Legal
Privacy Policy
What we collect, why we collect it, who we share it with, and the rights you have over it.
Last updated: 4 October 2026
Who we are
Fushy is an independent maker of modified plush companions, based in the United Kingdom. Fushy is the trading name of a sole trader established in the United Kingdom, and is the data controller for the purposes of UK data protection law. You can reach us at hi@fushy.shop or through our contact form, and we aim to reply within a few days. Our full seller details, including those required of us as a trader, are shown on our Etsy shop, which is where all purchases are completed.
What this policy covers
This policy covers personal data we collect through fushy.shop. It does not cover purchases, which complete on Etsy. When you buy from us there, Etsy is a separate data controller and its own privacy policy applies to the information you give it, including your payment and delivery details. We never see your card details.
What we collect, and why
When you use the contact form
We collect your first name, last name, email address and the content of your message. We use this to answer you. Our lawful basis is our legitimate interest in responding to enquiries, and where your message is about a possible order, taking steps at your request before entering a contract.
When you submit a custom request
We collect your first name, last name, email address, your city, region and country, and the description of the build you are asking about. We use this to prepare a quote and discuss the commission. Our lawful basis is taking steps at your request before entering a contract. Location is collected so we can estimate postage and customs.
When you join the newsletter
We collect your email address and use it to send occasional updates about new plushies. Our lawful basis is your consent, and you can withdraw it at any time by replying to any message or contacting us.
When you browse the site
If you accept cookies, Google Analytics 4 collects information about how you use the site — pages viewed, approximate location derived from a truncated IP address, device and browser type, and how you arrived. We use this to understand which pages are useful. Our lawful basis is your consent, given through the cookie banner, and you can change your mind at any time on our cookie policy page. If you decline, no analytics cookies are set and no analytics data is sent.
Two small items are stored in your browser whatever you choose: a record that you confirmed you are 18 or over, and a record of your cookie choice. These stay on your device, are not sent to us, and exist so you are not asked repeatedly.
Who we share it with
- Netlify — hosts the website and receives form submissions, which are stored in our Netlify account. Netlify is a US company; transfers are covered by its standard contractual clauses and Data Privacy Framework participation.
- Google — provides Google Analytics 4, and only if you accept analytics cookies.
- Etsy — where purchases take place, as a separate controller.
- Royal Mail and any customs authority — where an order is being delivered to you.
We do not sell your personal data, and we do not share it for advertising.
How long we keep it
Enquiries and custom requests are kept for up to two years from our last exchange, so we can pick up a conversation and honour anything we promised. Newsletter subscriptions are kept until you unsubscribe. Analytics data is retained by Google for 14 months. Records relating to an order may be kept longer where tax or consumer law requires it.
Your rights
Under UK GDPR you have the right to ask us for a copy of your personal data, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it. Exercising these rights is free and we will respond within one month.
To make a request, email hi@fushy.shop. If you are not satisfied with our response you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.
Age
This site is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.
Security
The site is served over HTTPS and form submissions are stored in our Netlify account behind authentication. No method of transmission is completely secure, and we cannot guarantee absolute security.
Changes
If we change this policy we will update the date at the top of this page. Material changes will be flagged on the site.