Funky Pigeon

Privacy Notice

Funky Pigeon respects your privacy and is committed to protecting your personal data when you interact with us or visit our website. This Privacy Notice will inform you how we process your personal data and how you can exercise your privacy rights.

Contact Us

Funky Pigeon is the Data Controller and part of the Card Factory group of companies (https://www.cardfactoryinvestors.com).

Address: Funky Pigeon, County Gates, Ashton Road, Bristol, BS3 2JH

Data Protection Officer: DPO@cardfactory.co.uk

We are registered with the United Kingdom Information Commissioner's Office and the Data Protection Commission of Ireland.

Please see the My Funky Rewards Privacy Notice for more information regarding the processing of your data when using My Funky Rewards.

Purpose for Which We Will Use Your Personal Data

In most instances we will process your personal data to respond to your purchase or enquiry about our products or services, including:

To register you as a new customer and process and deliver your order(s)
To managing payments, fees and charges and collect money owed to us
To manage our relationship with you including dealing with enquiries and complaints
To request feedback on our service and products through surveys and reviews
To inform you about important new updates/services and changes to existing services
To offers prize draws and competitions
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences
To provide suggestions and recommendations to you about goods or services that may be of interest to you
With your consent, send our newsletters and other promotional updates
To send reminders if you abandon (exit the website) after a search, product view, or do not complete your order
To verify your age when you purchase a product with age restrictions associated to it e.g. alcohol. In order to do this, your data will be shared with GBG plc, who may use the following systems to verify your identity: UK Edited Electoral Roll, UK Credit Bureau, UK Credit Header Database, UK Births Registry Database & UK National Identity Register. Please refer to our Terms and Conditions for information relating to age restriction when creating a Funky Pigeon account.

To allow you to create and log in to your Funky Pigeon account using your Facebook, Google, or Apple account (“Social Login”), including:

Creating and managing your account
Personalising your experience on our website and apps
Providing customer support and responding to enquiries
Sending marketing communications (only if you have opted in)
Complying with legal obligations such as fraud prevention

How is Your Personal Data Collected?

We use different methods to collect data from and about you including through:

Direct interactions. You may give us your personal information by filling in forms or by corresponding with us by post, phone, e-mail or otherwise. This includes information you provide when you purchase any of our products or services, create an account on our website, subscribe to our newsletters or other publications, enter a competition or provided feedback.

Automated technologies or interactions. As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. When you first visit our website, you will be given the opportunity to consent to non-essential cookies. You can update your preferences at any time.

Information provided by third parties. We receive age verification information from GBG plc and delivery confirmation from our contracted delivery partners.

Social Login - If you use Facebook, Google, or Apple to log in, we receive:

First name
Last name
Email address
We do not receive your password or any other social account data. Authentication is handled securely by the provider (Apple, Google, Facebook).

Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

When you complete an online form, register or shop with us online, we may process your personal data including your name, date of birth, billing/delivery address, e-mail address and telephone number. We may also collect and retain information about your interactions with us either online (e.g. IP address) or through our contact centres so that we can process your transactions and deal with any future queries.

We process aggregated data such as statistical or demographic data for the purpose of understanding our customers and their preferences.

We do not collect any Special Categories of Personal Data or information about criminal convictions and offences. When using our website we advise not disclosing health information as this constitutes a special category of personal data.

We do not knowingly collect any data from persons under the age of 18. You must be 18 or over to use the website. Please see terms and conditions for further details.

If you use Social Login, we collect only:

First name
Last name
Email address

Legal Basis for Processing

In most instances our legal basis for processing your data relates to our contractual obligations in respect of your order or enquiry about an order.

When you provide the personal data of third-party recipients such as photographs and address details for delivery purposes, we process the information to meet our contractual obligation to provide the product and delivery service. You should ensure that third parties are aware that you have provided their details to us.

Where it is necessary for our legitimate interests (or those of a third party), we carry out balancing tests and risk assessments to protect your fundamental rights.

We also process personal data to meet our legal obligations e.g. VAT records.

Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us via our dedicated Contact page or by emailing us at wecare@funkypigeon.com; updating your preferences on your 'My Account' section of the website; by 'opting out' of marketing communications in any marketing e-mail sent to you or by following the instructions in any SMS we send. Opting out of marketing communications will not affect necessary communications with you in connection with your order.

