Privacy
Draft — have your adviser confirm before launch. The retention periods and the named processors below describe the shop's software as shipped; confirm they match how the shop is run.
Who we are
app name 1 is run by (not set), (not set). We are the "controller" of the personal information described here. You can reach us at (not set), through the Message us button on the site, or by post.
What we collect and why
| What | Why we use it | Our lawful basis |
|---|---|---|
| Your name, email address and delivery address, and what you ordered | To make and deliver your order, send your receipt and answer questions about it | Performing our contract with you |
| Your account details (name, email, password stored as a hash, saved delivery address, chosen payment method) | To let you sign in, see your orders, and be told by email when your password, email address or sign-in changes | Performing our contract with you |
| The words you type for personalisation | To print them on your item | Performing our contract with you |
| A picture you upload to be printed | To print it on your item. It is kept in private storage that only we can open, and you can see it on your own order page; we delete the file once your order is made and the time to raise a problem with it has passed | Performing our contract with you |
| Messages you send us through the site, and any picture you attach to one | To answer you. A picture is kept in private storage that only we can open, shown in your conversation, and deleted by us once it is no longer needed | Our legitimate interest in answering customers |
| Your marketing choice, and the emails we send if you agree | To tell you about offers you asked to hear about | Your consent, which you can withdraw at any time |
| Designs you save as favourites | To show them to you again | Our legitimate interest in running the site |
| Reviews you leave | To show other shoppers what buyers thought (shown with your first name and last initial only) | Our legitimate interest in showing genuine reviews |
| Cookies | See our cookies page | Essential ones: our legitimate interest in running the site; the others: your consent |
We do not use your information to make automated decisions about you, and we do not build profiles of you.
Ordering without an account
You can order as a guest. We then keep your email address and delivery address on that order, as we do for an account, and send your receipt with a link that opens your order page. The link works for 30 days; after that, the Find my order page can email you a fresh one. To stop that page being used to test whether an address has ordered, it counts requests (up to 5 an hour) by a keyed hash of your address and never says whether an address has orders. If you later open an account with the same email address, it shows your guest orders once you have confirmed you can read that mailbox.
If you start a guest checkout and do not finish it, the email address and delivery address you typed stay on your basket, so we can help if you get in touch, and are deleted automatically after 30 days.
Payment
We never see or store your card number. Card payments are taken by Stripe, including its Link wallet if you choose to use it, and PayPal payments by PayPal. Each receives the details it needs to take the payment and each has its own privacy notice. We keep a record of the payment's outcome and identifiers, not the card.
Who else sees your information
Companies that provide services to us, acting on our instructions: the company that hosts the website, the company that hosts our database, the company that sends our emails, the company that stores our images, and the payment providers named above. Royal Mail receives your name, delivery address and email address when we buy the postage label for your parcel, so it can deliver it and send you its own tracking updates. Some of these providers process data outside the United Kingdom under safeguards recognised by UK law, such as the UK's adequacy decisions or the International Data Transfer Agreement. We do not sell your information and we do not share it with anyone for their own marketing.
How long we keep it
- Orders, and the details on them, for as long as we need them for tax and accounting records — at least six years after the order.
- Your account, until you close it on your profile page or ask us to. Closing it deletes your saved addresses, basket, favourites and reviews and stops our marketing emails; your orders are kept as above, and the Find my order page still reaches them.
- Messages, for as long as the conversation is open and as part of the order they relate to.
- Marketing permission, until you withdraw it; we keep a record of when you gave it and withdrew it.
- Reviews, for as long as the design they are about is on sale, unless you ask us to remove your name or the review.
- A promo code opened from an email link, in a cookie on your device for 14 days, so it is still there when you sign in.
Your rights
With an account, you can download a copy of your details, saved addresses, orders, favourites, reviews, messages, basket and marketing choices from your profile page at any time. You can also ask us for a copy of all the information we hold about you, ask us to correct it, ask us to delete it (we may need to keep order records for tax law), object to our using it, ask us to restrict how we use it, and withdraw consent where we rely on it — including unsubscribing from marketing with the link in any marketing email. Write to (not set). We will answer within a month.
If you are not happy with how we handle your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Children
The shop is for adults. We do not knowingly collect information from anyone under 16.
Changes
We will update this page if what we do changes, and the date at the top of the page shows when it was last edited.