Privacy without
the frosty bits.

Who looks after your information?

Xmas Decorations operates this shop. Contact orders@xmasmerrybright.com about your information, orders or marketing preferences.

Orders and returns

We use your name, contact details, delivery address, order and payment reference to process purchases, deliver goods and handle returns. This is necessary to fulfil your contract and meet legal obligations. Square processes payments; our shop does not store your card number or security code. ChatGPT Sites hosts the shop and its database. Authorised shop administrators can view order and return details.

Order and financial records are kept for up to six years for accounting and legal purposes. Return claim details are kept with the relevant order. You may ask us about access, correction, deletion, restrictions or portability of your personal information. Some records must be retained by law.

The nice list and JINGLE30

We store your email address, active subscription preference, consent wording version and consent time when you choose to join our festive mailing list. The basis is your consent. JINGLE30 gives a further 30% off item prices after automatic bundle savings, excluding delivery. It is valid once per email address, while that subscription is active, across the current catalogue. Enter the code and use the subscribed email at checkout. There is no minimum spend. It cannot be exchanged for cash.

Your code is shown immediately after signup. Unsubscribe using the button shown after signup or by emailing us. Any marketing email we send will include an unsubscribe option. We retain your subscription while active and review inactive contacts after two years; a minimal suppression or redemption record may be retained to respect your preferences and prevent repeat offer use.

Cookies and similar storage

Essential browser storage remembers your bag, saved items you request and payment recovery during checkout. The admin login uses a secure, HTTP-only session cookie that expires after four hours. Your cookie preference is remembered for 180 days. You can change it through “Cookie choices” in the shop footer or remove browser storage using your browser settings.

Optional analytics run only if you choose “Allow”. We record daily totals for page views, add-to-cart actions and checkout opens. We do not attach names, emails, device IDs or full IP addresses to these totals. Totals are retained for 90 days. These are counts of actions from consenting browsers, not unique visitors or complete sales attribution. Choosing “Essential only” leaves shopping and checkout available.

Short-lived security rate-limit records use a one-way hash of the connecting IP to prevent abuse. They expire after their rate-limit window and are removed as subsequent requests arrive. Payment services may use essential security technology when you start secure checkout.

Your choices

We do not sell your information. Contact us to withdraw marketing consent or exercise your information rights. You can also raise a concern with the Information Commissioner’s Office. Service providers may process information outside the UK under their applicable safeguards. Contact us for details about the providers used for your order.

Last updated 28 October 2026.