When collecting your personal data, we will always make clear which data is necessary in connection with a particular contractual or legal requirement. We may process your personal data without your knowledge or consent (for example, in relation to fraud management or to assist with investigations by the police or other regulatory bodies) where required or permitted by law.

For Social Login specifically, processing is based on:

Contractual necessity - To create and manage your account
Legitimate interests - To prevent fraud, maintain security, and improve services
Consent - Where you opt in to marketing communications

Personal data is also processed by TikTok if purchases are made using their marketplace and shoppers there are recommended to review the TikTok privacy notice (https://www.tiktok.com/legal/page/eea/privacy-policy/en)

Data Sharing

To enable us to meet our contractual and legal obligations we share data with third parties, including:

GBG plc for the purpose of age verification https://www.gbgplc.com/en/legal-and-regulatory/privacy-policy/
Card Factory group entities, details of which can be found in our Annual Reports
Courier and delivery service providers to manage your order (Royal Mail https://www.royalmail.com/privacy-notice, Yodel https://www.yodel.co.uk/privacy-cookies-policy, DHL https://www.dhl.com/gb-en/home/footer/privacy-notice.html, DPD https://www.dpdlocal.co.uk/dpd-local-dpo-privacy-notice.jsp, Evri https://www.evri.com/privacy-policy)
Payment processing providers (PayPal Braintree https://www.paypal.com/us/legalhub/privacy-full, Revolut https://www.revolut.com/privacy-policy/, Apple Pay ( https://www.apple.com/uk/privacy/, Google Pay https://policies.google.com/privacy, DNA Pay By Bank App https://dnapayments.com/page/privacy-policy, Klarna https://www.klarna.com/uk/privacy-and-security/, Clearpay https://www.clearpay.co.uk/en-GB/applicant-privacy
We use a variety of printing partners for fulfilling and despatching your order
If we expand, reduce or sell Funky Pigeon and this may involve the transfer of divisions or the whole business to new owners. If this happens, your personal data will, where relevant, be transferred to the new owner or controlling party and you will be notified of the change.
For the purposes of our review service, a specific Trustpilot email address is added using 'Bcc' function to all of Funky Pigeon's order confirmation emails or similar - please see T&Cs for full details.
Marketing companies to show you products, special offers or services, from Funky Pigeon that might interest you while you are browsing the internet, e.g. Delight/Rewards Bag free gift options shown on the website as products you can choose to add to the basket before checkout.
Data insight companies to ensure your details are up to date and accurate.
Elastic Path to facilitate adding items to basket and ordering.
MentionMe, in order to manage the Refer A Friend functionality available to our customers. MentionMe full privacy policy can be viewed here.

We require all third-party service providers to undergo a due diligence process to ensure that they meet our required standards for data security and data compliance. We ensure that data processing or data sharing agreements are in place which set out our expectations and the obligations of the service providers.

Social Login-related service providers - For account management, authentication, order fulfilment, marketing, and analytics (no Social Login data is sold to third parties)

Refer A Friend

This is an optional service designed to enable you, as an existing Funky Pigeon customer, to refer one or more of your friends to Funky Pigeon for a reward.

If you choose to participate in our 'Refer a Friend' program, we will collect your name, email address, and track your referral activity to administer the program and issue rewards.

When you refer a friend, we may share your name with them, so they know the referral came from you.

By participating, you confirm that you have the referred friend's permission to provide their details or that you are using our provided sharing tools to send them a direct message from your personal account.

You can opt out of the program or stop receiving program-related service emails at any time via your account settings or by contacting us.

For Friends that receive the referral, we use this information solely to confirm your eligibility for the associated offer and, if applicable, to process the reward.

We will not use your personal information to send you any marketing communications unless you provide us with your explicit consent to do so. You have the right to object to the processing of your data or request its erasure at any time.

Regardless of whether you are a referrer or a recipient of the referral, your rights outlined in this Privacy Notice are unaffected. This scheme has been reviewed to ensure it is compliant with the GDPR, the Privacy and Electronic Communications Regulation (PECR) and other appropriate data protection legislation.

My Funky Rewards

My Funky Rewards is an online cashback programme operated by Funky Pigeon and managed on our behalf by Webloyalty International Sarl, a third party entity outside the Card Factory/Funky Pigeon group. You can find their privacy policy here: https://www.myfunkyrewards.com/privacy-policy

Funky VIPs

If you join the Funky VIP programme and elect to add the personal data of your VIPs please ensure that your contacts are aware that their personal data has been shared with us. Please check the Funky VIP terms and conditions for more details.

