Privacy policy
Privacy Policy
Paper Starlights | Easy Action Ltd
Last updated: 28 October 2026
At Paper Starlights, we take your privacy seriously. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, purchase our products, subscribe to our communications or interact with our business.
Paper Starlights is the trading name of Easy Action Ltd. Throughout this policy, "Paper Starlights", "we", "us" and "our" refer to Easy Action Ltd.
Our website, www.paperstarlights.com, is powered by Shopify.
We process personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who We Are
Data Controller: Easy Action Ltd, trading as Paper Starlights
Business Address: Unit 4, Whitting House, Whitting Valley Road, Chesterfield, S41 9EY, United Kingdom
Privacy Enquiries: hello@paperstarlights.com
Customer Service: hello@paperstarlights.com
Website: https://paperstarlights.com
Easy Action Ltd is generally responsible for determining how and why personal information collected through our business is used.
Some third-party providers, including Shopify, may act as independent data controllers for certain processing activities.
2. Personal Information We Collect
The information we collect depends on how you interact with us.
Information You Provide
This may include:
-
Your name, email address, telephone number, billing address and delivery address.
-
Information relating to purchases, payments, orders, deliveries, returns and refunds.
-
Customer account details and preferences.
-
Information submitted through contact forms and customer service enquiries.
-
Newsletter subscriptions and marketing preferences.
-
Reviews, feedback and other information you voluntarily submit.
-
Business contact information relating to wholesale, trade, franchise, installation and partnership enquiries.
-
Contact information and product preferences provided when requesting product availability notifications.
Payment Information
When you purchase from us, payments are processed through the payment providers available at checkout.
These providers may process payment card information, transaction details and fraud prevention information according to their own privacy policies.
We receive the payment and transaction information necessary to process orders, confirm purchases and manage refunds.
Information Collected Automatically
When you visit our website, we and our technology providers may collect:
-
IP addresses and approximate geographical location.
-
Device, browser and operating system information.
-
Website pages visited and interactions with our products.
-
Shopping basket and checkout activity.
-
Referring websites and marketing campaign information.
-
Cookies, technical identifiers and similar tracking information.
-
Information used to maintain website security and detect automated activity.
The exact information collected depends on the technologies being used, their configuration and your privacy choices.
3. How We Use Your Personal Information
We use personal information for legitimate business purposes and in accordance with applicable law.
Processing Orders
We use your information to process purchases, accept payments, arrange deliveries, provide order updates, manage returns and refunds and fulfil our contractual obligations.
Lawful basis: Performance of a contract and, where relevant, compliance with legal obligations.
Customer Service
We use contact details and correspondence to answer enquiries, provide product assistance, resolve complaints and offer after-sales support.
Lawful basis: Performance of a contract or our legitimate interests in providing customer support, depending on the circumstances.
Customer Accounts
Where customer account functionality is available, we use relevant information to manage accounts, support secure login and provide account-related services.
Lawful basis: Performance of a contract or legitimate interests, as appropriate.
Marketing and Communications
Where permitted, we may send emails about new products, seasonal collections, Christmas markets, offers, events and other Paper Starlights news.
We rely on consent where required or, where legally permitted, the existing-customer soft opt-in under PECR.
You can unsubscribe from marketing emails at any time using the unsubscribe link in our messages.
Website Analytics and Improvement
We use website analytics to understand customer journeys, measure website performance, identify technical issues and improve our online store.
Lawful basis: Consent or legitimate interests, as appropriate to the processing activity. Non-essential analytics cookies and similar technologies are subject to applicable consent requirements.
Advertising and Conversion Measurement
Where enabled and permitted, advertising technologies help us understand campaign performance, measure conversions and deliver relevant advertising.
These technologies may involve browser-based tracking and server-side event processing.
Non-essential advertising cookies and similar technologies are subject to applicable consent requirements.
Security and Fraud Prevention
We use relevant information to protect customers and our business against fraudulent transactions, unauthorised access, spam and automated misuse.
Lawful basis: Our legitimate interests in operating a secure website and compliance with legal obligations where applicable.
Wholesale and Business Enquiries
When you contact us about wholesale orders, becoming a stockist, installations, events, franchise opportunities or other commercial arrangements, we use the information provided to respond, prepare quotations and manage business relationships.
Lawful basis: Contractual necessity, steps prior to entering a contract or legitimate interests, depending on the circumstances.
Legal and Accounting Obligations
We retain and process relevant information to comply with tax, accounting, consumer protection and other legal obligations.
Lawful basis: Compliance with a legal obligation.
4. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to provide essential shopping functionality, remember preferences, understand website usage and, where permitted, support advertising and marketing.
Cookies are small files stored on your device. Other technologies, including tracking pixels, tags and local storage, may perform similar functions.
We categorise these technologies as follows.
Required Cookies
These are necessary for essential website functionality, including shopping baskets, checkout, account security, fraud prevention and storing privacy preferences.
