll respond within one month, free of charge. We may ask you to confirm who you are first.

Unhappy with how we've handled it? Complaint to the Information Commissioner's Office at ico.org.uk or 0303 123 1113. We'd rather you gave us the chance to fix it first.

Security

The whole site runs over an encrypted connection, and access to your information is restricted. No transmission over the internet is completely secure, but we take this seriously.

Changes

We may update this policy. The date at the top tells you when it last changed.