Privacy

Who is responsible

[PLACEHOLDER — your name or trading name as data controller, and a contact address for data queries. If you ever process at scale you may need to register with the ICO; a small print shop generally does not, but check.]

What is collected

The site itself collects the following. This list is accurate for the code as built — update it if you add anything.

Contact form: your name, email address and message, sent by email to the site owner and not stored in a database.

Orders: your name, email address and delivery address, processed by Stripe. Card details are entered on Stripe's own checkout and are never seen by this site.

Newsletter: your email address, held by the newsletter provider you connect.

Analytics: only if you consent via the cookie banner. Nothing analytics-related loads before that.

Cookies

The site sets no tracking cookies by default. Two items of browser storage are used for the site to function: your cart contents, and whether you have answered the cookie banner. Neither is shared with anyone.

[PLACEHOLDER — if you enable analytics, name the provider here and say what it sets.]

Who your data is shared with

[PLACEHOLDER — list your actual processors: Stripe for payments, Resend for email, Vercel for hosting, and your newsletter provider. Each should be named with a link to their own privacy policy.]

How long it is kept

[PLACEHOLDER — retention periods. Order records generally need keeping for six years for tax purposes; enquiry emails do not.]

Your rights

Under UK GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, object to processing, and complain to the Information Commissioner's Office.

[PLACEHOLDER — the email address to use for such requests, and how quickly you will respond. One month is the statutory maximum.]