Last updated: 13 November 2026
Who we are
Squishy is a small independent shop selling squishy stress toys at squishy9.com. In this policy, “we” and “us” mean Squishy, and “you” means anyone visiting the site or placing an order.
What we collect
- Order details: name, email, shipping and billing address, phone number if you provide one, and what you ordered
- Account details if you register: email, name, and a hashed password
- Technical data: IP address, browser and device type, pages visited, and the cookies needed to keep your cart working
- Messages you send us by email or through the contact page
Payment data
We never see or store your card number. Payments are processed by PayPal. When you pay, PayPal handles your card or account details under its own privacy policy. We receive only a confirmation that the payment succeeded, the transaction ID, and the amount.
Why we use it
- To process your order and ship it
- To answer your questions and handle returns
- To keep the shop secure and detect fraud
- To send order updates, and marketing only if you opted in
Who we share it with
- PayPal, to take payment
- Our hosting provider, to run the site
- Carriers, to deliver your parcel
- Tax authorities, where the law requires it
We do not sell your data, and we do not share it with advertisers.
Cookies
Essential cookies keep your cart and your login working — without them the shop cannot function. Analytics cookies are only set if you accept them. You can clear or block cookies in your browser settings; if you block the essential ones, the cart and checkout will stop working.
How long we keep it
Order records are kept for 7 years because tax law requires it. Account data is kept until you delete your account. Messages are kept for 2 years.
Your rights
You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] and we will respond within 30 days. If you are in the EU or UK, you also have the right to object to processing and to lodge a complaint with your local data protection authority.
Security
The site runs over HTTPS and access to order data is limited to the shop owner. No system is perfectly secure, but we take this seriously and fix problems as soon as we find them.
Children
Our products are not intended for children under 14. We do not knowingly collect personal data from anyone under 14. If you believe a child has given us data, email us and we will delete it.
Changes to this policy
If this policy changes, the “last updated” date at the top changes with it. Material changes will be announced on this page before they take effect.