Where genuinely essential to a service requested by you, these technologies may operate without prior cookie consent.
Personalisation Cookies
These technologies may remember website preferences and interactions to improve your browsing experience.
Marketing Cookies
Where permitted, these technologies help us measure advertising performance, understand conversions and support relevant advertising across third-party platforms.
Analytics Cookies
These technologies help us understand website traffic, visitor interactions and how customers use our online store.
Managing Your Preferences
Our website provides cookie consent controls that allow visitors in applicable regions, including the United Kingdom, to accept, decline or manage non-essential cookies.
You can choose separately whether to permit personalisation, marketing and analytics technologies.
You may change or withdraw your consent using the cookie preferences available on our website.
You can also manage cookies through your browser settings, although disabling essential technologies may affect website functionality.
Further information is available in the Shopify Cookie Policy.
5. Website Security and hCaptcha
We use hCaptcha, a security verification and bot-detection service provided by Intuition Machines, Inc., to help protect our website from spam, fraudulent activity and automated misuse.
hCaptcha may process information including:
-
IP addresses and network information.
-
Browser and device details.
-
Technical identifiers.
-
Interaction information associated with security checks.
-
Other technical signals used to assess whether website activity is legitimate.
This processing helps us distinguish genuine visitors from potentially harmful or automated activity.
The lawful basis for our use of relevant personal information is generally our legitimate interests in protecting our website, customers and business, subject to applicable requirements for cookies and similar technologies.
hCaptcha may process information internationally, subject to relevant data protection requirements.
For further information, please read:
6. Analytics, Advertising and Third-Party Technologies
We use third-party services to operate our online store, provide customer features, analyse website performance and, where permitted, support advertising.
The following technologies are connected to our Shopify store.
Google & YouTube
We use Google's ecommerce and marketing integration to support advertising, conversion measurement and website performance reporting.
Depending on the services enabled, Google may process website interactions, purchase events, device information and technical identifiers.
Our website also uses Google Analytics 4 for website measurement.
Google Tag Manager
We use Google Tag Manager to help manage tracking tags and website integrations.
The information processed depends on the individual services configured through Tag Manager.
Where applicable, non-essential tracking technologies are subject to cookie consent requirements.
Facebook & Instagram (Meta)
We use Meta's ecommerce and advertising integration to support advertising measurement, campaign performance reporting and, where enabled, personalised advertising across Facebook and Instagram.
This integration supports browser-based and server-side event sharing.
Information may include website interactions, product interests, purchase events and relevant technical identifiers.
We use Pinterest's ecommerce integration to understand campaign performance and measure advertising conversions.
Depending on its configuration, Pinterest may receive relevant website interactions and purchase events through browser-based and server-side connections.
TikTok
We use TikTok's ecommerce integration for advertising attribution, conversion measurement and campaign reporting.
Where enabled, information may be processed through website tracking technologies and server-side event connections.
Judge.me Reviews
We use Judge.me to provide product reviews and related review functionality on our website.
This may involve processing review submissions, customer details, relevant order information and website interaction data.
REZ Preorder, Back In Stock
We use REZ to provide product availability and preorder-related features.
When you request an availability notification or use a relevant feature, this may involve processing your contact details, product interests and related interaction information.
Product availability notifications are provided in relation to the service requested. These requests do not automatically constitute consent to unrelated marketing.
Your Choices
Some of these integrations support browser-based tracking, server-side data processing or both.
The information shared depends on the services enabled, their configuration and applicable privacy requirements.
Where required, we seek consent before using non-essential analytics or advertising cookies and similar technologies.
Our use of these services is subject to relevant data protection laws and applicable customer privacy choices.
7. Shopify and Our Online Store
Our online store is hosted and powered by Shopify.
Shopify provides technology supporting website hosting, shopping baskets, checkout, customer accounts, payment-related functionality, analytics and other ecommerce services.
When you interact with our website or place an order, relevant information may be processed by Shopify and its service providers.
Shopify Enhanced Services
We use certain Shopify enhanced features that may incorporate information about interactions with our store alongside information from interactions with Shopify and other merchants.
These features may help support and improve ecommerce services, customer experiences and relevant business functionality.
For certain processing activities, Shopify determines its own purposes and acts as an independent data controller.
You can learn more about Shopify's data practices and relevant privacy rights through:
Shopify Consumer Privacy Policy
Depending on your location and the applicable processing, additional privacy choices may be available.
8. Sharing Your Personal Information
We share personal information where reasonably necessary to operate our business, provide services or comply with legal obligations.
Recipients may include:
-
Shopify and ecommerce providers, supporting our online store and customer transactions.
-
Payment providers, processing payments, refunds and fraud checks.
-
Delivery and fulfilment partners, including postal services and couriers.
-
Analytics and advertising partners, as identified in this policy and subject to applicable privacy requirements.
-
Customer service and technology providers, supporting communication, website operation and business systems.
