Privacy Policy

Effective date: 15 July 2026

This Privacy Policy explains how 5C Designs Ltd, trading as Daisy & Bee (“we”, “us” or “our”), collects, uses and protects personal data when you:

• visit our website; 
• purchase products from us; 
• register as a personal customer, trade customer or stockist; 
• apply for or access our Stockist & Trade Area; 
• enquire about becoming a stockist or trade customer; 
• meet us at a trade exhibition or provide your business contact details to us; 
• subscribe to our newsletters or other marketing communications. 

5C Designs Ltd is registered with the Information Commissioner’s Office as a data controller. ICO registration number: ZC161015

1. Information we collect

We may collect personal information that you provide to us, including:

• your name; 
• email address; 
• telephone number; 
• billing address; 
• delivery address; 
• business or trading name; 
• business address; 
• VAT number, where applicable; 
• account registration details, including whether you register as a personal customer, trade customer or stockist; 
• trade-account application details; 
• order and purchasing history; 
• enquiry details; 
• records of correspondence and customer-support communications; 
• information provided when you meet us at a trade exhibition, request a catalogue or ask us to contact you.

We may also collect information automatically when you use our website, including:

• your IP address; 
• browser type; 
• device information; 
• pages visited; 
• website activity recorded through cookies, analytics or similar technologies. 

Where you receive marketing emails from us, we may also collect limited information about your interaction with those emails, as explained in section 3.

2. How we use your information

We may use your personal data to:

• process, fulfil and deliver orders; 
• manage personal customer accounts; 
• assess and administer trade-customer and stockist applications; 
• manage access to our Stockist & Trade Area; 
• provide wholesale prices, catalogues and ordering information; 
• respond to enquiries and provide customer support; 
• manage our relationships with existing customers and stockists; 
• communicate with prospective trade customers and stockists; 
• send relevant product launches, catalogues, trade news, exhibition invitations and other marketing communications where permitted; 
• improve our website, products, services and communications; 
• maintain business, accounting and transaction records; 
• comply with legal, tax and regulatory obligations; 
• prevent fraud, misuse or unauthorised access. 

If you contact us about becoming a stockist, meet us at a trade exhibition, request wholesale information or provide your business details for follow-up, we may retain those details so that we can respond, administer any future trade relationship and send relevant communications where permitted by law.

3. Email marketing and email activity

We use MailerLite to manage and send newsletters, product updates, trade communications, catalogue announcements and other marketing emails.

Depending on the tracking settings used for a particular campaign, MailerLite may record information such as:

• whether an email appears to have been opened; 
• whether a link in an email has been selected; 
• the date and time of an interaction; 
• the device, browser or email application used, where available; 
• approximate location or IP-derived information, where available; 
• campaign delivery, bounce and unsubscribe information.

We may use this information to:

• understand which products, ranges and communications are most relevant to our personal customers, trade customers and prospective stockists; 
• assess the effectiveness of our communications; 
• improve the content and timing of future emails; 
• reduce irrelevant communications; 
• identify technical delivery problems; 
• understand interest in our website, catalogue and Stockist & Trade Area. 

Open-rate data is not always accurate. Some email providers may automatically load or block tracking technologies, meaning an email may be recorded as opened even where the recipient has not actively read it. MailerLite also explains that Apple Mail Privacy Protection may preload tracking pixels and inflate reported open rates. 

Where consent is required for a particular email-tracking technology, we will seek that consent or disable the relevant tracking. The ICO states that tracking pixels may be subject to PECR’s rules on storage and access technologies, separately from the rules governing the marketing email itself. 

You can unsubscribe from marketing communications at any time by selecting the unsubscribe link in an email or contacting us directly.

We may retain limited suppression information after an unsubscribe request so that we can ensure you are not accidentally added to future marketing campaigns.

4. Marketing to personal and trade contacts

We send marketing communications only where we have an appropriate basis to do so.

For personal customers, sole traders and certain partnerships, we will normally require consent or rely on the existing-customer soft opt-in where all relevant legal requirements are satisfied.

