Who we are

Granny’s Little Charms are based in Norwich, UK.

Our website address is: https://www.grannyslittlecharms.co.uk.

We also have a presence on the following social media services:

What personal data we collect and why we collect it

Contact forms

We have a contact form on the website to allow communication between Granny’s Little Charms and it’s visitors. We ask for the following:

  • First and last name
  • E-mail address

We ask for this so that we know who we are talking to.


We use cookies to track user visits across the website via Google Analytics.


Who we share your data with

We use Google Analytics to collect basic information in order to track where visitors are from and what pages are being visited on the website.

Google Analytics cookie information can be found here.

How long we retain your data

Google Analytics retains data for 14 months before expiring.

Cookies expire between 24 hours and 2 years.

What rights you have over your data

You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Google Analytics automated data centres are located worldwide, for a breakdown we review you to this list.

What personal data we collect and why we collect it

Security Logs

The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 14 days.

Who we share your data with

This site is scanned for potential malware and vulnerabilities by Sucuri’s SiteCheck. We do not send personal information to Sucuri; however, Sucuri could find personal information posted publicly (such as in comments) during their scan. For more details, please see Sucuri’s privacy policy.

How long we retain your data

Security logs are retained for 14 days.

Where we send your data

This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com. For privacy policy details, please see the iThemes Privacy Policy.

Additional information

How we protect your data

Data is stored securely using industry standard methods and at all time and accessible only to those required to those who have a valid interest.

What data breach procedures we have in place

We follow standard ICO recommendations for handling data breaches.

What third parties we receive data from

We do not buy or import data from third parties.

What automated decision making and/or profiling we do with user data

We do not profile our users in any way. We have actively opted out of sharing data with Google beyond the approximate Geo-location of our visitors and the pages they visit.