Privacy policy
Plush Hours
Last updated: May 25, 2026
We Plush Hours, operate this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services").
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
1. Personal Information We Collect
When we use the term "personal information," we mean information that identifies or can reasonably be linked to you or another person. This does not include anonymised or de-identified data. We may collect or process the following categories, depending on how you interact with the Services and applicable law:
• Contact details — name, billing address, shipping address, phone number, and email address.
• Financial information — credit/debit card numbers, payment card details, transaction information, and payment confirmations.
• Account information — username, password, security questions, preferences, and settings.
• Transaction information — items viewed, added to cart or wishlist, purchased, returned, exchanged, or cancelled, and your transaction history.
• Communications — information you include when contacting us, such as customer support inquiries.
• Device information — device type, browser, network connection, IP address, and other unique identifiers.
• Usage information — how and when you interact with or navigate the Services.
2. How We Collect Personal Information
We may collect personal information from the following sources:
• Directly from you — when you create an account, visit or use the Services, communicate with us, or otherwise provide information.
• Automatically through the Services — from your device when you use our products or visit our website, including through cookies and similar technologies.
• From service providers — when they collect or process your personal information on our behalf.
• From partners or other third parties — in accordance with their own privacy policies and applicable law.
3. Legal Basis for Processing (EU/UK Customers)
If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal information on the following legal bases under the General Data Protection Regulation (GDPR) and UK GDPR:
• Performance of a contract (Art. 6(1)(b) GDPR) — to process your orders, manage your account, arrange delivery, and handle returns or exchanges.
• Legitimate interests (Art. 6(1)(f) GDPR) — to improve the Services, prevent fraud, ensure security, and maintain our business relationship with you, where our interests are not overridden by your rights.
• Consent (Art. 6(1)(a) GDPR) — for marketing communications and non-essential cookies, where you have provided your explicit consent. You may withdraw your consent at any time.
• Compliance with a legal obligation (Art. 6(1)(c) GDPR) — to comply with applicable law, respond to lawful requests, or enforce our policies.
4. How We Use Your Personal Information
Providing, Tailoring, and Improving the Services
We use your personal information to fulfil orders, process payments, manage your account, arrange shipping, handle returns and exchanges, and personalise your shopping experience, including product recommendations. This processing is necessary for the performance of our contract with you.
Marketing and Advertising
With your consent (where required), we use your personal information for marketing and promotional communications by email, text message, or post, and to show you personalised advertisements on the Services or third-party websites based on your activity. You may opt out at any time (see Section 9).
Security and Fraud Prevention
We use your personal information to authenticate your account, detect and investigate fraudulent or malicious activity, and secure our Services. This is based on our legitimate interest in protecting our platform and customers.
Communicating with You
We use your personal information to respond to your enquiries, provide customer support, and maintain our business relationship with you.
Legal Compliance
We use your personal information to comply with applicable law, respond to valid legal process including requests from law enforcement, and enforce or investigate potential violations of our terms or policies.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on the Services. These may include:
• Essential cookies — necessary for the Services to function (e.g. shopping cart, account login). These do not require your consent.
• Analytics cookies — help us understand how visitors interact with the Services (e.g. Google Analytics). Enabled only with your consent.
• Marketing/advertising cookies — used to show you personalised advertisements. Enabled only with your consent.
When you first visit the Services, you will be presented with a cookie consent banner. You can update your cookie preferences at any time via the cookie settings link in the website footer. To learn more about our use of cookies, please refer to our Cookie Preferences on the website.
6. How We Disclose Personal Information
We may disclose your personal information to third parties in the following circumstances:
• Service providers — Shopify and other vendors who perform services on our behalf, including IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and shipping.
• Business and marketing partners — to provide personalised advertising based on your online activity. Our partners will use your information in accordance with their own privacy notices. You have the right to opt out of this sharing (see Section 9).
• With your consent — for example, when using social media integrations or login widgets.
• Corporate affiliates — within our corporate group for internal business purposes.
• Business transactions — in connection with a merger, acquisition, or bankruptcy.
• Legal obligations — to comply with applicable law, subpoenas, search warrants, or similar legal requests, and to protect our rights or the rights of others.
