Legal
Privacy notice
Effective 2 August 2026
This notice explains what we do with your information. We have kept it specific rather than general, so you can see exactly what happens.
1. Who we are
Little Hands Studio
Hulhumalé, Maldives
We decide how and why your information is used. Questions: wxiu616@gmail.com
2. What we collect
When you place an order Your name, delivery address, telephone number, email address, what you ordered and what you paid. Where you send to an island, the vessel name and the contact number you give us for its crew.
When you create an account The above, plus your password (stored encrypted — we cannot see it), your language preference, your Handprints balance and history, and your birthday month if you choose to give it.
When you contact us Whatever you tell us, and our conversation with you, including Viber messages.
When you use this website Which pages and products you looked at. Your recently viewed items and, if you are not signed in, your wishlist are stored in your own browser and are never sent to us.
When you leave feedback Your rating, any comments, and whether you agreed that we may publish them.
What we never collect We do not see or store your card or bank details. We do not buy information about you from anyone else. We do not track you across other websites.
3. Why we use it, and on what basis
| What we use | Why | Our basis |
|---|---|---|
| Name, address, phone, order details | To take, pack, deliver and support your order | Performing our contract with you |
| Email address | To send order confirmations, dispatch notices and delivery updates | Performing our contract with you |
| Account details and Handprints record | To operate your account and our rewards programme | Performing our contract with you |
| Order and invoice records | To meet our tax and accounting obligations | Complying with a legal obligation |
| Pages and products viewed | To show you relevant items on our home page | Our legitimate interest in presenting a useful shop. You can clear this at any time. |
| Feedback and fit responses | To decide what to stock and to help other customers choose a size | Our legitimate interest in improving what we sell |
| Publishing a review with your first name and last initial | To help other customers | Your consent, given when you submit it |
| Marketing messages | To tell you about new arrivals and offers | Your consent |
| Records of complaints and disputes | To resolve them and to defend claims | Our legitimate interest in handling disputes |
4. Marketing
We send marketing only if you have asked us to. Every message carries an unsubscribe link, and it takes effect immediately.
Order confirmations, dispatch and delivery notices, and messages about a return are not marketing. You receive those because you placed an order.
5. Who else sees your information
We share your information only with those who need it to do something for us:
- Our delivery partners and, for island orders, the vessel you nominate — your name, address and telephone number, so that your parcel reaches you
- Our payment provider, once online payments are live — they handle your card details directly; we never receive them
- Our email and messaging providers — to send you order messages
- Our hosting and infrastructure providers — the website and our records run on their systems
- Our professional advisers — our accountant and, where necessary, our lawyer
- A public authority — where we are required by law to provide it
We do not sell your information. We do not share it with advertisers or data brokers.
6. Where your information is held
Our website is served through a global content delivery network. Our commerce system and database are hosted in outside the Maldives, and our email and messaging providers operate from outside the Maldives. This means your information is stored and processed outside the Republic of Maldives.
We choose providers that offer recognised security and confidentiality commitments, and we require them to process your information only on our instructions.
7. How long we keep it
We keep the records described in this notice indefinitely.
We do this so that we can honour warranties and returns however long after purchase they arise, trace the batch a product came from if there is ever a safety recall, meet our tax and accounting obligations, and answer questions about past orders.
You may ask us to delete your personal information at any time — see clause 9. Where we do so, we will keep only what we are required by law to keep, such as invoice records, and we will remove your name and contact details from anything else.
8. Gifts and shared wishlists
Where you send a gift, we use the recipient’s name, address and telephone number only to deliver it. We do not add them to any marketing list.
Where you buy from someone’s shared wishlist, you never see their address. We resolve it ourselves when we pack the parcel. Where you share your own wishlist, only the name you choose to display and your island are visible to the people you share it with, and you can switch sharing off at any time.
9. Your choices
You may:
- Ask what we hold about you, and ask for a copy
- Correct anything wrong — in your account, or by asking us
- Ask us to delete your information. Note that closing your account means any Handprints are lost, and that we must keep certain records for tax purposes
- Object to us using your information for our legitimate interests, including the personalised suggestions on our home page
- Withdraw consent for marketing or for publishing your review, at any time
- Clear your recently viewed items using the clear button on our home page, at any time, without an account
To do any of these, contact wxiu616@gmail.com. We will respond within thirty days. We may ask you to confirm your identity first.
10. Children
This shop is for adults buying for children. We do not knowingly collect information from children, and accounts are for adults. If you believe a child has created an account, tell us and we will remove it.
11. Security
Passwords are encrypted. The website uses HTTPS throughout. Our administration system is not reachable from the public internet and requires a second, separate sign-in. Staff access is limited to those who need it, and every staff account is individually identified so that actions can be traced.
If your information is affected by a security incident, we will tell you without undue delay, explain what happened and what we are doing, and notify any authority we are required to notify.
12. Changes
If what we do changes, we will update this page and change the effective date at the top. Where a change is significant, we will tell account holders directly.
13. Contact and complaints
wxiu616@gmail.com
Hulhumalé, Maldives
If you are not satisfied with how we have handled your information, please tell us first. If we cannot resolve it, you may complain to the relevant authority in the Maldives.