Privacy notice
Last updated: 28 October 2026
At ARDANA™, we respect your privacy and are committed to handling your personal information responsibly. This Privacy Notice explains what information we collect, how we use it, when we may share it and the rights you have under UK data protection law.
1. Who we are
ARDANA™ is a trading name of N Mackinnon, a sole trader, based at Castlemill, Auchterarder, PH3 1JR, Scotland, United Kingdom.
For the purposes of applicable data protection law, the business owner is the data controller responsible for your personal information.
Contact: hello@ardana.uk
2. What information we collect
Depending on how you interact with ARDANA™, we may collect the following information:
- Newsletter subscriptions: your email address and any name details you choose to provide.
- Enquiries and correspondence: your name, email address and the information you include in your message.
- Orders and fulfilment: information needed to process and fulfil purchases made through our sales channels, including delivery details and order information.
- Technical information: limited information relating to your visit to our website, such as IP address, browser and device details, and information recorded in server logs for website operation and security.
- Consent and preferences: records of newsletter subscriptions, marketing permissions, withdrawals of consent and communication preferences.
We do not collect payment card details through our website where purchases are completed through a third-party marketplace. Payment information is handled by the relevant payment provider.
3. How we use your information
We use personal information where necessary for the following purposes:
- Newsletter and marketing: to send ARDANA news, product updates, collection launches and occasional inspiration where you have consented to receive these communications.
- Customer enquiries: to respond to questions and provide requested information.
- Orders and customer service: to coordinate order fulfilment, delivery, returns, after-sales support and related communications.
- Website operation and security: to maintain the website, troubleshoot technical issues and help protect against misuse.
- Legal and regulatory obligations: to keep records and meet applicable legal requirements.
- Business restructuring or sale: where necessary, to assess or complete a potential sale, investment, restructuring or transfer of some or all of the ARDANA business, subject to applicable law and appropriate safeguards.
We rely on consent for email marketing where required by law. For other activities, we may rely on contractual necessity, legitimate interests or legal obligations, depending on the circumstances.
Where we rely on legitimate interests, we consider your rights and interests and use your information only where those interests are not overridden by your rights.
4. Newsletters and marketing choices
If you sign up to the ARDANA newsletter, we will use your details to send the communications described at the point of sign-up.
We intend to use Mailchimp to manage newsletter subscriptions and send emails once the service is configured. If we use another provider, we will update this notice as appropriate.
You can unsubscribe at any time using the unsubscribe link in our emails or by contacting hello@ardana.uk.
We will not use your newsletter subscription as permission to send unrelated third-party marketing. We do not sell personal information as a standalone mailing-list product.
If ARDANA or its business is sold or transferred, personal information may be considered as part of that transaction where lawful and necessary. Any transfer will remain subject to applicable data protection law. A new owner will not automatically have permission to use your details for email marketing simply because the business or its customer records have changed hands.
5. Who we share information with
We share personal information only where reasonably necessary for the purposes explained in this notice, and subject to applicable law.
Depending on how ARDANA operates and develops, recipients may include:
- Website hosting and technical providers, including 20i, where used to host or maintain the website.
- Email marketing providers, such as Mailchimp, once configured for newsletter management.
- Sales platforms and marketplaces, including Etsy and any other platforms we may use in future, such as Shopify or Amazon.
- Production and fulfilment partners, including Printify and relevant manufacturers, printers, fulfilment services and delivery companies, where needed to produce and deliver an order.
- Professional advisers and service providers, where they need information to provide services to the business.
- Prospective purchasers, investors or successors, where information must be reviewed or transferred for a potential business transaction and doing so is lawful.
- Authorities or other parties, where disclosure is required by law or necessary to establish, exercise or defend legal claims.
When a third party processes information on our behalf, we take reasonable steps to ensure appropriate contractual and security protections are in place.
Third-party platforms may also process information under their own privacy notices and terms. We encourage you to review those notices when using their services.
6. International transfers
Some service providers may process or store personal information outside the United Kingdom.
Where a transfer is subject to UK data protection restrictions, we will take steps to ensure that an appropriate legal transfer mechanism or safeguard is in place, where required. This may include a recognised adequacy regulation or an applicable data-transfer agreement.
The specific arrangements depend on the providers and services in use.
7. How long we keep your information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including any legal, accounting or reporting requirements.
Our general approach is:
- Newsletter information: retained while you remain subscribed. If you unsubscribe, we may retain a minimal suppression record so we can respect your request and avoid sending further marketing.
- Enquiries and correspondence: generally retained for no longer than two years after the enquiry is resolved, unless a longer period is reasonably necessary.
- Order and transaction information: retained for as long as necessary for fulfilment, customer service, legal obligations, accounting and the establishment or defence of legal claims.
- Technical and security logs: retained according to the relevant hosting and security arrangements and the time needed to investigate or prevent technical issues.
Actual retention periods may vary according to the nature of the information and our legal obligations.
8. Cookies and website technologies
Our website may use cookies or similar technologies that are necessary for its operation, security or the functioning of features you choose to use.
Third-party resources and integrations may also process technical information when a page loads. The technologies used may change as the website develops.
We will obtain consent for non-essential cookies or similar technologies where required by law. We will update this notice if our use of these technologies changes materially.
You can also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.
9. How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
We also take reasonable steps to select service providers that offer appropriate safeguards. However, no website, electronic transmission or storage system can be guaranteed to be completely secure.
10. Your data protection rights
Depending on the circumstances and applicable law, you may have the right to:
- Request access to the personal information we hold about you.
- Ask us to correct inaccurate or incomplete information.
- Ask us to erase your information.
- Request restriction of how we use your information.
- Object to certain processing, including processing based on legitimate interests.
- Request a copy of certain information in a portable format.
- Withdraw consent where processing is based on consent.
- Object to direct marketing at any time.
To exercise a right, contact hello@ardana.uk. We may need to verify your identity before responding.
We will normally respond within one month of receiving a valid request. In certain circumstances, the law allows this period to be extended.
You also have the right to complain to the UK Information Commissioner's Office (ICO):
11. Children's privacy
Our website and newsletter are intended for a general audience and are not designed to encourage children to provide personal information directly. If you believe a child has provided us with personal information inappropriately, please contact us so we can consider the appropriate steps.
12. Changes to this notice
We may update this Privacy Notice when our business, website, services or legal obligations change. The latest version will be published on our website with its updated date.
Contact
For questions about this Privacy Notice or how ARDANA handles personal information, contact:
ARDANA™
A trading name of N Mackinnon, sole trader
Castlemill, Auchterarder, PH3 1JR
Scotland, United Kingdom
Email: hello@ardana.uk