Privacy Policy
[PLACEHOLDER: last updated date]
Who we are
[PLACEHOLDER: who the data controller is (Carol's business name and address) and how to contact us about privacy.]
What we collect
[PLACEHOLDER: what is collected when you buy a hat (name, email, shipping address; card details are handled by Stripe and never reach us) and when you send a custom order enquiry (name, email, colour preferences, message).]
How we use it
[PLACEHOLDER: purposes and lawful basis for each: fulfilling orders, replying to enquiries, keeping business records.]
Who we share it with
[PLACEHOLDER: the services that process data for us: Stripe (payments and checkout), Cloudflare (website hosting and enquiry storage), the email provider once chosen (MS-002), and Royal Mail for delivery.]
How long we keep it
[PLACEHOLDER: retention period for order records (tax requirements) and for custom order enquiries.]
Cookies
[PLACEHOLDER: whether this site sets cookies, and that Stripe's checkout pages are covered by Stripe's own policy. Depends on the open question about a consent banner.]
Your rights
[PLACEHOLDER: your rights under UK GDPR (access, correction, deletion, objection) and how to complain to the ICO.]
Contact us
[PLACEHOLDER: email address for privacy requests and expected response time.]