Personal purchases deserve thoughtful handling of personal information.
Who is responsible for your information?
MGC SUSSEX LTD, trading as Pearl Rabbit, is the controller of personal information used to operate this shop. Company number: 13212183. Registered office: C/O Brennan Herriott & Co, 1 Blatchington Road, Hove, East Sussex, United Kingdom, BN3 3YP. Email [email protected] for privacy questions or requests.
What we collect and why
| Information | Purpose and lawful basis |
|---|---|
| Name, billing and delivery address, email, phone where supplied, items ordered and order correspondence. | Taking payment, fulfilling orders, arranging delivery and handling returns. Necessary to perform our contract with you or take steps at your request before a contract. |
| Payment status, transaction references, invoices and accounting records. | Payment reconciliation, tax and accounting obligations. Contract and legal obligations. |
| Messages you send us and records of a complaint or support request. | Answering your enquiry, resolving problems and keeping an appropriate record. Contract where the enquiry concerns an order; legitimate interests in providing customer support and handling disputes otherwise. |
| IP address, browser/device information and security or server logs. | Operating the website, diagnosing problems, preventing fraud and protecting accounts. Legitimate interests in a secure, reliable shop. |
| Login details and account records, if you have an account. | Providing the account service and securing access. Contract and legitimate interests in security. |
We obtain information directly from you, through your use of the website, and from payment, delivery and fulfilment providers when they update an order. Required checkout fields are identified when you order. Without the information needed for payment and delivery, we cannot fulfil the order. Guest checkout is available; you do not need an account to buy.
Who receives information?
We share the information needed for their work with payment providers selected at checkout, our fulfilment supplier and delivery carriers, website hosting and security services, email services and professional advisers. The shop runs on WordPress and WooCommerce. Supplier fulfilment uses the Net1on1 / 1on1Wholesale integration; it sends order and delivery details needed to process a shipment. Stripe or PayPal may process payment information when that payment option is offered and selected. Payment providers also use information under their own privacy notices.
We may disclose information where required by law or where necessary to establish, exercise or defend legal claims. We do not need you to send full payment-card details to our customer-service inbox.
Keep sensitive information out of enquiries
Only send what is needed to explain the product or order issue. Please avoid medical histories, intimate photographs and other unnecessary sensitive information. Buying an item does not require you to tell us about your sex life or health. Contact us first if you believe sensitive information is necessary to resolve a matter.
How long information is kept
Retention depends on the reason for keeping the record, rather than a single period for every item of data. We consider whether an order, return or complaint is still open; applicable tax and accounting record requirements; the time during which a legal claim may arise; and whether the information remains necessary for security or support. Information should be deleted or anonymised when those reasons no longer apply. Contact us for the retention criteria relevant to your record or to request erasure; some records may need to be retained to meet legal obligations or deal with a claim.
International services
UK-only delivery does not mean every technology provider processes information only in the UK. Payment and technology services may use international infrastructure. Where we make a restricted transfer, an applicable adequacy regulation or appropriate safeguards, such as approved contractual protections, are required. You can ask us about the providers, destinations and safeguards relevant to your information.
Your rights and choices
Depending on the circumstances, you can request access, correction, erasure, restriction or portability of personal information. You can object to processing based on legitimate interests and to direct marketing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. These rights have legal exceptions; we will explain if one applies and may need proportionate information to verify your identity.
Email [email protected]. You can also complain to the Information Commissioner’s Office. Our cookie information explains browser storage. We will update this notice when our use of information changes.
Updated 9 October 2026.