Privacy policy

Who we are

This website is run by Stesign Ltd (company number TODO(steve)), registered address TODO(steve). We are the data controller for personal information collected through this website. Contact: TODO(steve).

What we collect and why

When you buy something

Payments are processed by Stripe. At checkout, Stripe collects your name, email address, delivery address and payment details. We receive your name, email, delivery address and order details so we can deliver your order and provide customer service. We never see or store your full card details. Our legal basis is performing our contract with you. Stripe's own use of your data is covered by Stripe's privacy policy.

When you contact us

If you email us, we use your email address and message to reply. Our legal basis is our legitimate interest in answering your enquiry.

Website analytics

We use Cloudflare Web Analytics to count visits and see which pages are popular. It does not use cookies and does not track you across other websites. Our legal basis is our legitimate interest in understanding how the website is used.

Videos

Our how-to videos are hosted on YouTube. Nothing is loaded from YouTube until you press play. When you do, the video loads from YouTube's privacy-enhanced mode (youtube-nocookie.com), and Google receives information such as your IP address and may store data on your device to play the video. Google's own privacy policy applies.

Cookies

This website does not set any cookies of its own. Stripe's checkout pages may use cookies that are needed for secure payment and fraud prevention, and YouTube may store data on your device if you play a video.

How long we keep information

We keep order records for six years after the end of the financial year they relate to, as required for UK tax purposes. We keep emails for up to two years unless they relate to an order. TODO(steve): confirm retention periods.

Who we share information with

We share information only with services we use to run the shop: Stripe (payments), Cloudflare (website hosting and analytics), our delivery carrier (name and address, to deliver your order) and our email provider. TODO(steve): name the carrier and email provider. We never sell your data.

Your rights

Under UK data protection law you have the right to access, correct or delete your personal information, to object to or restrict how we use it, and to data portability. To use any of these rights, contact us. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office (ico.org.uk).