Who we are

This website is operated by Morag and Hamish.

Morag and Hamish sell books and related products such as stationary and gift products.

The business owner is responsible for data protection matters.

What personal information we collect

We may collect the following information when you use our website.

Contact from enquiries

If you contact us through the website, we may collect:

• your name
• your email address
• the message you send us

We use this information to respond to your enquiry.

Newsletter sign-ups

If you sign up to our newsletter, we collect:

• your email address

We use MailPoet to manage newsletter subscriptions and send marketing emails. Newsletter sign-up is optional.

Orders and checkout

When you place an order through our online shop, we may collect:

• your name
• billing address
• shipping address
• email address
• phone number
• order details
• payment confirmation information
• and information you provide for a signed or personalised book message

We use this information to process, fulfil, and manage your order.

We do not store your full card details on this website. Payments are handled by third-party payment providers such as WooPayments and PayPal.

Customer accounts

If you create an account on the website, we may collect and store information linked to your account, such as:

• name
• email address
• billing and shipping details
• ordr history
• account login details

You can request deletion of your account, although we may need to keep some order records for tax, accounting, legal, or fraud-prevention purposes.

Security information

For website security, we may collect technical information such as:

• IP address
• browser and device information
• login attempts
• activity that may indicate spam, fraud, or security threats

We use Wordfence to help protect the website from malicious activity.

How we use your personal information

We use your personal information for the following purposes:

Purpose	Personal information used	Lawful basis
Responding to enquiries	Name, email address, message	Legitimate interests
Sending newsletters	Email address	Consent
Processing orders	Name, address, email, phone number, order details	Contract
Taking payment	Payment and order information	Contract
Shipping products	Name, delivery address, order details	Contract
Keeping tax and accounting records	Order, invoice and payment records	Legal obligation
Managing customer accounts	Account detials and order history	Contact/legitimate interests
Website security and fraud prevention	IP address, login activity, technical data	Legitimate interests
Signed or personalised book requests	Name/message supplied for signing	Contract

Newsletter and marketing emails

You will only recieve marketing emails from us if you choose to subscribe.

Newsletter sign-up may be offered through the website footer or during checkout, but it is optional.

We use MailPoet to manage newsletter subscriptions. You may need to confirm your subscription by email before receiving newsletters.

You can unsubscribe at any time by clicking the unsubscribe link in any newsletter email. You can also contact us at:

mail@moragandhamish.com

Orders, payments and delivery

Our onlien shop uses WooCommerce.

When you place an order, we use your information to:

• process the order
• take payment
• send order confirmations
• prepare and dispatch the product
• deal with refunds, or customer service queries
• keep appropriate accounting records

Payments may be processes by WooPayments and/or PayPal. These providers process payment information securely. We do not store your full card deatils on our website.

Orders are shipped using Royal Mail. We share only the information needed to deliever your order, such as your name and delivery address.

Signed or personalised books

If you request a book to be signed or personalised, we may collect the name or message you provide for that purpose.

Please do not include sensitive personal information in personalisation requests.

We use this information only to complete your order.

Cookies and similar technologies

Our website may use cookies that are necessary for the website and shop to function. For example, WooCommerce may use cookies to manage baskets, checkout, and customer sessions.

At present we do not use Google Analytics, Meta Pixel, TikTok Pixel, Pinterest tags, or other advertising tracking pixels.

The website currently uses Google for WooCommerce, Wordfence, MailPoet, WooCommerce, and related WordPress services. Some of these tools may set cookies or collect technical information needed for functionality, security, or service delivery.

If non-essential analytics or advertising cookies are added in the future, we will update this policy and add an appropriate cookie consent mechanism where required.

reCAPTCHA and spam prevention

We may use reCAPTCHA or similar anti-spam tools on newsletter or contact forms.

These tools help prevent spam, abuse, and automated submission. They may process technical information such as IP address, browser information, and interaction data.

Who we share your information with

We only share personal information where necessary to operate the website, provide our services, process orders, meet legal obligations, or protect the website.

We may share information with:

• website hosting provider: Equiphase
• email hosting provider connected to our website hosting package
• WordPress and WooCommerce
• WooPayments
• PayPal
• MailPoet
• WPForms
• Google for WooCommerce
• Royal Mail
• accountant/bookkeeper
• spreadsheet or accounting tools used to manage business records, such as Excel

We do not sell personal information.

International transfers

Some of the services we use may process or store personal information outside of the United Kingdom.

This may include services provided by companies such as Google, PayPal, MailPoet, WooPayments, or Wordfence.

Where personal information is transferred internationally, we rely on appropriate safeguards used by those service providers, such as recognised data protection agreements or transfer mechanisms.

How long we keep your information

We only keep personal information for as long as necessary for the reason it was collected.

Approximate retention periods are:

Type of information	Retention period
Contact from enquiries	Until the enquiry has been resolved, then deleted when no longer needed
Newsletter subscriber data	Until you unsubscribe or ask us to remove you
Order and invoice records	Kept for tax and accounting purposes, usually for at least 5 years after the relevant tax return deadline
Customer account data	Kept while the account remains active, unless deletion is requested
Personalisation/signing details	Kept only as long as needed to complete the order, unless included in order records
Security logs	Kept for a limited period for security and fraud-prevention purposes

Children’s privacy

Morag and Hamish sells children’s books and related products, but the website is intended to be used by adults.

We do not knowingly collect personal information from children.

If we become aware that a child had provided personal information without appropriate consent, we will delete it where required.

You data protection rights

Under UK data protection law, you have rights over your personal information.

You may have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct inaccurate or incomplete information
• ask us to delete your personal information
• ask us to restrict how we use your information
• object to certain uses of your information
• withdraw consent, where we rely on consent
• ask for your information to be transferred to another provider, where applicable

To make a request, contact:

mail@moragandhamish.com

We will usually respond within one month.

Complaints

If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office

ICO website: https://ico.org.uk

Changes to this policy

We may update this privacy policy from time to time.

The latest version will always be available on this page.