For limited companies, limited liability partnerships and other corporate subscribers, relevant business-to-business marketing may be sent without prior consent where permitted by law. We will always identify ourselves and provide a straightforward way to opt out.

The ICO distinguishes corporate subscribers from individual subscribers and explains that sole traders and some partnerships are treated similarly to individual customers for electronic-marketing purposes. 

We do not treat an event-organiser attendee list or a publicly available email address as automatic permission to send marketing. We consider the source of the details, the type of recipient and what the person was told when their information was collected.

5. Legal bases for processing

Depending on the circumstances, we process personal data because:

• it is necessary to perform a contract with you or take steps at your request before entering into a contract; 
• we must comply with a legal obligation; 
• it supports our legitimate interests in operating, administering and improving our business, provided those interests are not overridden by your rights; 
• you have given consent; 
• another lawful basis applies.

Where PECR requires consent for an electronic-marketing activity or tracking technology, relying on legitimate interests under UK GDPR does not remove that consent requirement. 

6. Sharing your information

We do not sell your personal data.

We may share relevant information with trusted providers where necessary, including:

• payment processors; 
• delivery and fulfilment providers; 
• website hosting and ecommerce providers; 
• email-marketing providers, including MailerLite; 
• IT and technical-support providers; 
• accountants, insurers, legal advisers and other professional advisers; 
• government, tax, regulatory or law-enforcement bodies where required. 

These providers may process information only for the services they provide to us and subject to appropriate contractual or legal safeguards.

7. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy or where required by law.

This may include retaining:

• order, payment and accounting records for legally required periods; 
• personal customer-account information while the account remains active; 
• trade-account and stockist information for the duration of the business relationship and a reasonable period afterwards; 
• trade enquiries and exhibition-contact details while there remains a reasonable business reason to follow up; 
• marketing records until you unsubscribe, object or ask us to delete them; 
• suppression information where needed to respect an unsubscribe or objection. 

Retention periods may vary according to the type of information and the reason it is held.

8. Your data-protection rights

Depending on the circumstances, you may have the right to:

• request access to your personal data; 
• ask us to correct inaccurate or incomplete information; 
• ask us to delete your personal data; 
• ask us to restrict processing; 
• object to processing, including direct marketing; 
• withdraw consent where we rely on consent; 
• request data portability where applicable; 
• complain to the Information Commissioner’s Office. 

You have an absolute right to object to the use of your personal data for direct marketing.

To exercise your rights, contact: hello@daisyandbee.co.uk

We may need to verify your identity before completing a request.

9. Security

We take reasonable technical and organisational measures to protect personal data against:

• accidental loss; 
• misuse; 
• unauthorised access; 
• disclosure; 
• alteration; 
• destruction. 

No online system can be guaranteed to be completely secure, but we review our arrangements and take proportionate steps to protect the information we hold.

10. Cookies and similar technologies

Our website may use cookies and similar technologies to:

• operate essential website functions; 
• remember preferences; 
• manage accounts and shopping features; 
• understand how the website is used; 
• assess website performance; 
• improve customer experience. 

Where required, we will ask for consent before placing non-essential cookies or using similar technologies.

Please see our Cookie Policy for further information.

11. International transfers

Some of our service providers may process personal data outside the United Kingdom.

Where this occurs, we use appropriate safeguards as required by UK data-protection law. These may include adequacy regulations, approved contractual protections or other legally recognised transfer mechanisms.

12. Third-party links

Our website and emails may contain links to third-party websites or services.

We are not responsible for the privacy practices of those third parties. We recommend reviewing their privacy information before providing personal data.

13. Complaints

Please contact us first if you have concerns about how we use your personal data so that we have an opportunity to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office.

14. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, technology or legal responsibilities.

The latest version will be published on our website with the revised effective date.

15. Contact us:

5C Designs Ltd
Trading as Daisy & Bee
33–35 Exchange Street
Driffield
East Riding of Yorkshire
YO25 6LL

Email: hello@daisyandbee.co.uk