Privacy policy
Draft – [Company name and address] is the data controller. Contact: [privacy email].
What we collect and why
- Orders: your name, email address and payment status, to deliver your order and keep accounting records (contract; legal obligation).
- Gift recipients: if you send sheets as a gift, we use the recipient's name, email address and your message once, to deliver the gift. Recipients can contact us to be erased.
- Marketing emails, reviews, event calendar: only with your separate, optional consent, which you can withdraw at any time.
- Reorder codes and review requests: one reorder discount code is included in each delivery email and one follow-up email asks for feedback (legitimate interest).
- Location: your country is detected only to choose paper size and currency. Your IP address is used for this momentary lookup and is never stored.
Processors
Stripe (payments), our email provider, and our hosting/database providers process data on our behalf under data processing agreements. Transfers outside the UK/EEA rely on Standard Contractual Clauses or the Data Privacy Framework.
Retention
Order records are kept for [7] years for accounting; personal contact details are removed on request. Reviews and calendar entries are kept until you withdraw consent.
Your rights
You can access, receive a copy of, correct and erase your data, object to processing and complain to your supervisory authority. Use the form below with your order number and the order email address, or contact us.