Privacy Policy
Last updated: 30/07/2026
This Privacy Policy describes how Chimney Sheep Ltd (“we”, “us”, or “our”) collects, uses and discloses your personal information when you visit or use any of our websites, or otherwise communicate with us. We trade under three brands, each with its own website (together, the “Sites”):
● Chimney Sheep – www.chimneysheep.co.uk
● The Chimney Balloon Co – www.chimneyballoon.co.uk
● Jolly Good Yarn – www.jollygoodyarn.com
This Privacy Policy applies across all three Sites. Where our practices differ between the Sites, this is noted below. For the purposes of this Privacy Policy, “you” and “your” means you as a user of any of the Sites, whether a customer, visitor, or other individual whose information we have collected.
Please read this Privacy Policy carefully. By using any of the Sites, you agree to the collection, use and disclosure of your information as described here. If you do not agree, please do not use the Sites.
Chimney Sheep Ltd is a company registered in England and Wales (company number 08218805), with its registered office and trading address at Unit 4 Derwent Drive, Derwent Howe Industrial Estate, Workington, CA14 3YW, United Kingdom.
For the purposes of UK data protection law, Chimney Sheep Ltd is the data controller for personal information collected through all three Sites. We are registered with the Information Commissioner's Office (ICO), registration number ZA156737.
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on the relevant Site(s) and update the “Last updated” date.
The personal information we collect depends on how you interact with us. We use Shopify to power all three Sites, and collect information both directly from you and automatically.
● Basic contact details – name, address, phone number, email address.
● Order information – billing and shipping address, payment confirmation, email address, phone number.
● Account information – username, password, security questions (if you create an account).
● Shopping information – items you view, add to your basket or wishlist.
● Customer support information – anything you tell us when you contact us.
● Reviews – if you leave a product review, via our reviews provider, Judge.me.
You can choose not to provide certain information, but this may prevent you from using some features of the Sites (for example, completing an order).
We use cookies and similar technologies to automatically collect information about how you use the Sites, including device and browser information, your IP address, and how you interact with pages and emails. See “Cookies” below for more detail, including how to manage your preferences.
We also receive information from third parties who support the Sites, including:
● Shopify, our e-commerce platform provider.
● Our payment providers, who process payment information (which may include Shopify Payments, Stripe, PayPal and Klarna, depending on the Site and payment method chosen) in order to fulfil your order.
● Klaviyo, our email marketing platform.
● Google Analytics, for website analytics.
● Judge.me, our product review platform.
Any information we obtain from third parties is treated in accordance with this Privacy Policy. We are not responsible for the accuracy of information provided to us by third parties, or for their own privacy practices.
● Providing our products and services. To process payments, fulfil orders, manage returns and exchanges, manage your account, and send you service communications about your orders – in order to perform our contract with you.
● Marketing. To send you marketing communications by email (via Klaviyo) where you have opted in, and to show you relevant advertising. You can opt out at any time – see “Your rights and choices” below.
● Security and fraud prevention. To detect and prevent fraudulent, illegal or malicious activity. Keep your account details safe and do not share them with anyone else; contact us immediately if you believe your account has been compromised.
● Customer support and service improvement. To respond to your queries and improve the Sites, in our legitimate interests to maintain our relationship with you and run an effective business.
● Analytics. To understand how visitors use the Sites (via Google Analytics), in our legitimate interests to improve the Sites and your experience.
We use cookies and similar technologies on all three Sites to run and improve the Sites, remember your preferences, and (where you consent) for analytics and marketing purposes. We use a cookie consent banner on each Site, through which you can manage your cookie preferences and withdraw consent at any time.
Strictly necessary cookies (for example, those needed to remember items in your basket) do not require consent and cannot be switched off, as the Sites cannot function properly without them. Analytics and marketing cookies are only set with your consent.
For details of the cookies used to power our Shopify store, see Shopify's cookie policy: shopify.com/legal/cookies
We disclose personal information to the following categories of third parties, for the purposes described above:
● Shopify – to host and operate the Sites.
● Payment providers (Shopify Payments, Stripe, PayPal, Klarna) – to process payments.
● Klaviyo – to send marketing and transactional emails.
● Google Analytics – to understand website usage.
● Judge.me – to manage and display product reviews.
● Delivery and fulfilment partners – to deliver your order.
● Professional advisers (e.g. accountants, solicitors) – where necessary for our business.
● Regulators, law enforcement or other third parties – where we are required to by law, or to protect our rights or the rights of others.
● A buyer or successor – in connection with a sale, merger, or other transfer of all or part of our business.
We do not sell your personal information to third parties for money. We do not use or disclose sensitive personal information to infer characteristics about you.
If you submit a product review or other content that is displayed publicly on the Sites (via Judge.me or otherwise), this content will be visible to anyone who visits the Site. We are not responsible for how others use information you choose to make public.
The Sites may contain links to third-party websites. We are not responsible for the privacy or security practices of any third-party website, and encourage you to review their privacy policies before providing any personal information.
The Sites are not intended for use by children, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the details below and we will delete it.
We take appropriate technical and organisational measures to protect your personal information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We keep customer order records for 6 years, in order to meet our tax and accounting obligations. Where we hold personal information for other purposes (for example, marketing preferences or account information), we keep it only for as long as necessary for that purpose, or as required by law.
If you are in the UK or EEA, you have the following rights in relation to your personal information, subject to certain exceptions and conditions under data protection law:
● Right to access. You can ask us for a copy of the personal information we hold about you, and details of how we use and share it.
● Right to correct. You can ask us to correct inaccurate or incomplete personal information.
● Right to delete. You can ask us to delete your personal information.
● Right to restrict processing. You can ask us to stop or limit how we use your personal information in certain circumstances.
● Right to object. You can object to our processing of your personal information, including for direct marketing, at any time.
● Right to portability. You can ask us to provide your personal information in a portable format, or to transfer it to another organisation, in certain circumstances.
● Right to withdraw consent. Where we rely on your consent (for example, for marketing emails or non-essential cookies), you can withdraw it at any time.
To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. You can unsubscribe from marketing emails at any time using the link in the email; this will not affect service emails relating to your orders or account.
If you are unhappy with how we have handled your personal information, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to address your concerns directly first – please contact us using the details below.
Some of the third parties we work with (including Shopify, Klaviyo and Google) may store or process personal information outside the UK, including in the United States. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses (as extended to the UK), or a finding that the destination country provides an adequate level of protection.
If you have any questions about this Privacy Policy, or would like to exercise any of your rights, please contact us:
Chimney Sheep Ltd
Unit 4 Derwent Drive, Derwent Howe Industrial Estate, Workington, CA14 3YW, United Kingdom
Chimney Sheep enquiries: info@chimneysheep.co.uk · +44 (0)1900 269427
The Chimney Balloon Co enquiries: info@chimneyballoon.co.uk · +44 (0)1900 817109
Jolly Good Yarn enquiries: help@jollygoodyarn.com · +44 (0)1900 269427
Data protection queries relating to any of our Sites can be sent to any of the addresses above and will be passed to the relevant team.
