Privacy Notice

This notice explains what personal information we collect through this website, why, and your rights. We're the data controller:

TYF Designs
[Business address to be added]
Contact: the contact form

What we collect

• Enquiries, custom orders and workshop bookings: your name, email, phone number (if given), the details of what you'd like and your message.
• Shop orders: your name, email, phone number, delivery and billing address, and what you ordered. Card payments are handled by Stripe. We never see or store your full card details.

Why we use it

• To reply to your enquiry, quote for a custom order or arrange a workshop (taking steps at your request before a contract).
• To process, deliver and support your order (performing our contract with you).
• To keep the business and tax records we're legally required to keep (legal obligation).
• To protect the site and our customers from fraud and abuse (our legitimate interests).

We don't sell your information, and we don't send marketing unless you've asked us to.

Who we share it with

• Stripe, to take payments securely.
• Cloudflare, which hosts this website and delivers our email.
• Delivery companies, who need your name and address to deliver your order.
• Our accountant or authorities, where the law requires it.

How long we keep it

• Order and payment records: 6 years, as required for tax.
• Enquiries that don't lead to work: up to 2 years, then deleted.

Cookies and browser storage

We don't use advertising or tracking cookies. The site stores your basket in your own browser so it's remembered between visits. When you check out, Stripe's payment page uses its own cookies to process the payment securely and prevent fraud.

Your rights

You can ask to see the information we hold about you, to have it corrected or deleted, or to object to how we use it. Contact the contact form. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office (ico.org.uk).

See also our Terms of Sale.