Privacy policy
Who we are
Dayligaun Ltd ("Dayligaun", "we", "us") makes and sells handmade plaster ghost figures from a workshop in East Lothian, Scotland. We trade as Dayligaun — The Edinburgh Ghost Works, at dayligaun.co.uk.
We are the data controller for the personal information described in this policy.
-
Company number: SC903378, registered in Scotland
-
Address:
5 South Charlotte Street
Edinburgh
EH2 4AN - Contact: boo@dayligaun.co.uk
What we collect
When you place an order: your name, delivery address, billing address, email address, phone number if you give one, and details of what you bought. We do not receive or store your full card number — payments are handled by our payment provider, and we see only the card type and last four digits.
When you join the Register: your first name, last name and email address, plus the date you confirmed your subscription.
When you visit the site: your IP address, browser and device type, pages viewed, and how you arrived. This comes through cookies and similar technologies.
When you contact us: whatever you choose to put in your message, and your email address.
Why we use it, and our legal basis
| What for | Legal basis |
|---|---|
| Taking payment, packing and posting your order, dealing with queries about it | Performance of a contract with you |
| Keeping records of sales for tax and accounting | Legal obligation |
| Sending Register emails about new ghosts and releases | Your consent, given when you confirmed your subscription |
| Preventing spam and abuse of our forms | Our legitimate interests in keeping the site usable |
| Understanding how the site is used, so we can improve it | Your consent, given through the cookie banner |
You can withdraw consent at any time. Every Register email carries an unsubscribe link, and you can change cookie preferences on the site.
Who we share it with
We do not sell your information, and we do not share it for anyone else's marketing. We use a small number of service providers who process personal data on our behalf:
-
Shopify — runs our online store and checkout, and stores order records
-
Our payment providers — process card payments and carry out fraud checks
-
Brevo — sends the Register emails and stores the subscriber list
-
Google — reCAPTCHA, which checks that form submissions come from a person rather than a bot, and Google Analytics, which tells us how the site is used
-
Royal Mail — receives the name and delivery address needed to deliver your parcel
- Meta — the Facebook and Instagram pixel, which tells us which visits and sales came from our posts and ads<br><br></li>
We may also disclose information where the law requires it.
Information leaving the UK
Some of our providers store or process data outside the UK. Where that happens, the transfer is covered by UK adequacy regulations or by the International Data Transfer Agreement or Addendum, which are the safeguards UK law recognises. You can ask us for more detail on any particular provider.
Cookies
Our site uses cookies that are necessary for it to work — remembering your basket and keeping checkout secure. These do not need your consent.
We also use analytics cookies, which are optional and only set if you agree. reCAPTCHA sets cookies of its own when you use a form; it is there to stop automated abuse, and Google's own privacy policy governs what it collects.
How long we keep it
-
Order and transaction records: six years from the end of the relevant tax year, which is what HMRC requires
-
Register subscriptions: until you unsubscribe, or until you ask us to remove you
-
Emails you send us: normally up to two years after the matter is closed
- Analytics data: as set in our Google Analytics retention settings
Your rights
Under UK data protection law you have the right to ask us to:
- give you a copy of the personal information we hold about you
- correct anything that is wrong
- delete your information, where we have no continuing reason to hold it
- restrict how we use it, or object to our using it
- send your information to another provider, in a portable format
- stop sending you marketing, at any time
Write to boo@dayligaun.co.uk and we will respond within one month.
If you think we have handled your information badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.
Changes
If we change this policy we will update this page and the date below.
Last updated: 01/10/26