-
Review and product notification providers, supporting requested customer features.
-
Professional advisers, including accountants and legal advisers.
-
Regulatory and public authorities, where disclosure is legally required.
We may also disclose information in connection with a legitimate business transaction, legal claim or where you direct us to share it.
We expect providers processing information on our behalf to implement appropriate security and contractual safeguards.
Some organisations process personal information as independent controllers under their own privacy policies.
9. International Data Transfers
As we operate an online business and use technology providers with international operations, personal information may be processed outside the United Kingdom.
This may include countries where our ecommerce, payment, advertising, security, delivery and other service providers operate.
Where international transfers require legal safeguards, we use appropriate transfer mechanisms, which may include:
-
UK adequacy regulations.
-
The UK International Data Transfer Agreement.
-
The UK Addendum to the EU Standard Contractual Clauses.
-
Other recognised lawful transfer mechanisms where applicable.
Additional protections may be used where required.
You may contact us for further information about relevant international data transfer arrangements.
10. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where retention is required for legal, accounting or business obligations.
Retention depends on the category of information and the reasons for processing it.
Order and Financial Records
We retain relevant purchase and financial information for applicable accounting, tax and legal requirements.
Customer Correspondence
We retain customer communications as necessary to respond to enquiries, resolve disputes and provide customer support.
Marketing Information
We retain relevant marketing information while necessary for lawful marketing activity and managing communication preferences.
Limited information may be retained to ensure unsubscribe requests continue to be respected.
Customer Accounts
Account information is retained while needed to operate customer accounts, subject to applicable legal and operational requirements.
Website Analytics
Analytics and technical information is retained according to the purposes of processing, provider settings and applicable retention requirements.
Trade and Business Information
Wholesale and commercial relationship information is retained while relevant to the relationship and any subsequent legal, accounting or contractual requirements.
When information is no longer needed, we delete, anonymise or securely retain it only where a lawful reason remains.
11. Keeping Your Information Secure
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration, misuse and disclosure.
These measures may include:
-
Secure ecommerce infrastructure.
-
Access controls and account security.
-
Appropriate restrictions on employee and service-provider access.
-
Fraud prevention and website security technologies.
-
Relevant contractual and organisational safeguards.
Although we work to protect personal information, no online service or transmission method can be guaranteed completely secure.
Please avoid sending sensitive payment details through ordinary email.
12. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
-
Access: Request a copy of personal information we hold about you.
-
Correction: Ask us to correct inaccurate or incomplete information.
-
Erasure: Request deletion of personal information in certain circumstances.
-
Restriction: Request restrictions on certain processing activities.
-
Data portability: Request eligible personal information in a portable format.
-
Objection: Object to certain processing, including processing based on legitimate interests.
-
Withdrawal of consent: Withdraw consent where processing relies on it.
-
Direct marketing: Object to direct marketing at any time.
-
Automated decisions: Exercise applicable rights relating to qualifying solely automated decisions with significant effects.
These rights are subject to applicable legal conditions and exemptions.
To exercise your rights, contact:
We may need to verify your identity before completing a request.
We normally respond to valid UK data protection requests within one month, subject to lawful extensions where applicable.
Complaints
If you have concerns about how your information is handled, please contact us.
You also have the right to complain to the UK's Information Commissioner's Office (ICO):
https://ico.org.uk/make-a-complaint/
You are not required to contact us before approaching the ICO.
Individuals in other countries may also have rights to complain to their relevant data protection authority.
13. Marketing Preferences
Where you have subscribed to receive marketing communications, we may send you information about Paper Starlights products, promotions, seasonal collections, markets and events.
You can unsubscribe at any time using the unsubscribe link in our marketing emails or by contacting us directly.
Unsubscribing from marketing does not prevent essential communications about orders, payments, deliveries or customer service.
We may retain limited suppression information to ensure your preferences are respected.
14. Children's Privacy
Our website is not specifically directed at children.
We do not knowingly collect personal information from children where doing so would be unlawful.
If you believe a child has provided personal information to us inappropriately, please contact us so we can investigate and take appropriate action.
15. Third-Party Websites and Social Media
Our website may include links to third-party websites, social media platforms and other external services.
These organisations may collect and process personal information independently.
Their activities are governed by their own privacy policies and terms.
We recommend reviewing the privacy information of any external website or service before providing personal information.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business practices, technology, services or legal obligations.
When changes are made, we will update the date at the top of this page.
Where required by law, we will provide additional notice or seek renewed consent.
17. Contact Us
If you have questions about this Privacy Policy, our data protection practices or your privacy rights, please contact:
Easy Action Ltd, trading as Paper Starlights
Unit 4, Whitting House
Whitting Valley Road
Chesterfield
S41 9EY
United Kingdom
Privacy: hello@paperstarlights.com
Customer Service: hello@paperstarlights.com
Website: https://paperstarlights.com
We aim to respond to privacy enquiries as promptly as reasonably possible.