Your Rights

Data protection legislation provides individual rights in respect of your personal data, these include:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. If we have a legal or other obligation requiring us to retain the data, we will inform you.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You have the right to withdraw consent at any time where we are relying on consent to process your personal data.

If you make a request, we have one month to respond to you, if your request is complex or you have made a number of requests, we might require additional time (up to an additional two months). In this case, we will notify you within one month of the request.

We may request identity information for security purposes. We may also contact you to request further information or clarification to speed up our response.

Please contact us at DPO@cardfactory.co.uk if you wish to make a request.

To exercise your rights, please contact our Customer Happiness team via our contact form.

Additional rights for Social Login users:

You can manage or revoke Funky Pigeon's access to your Facebook, Google, or Apple account via your provider settings (revoking may affect your ability to log in).
You retain all other rights listed above.

International Data Transfers

Some of our service providers are located outside of the EEA and UK and we ensure that our contracts with these suppliers include appropriate data transfer safeguards such as the EU Standard Contractual Clauses and the UK Addendum.

Data Security

We have appropriate organisational and technical measures in place to ensure the security of your personal data. We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

For Social Login specifically:

Information is encrypted in transit.
Strict security measures are applied to prevent unauthorised access, loss, or misuse.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. We generally anonymise customer data 4 years from the last order or interaction with us.

In some circumstances we may anonymise your personal for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

Social Login data is retained on the same basis and may be anonymised after this period.

If You Fail To Provide Your Personal Data

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service order, but we will notify you if this is the case at the time.

Marketing

We may send you marketing about our own goods and services if either you have opted in to receive our marketing messages, or you have previously bought or enquired about similar goods or services from us and you have not opted out from receiving our marketing messages.

You can unsubscribe from all our marketing material at any time by clicking the 'unsubscribe' link in any marketing email we send, updating your 'My Account' section on our website, or using our preference centre. You can also contact us via our contact form at any point to opt out of any or all marketing communications.

Social Login marketing is only sent if you opt in.

Off Site Marketing

Whilst browsing other websites you may see Funky Pigeon promotional messages, these will be displayed based on cookies placed during your recent visit to our website. Please see our Cookie Notice for more detail. We may share your data (which may include email address, name, address and your purchase history) with social media platforms (for example Meta) and Google, in order to serve marketing to you. You can opt-out of this data sharing by contacting our Data Protection Officer: DPO@cardfactory.co.uk

Third Party Marketing

You are in control of any information we share with third parties for marketing purposes. As you go through our checkout or account creation processes you will be asked to advise us which contacts you wish to receive. If you have opted in to receive marketing, you can opt out of these marketing communications at any time by contacting us or by unsubscribing from marketing communications in any e-mail sent to you.

Third Party Links

Clicking on links to third-party websites, plug-ins and applications contained within this website, or enabling those connections, may allow third parties to collect or share data about you. We do not control these third-party websites. When you leave our website, we encourage you to read the privacy notice of every website you visit

For Social Login, please see the following provider privacy policies:

Facebook Privacy Policy
Google Privacy Policy
Apple Privacy Policy

Cookies

When you visit our website you will be offered a choice regarding the loading of cookies. Our preference centre can be accessed at any time through the Cookie Setting section to change your preferences. Please note that non-essential cookies are required for the functioning of our website to process your order, or when communicating with us. More information can be found in our Cookie Notice.

How To Complain

Data Protection Officer

DPO@cardfactory.co.uk

Card Factory, Century House Brunel Road, Wakefield 41 Industrial Estate, Wakefield, West Yorkshire, WF2 0XG

If you are not satisfied with the response you have received, you have the right to raise a complaint with the regulator:

UK and Rest of the World

United Kingdom Information Commissioner's Office

http://www.ico.org.uk/concerns

Helpline number: 0303 123 1113

EEA

Data Protection Commission of Ireland

https://dataprotection.ie/en/contact/how-contact-us

Helpline number: (01) 765 01 00 and 1800 437 737

General

It is likely that we will need to update this Privacy Notice from time to time, the version number and last update date will be noted here.

Last updated: 19/08/25