Privacy Policy
Last updated:
Who We Are
This website is operated by [PLACEHOLDER — Trading name / legal name, e.g. “Cutting Etch Designs (sole trader)”], a sole trader registered in England and Wales.
Registered address: [PLACEHOLDER — Your full trading/registered address, e.g. “123 Example Street, Town, County, AB1 2CD”]
ICO registration number: [PLACEHOLDER — Your ICO Data Protection registration number, e.g. “ZB123456” — register at ico.org.uk if you have not already]
If you have any questions about this policy, please contact us.
Personal Data We Collect
When you place an order or contact us, we may collect:
- Name and email address — so we can confirm your order and communicate with you.
- Delivery address — to dispatch your order.
- Order details — the products, customisation text, and options you select.
- Payment information — processed securely by Stripe. We never store your card details; Stripe is our payment processor and their privacy policy applies to payment data.
- Uploaded artwork or photos — if you upload a file for a personalised product (e.g. a photo for engraving or a custom design). See “Uploaded Files” below.
- Messages — any enquiries you send via our contact form.
How We Use Your Personal Data
We use your data to:
- Process and fulfil your order (legal basis: contract performance).
- Send you an order confirmation and shipping notification (legal basis: contract performance).
- Respond to your enquiries (legal basis: legitimate interest).
- Comply with our legal obligations, including tax and accounting records (legal basis: legal obligation).
We do not use your data for marketing emails, profiling, or automated decision-making without your consent. We do not sell your data to third parties.
Uploaded Files
If you upload artwork, a photo, or a design file as part of a personalised order, your file is stored securely on Cloudflare R2 (an object storage service operated by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare acts as a data processor on our behalf under a Data Processing Agreement.
Your uploaded file is used solely to produce your order. Files are stored for the duration of your order and for a reasonable period after dispatch (see Retention below). You may request deletion at any time by contacting us.
Third-Party Services
We use the following services to operate this website and fulfil orders:
- Stripe — payment processing. Stripe’s privacy policy: stripe.com/gb/privacy
- Cloudflare R2 — file storage for uploaded artwork. Cloudflare’s privacy policy: cloudflare.com/privacypolicy
- Vercel — website hosting. Vercel’s privacy policy: vercel.com/legal/privacy-policy
- Neon — database hosting for order and product data. Neon’s privacy policy: neon.com/privacy
- Resend — transactional email (order confirmations). Resend’s privacy policy: resend.com/legal/privacy-policy
Data Retention
We retain order data (name, address, order details) for up to 7 years to comply with HMRC record-keeping requirements. Uploaded artwork files are retained for 12 months after your order is fulfilled and then deleted, unless you request earlier deletion or request that we retain them for a repeat order.
Contact form messages are retained for up to 12 months and then deleted unless an ongoing matter requires us to keep them longer.
Your Rights Under UK GDPR
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data (subject to our legal obligations).
- Restriction — ask us to limit how we process your data.
- Portability — receive your data in a portable format.
- Object — object to processing based on legitimate interest.
To exercise any of these rights, please contact us. We will respond within one calendar month.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Cookies
We use only essential cookies required to operate this website. We do not use tracking, analytics, or advertising cookies. For full details, see our Cookie Policy.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.