7. Relationship with Shopify
The Services are hosted by Shopify, which processes personal information about your use of the Services to provide and improve them. Data you submit may be transmitted to and shared with Shopify and third parties that may be located in countries other than where you reside.
Where Shopify processes your personal information in connection with its enhanced features (using data from interactions across multiple merchants), Shopify acts as the data controller for those purposes and is responsible for responding to your related rights requests.
To learn more about how Shopify uses your personal information and to exercise your rights in that context, please visit the Shopify Consumer Privacy Policy and the
8. Third-Party Websites and Links
The Services may contain links to third-party websites or platforms. We are not responsible for the privacy or security practices of those sites. We recommend reviewing their privacy policies before providing any personal information. Our inclusion of such links does not imply endorsement.
9. Your Rights and Choices
Depending on where you reside, you may have the following rights regarding your personal information. These rights may not be absolute and may be subject to legal limitations.
• Right to Access / Know — request access to the personal information we hold about you.
• Right to Delete — request that we delete your personal information.
• Right to Correct — request that we correct inaccurate information.
• Right to Data Portability — receive a copy of your personal information in a structured, machine-readable format.
• Right to Opt Out of Sale or Targeted Advertising — you may opt out of the sale or sharing of your personal information for targeted advertising purposes via our website preference centre.
• Managing Communication Preferences — opt out of marketing emails at any time using the unsubscribe link in our emails. We may still send transactional emails (e.g. order confirmations).
If you reside in the EEA or UK, you additionally have the following rights:
• Right to Object — object to our processing of your personal information for certain purposes, including direct marketing.
• Right to Restrict Processing — request that we restrict processing of your personal information in certain circumstances.
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint — you have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en. UK residents may contact the Information Commissioner's Office (ICO) at www.ico.org.uk.
Global Privacy Control: If you visit our website with the Global Privacy Control (GPC) signal enabled, we will treat this as a request to opt out of the sale or sharing of your personal information for the device and browser used. To learn more, visit
globalprivacycontrol.org. We do not recognise other Do Not Track signals.
To exercise any of the above rights, please contact us at the details provided in Section 13. We may need to verify your identity before processing your request. You may also designate an authorised agent to act on your behalf, subject to proof of authorisation. We will not discriminate against you for exercising your rights.
10. Children's Data
The Services are not directed at children under the age of majority in your jurisdiction. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request its deletion. As of the effective date of this Privacy Policy, we do not knowingly share personal information of individuals under 18 years of age.
11. Security and Retention
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. However, no security measure is completely impenetrable. We recommend using secure channels when communicating sensitive information.
We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, including:
• Account data — for as long as your account remains active, plus a reasonable period thereafter.
• Transaction and financial data — for up to 7 years to comply with applicable tax and accounting obligations.
• Marketing data — until you withdraw consent or opt out.
• Legal and compliance data — for as long as required by applicable law or to resolve disputes.
Once personal information is no longer required, we will securely delete or anonymise it.
12. International Transfers
Your personal information may be transferred to, stored in, and processed in countries outside of the country in which you reside, including countries that may not provide the same level of data protection as your home country.
Where we transfer personal information from the EEA or the United Kingdom to a third country, we will rely on appropriate safeguards, including:
• Standard Contractual Clauses (SCCs) approved by the European Commission; or
• UK International Data Transfer Agreements (IDTAs) or UK Addenda to SCCs, as applicable; or
• Transfers to countries that have been recognised as providing an adequate level of protection.
13. Complaints
If you have a complaint about how we handle your personal information, please contact us using the details in Section 14. We will respond to your complaint within one month (or as required by applicable law). If you are not satisfied with our response, or if you reside in the EEA or UK, you have the right to escalate your complaint to your local data protection authority.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this website and update the "Last updated" date.
15. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have a complaint about our data practices, please contact us:
• Email: support@plushhours.com
• For the purposes of applicable data protection law, Plush Hours is the data controller of your personal information.
EU/UK residents: If you believe we have not adequately addressed your request, you have the right to contact your national data protection authority. For the EEA, visit https://edpb.europa.eu. For the UK, visit https://ico.org.uk.
This policy does not affect any legal rights you may have under applicable local law.