Privacy & Cookies

In plain English: I only ask for what I need to make your order and get it to you, I do not sell your details to anybody, and this website does not track you around the internet.

Who is responsible

Quirkley Vintage is the data controller for the information collected through this website.

What I collect, and why

When you order — your name, email, delivery address and phone number. I need these to take payment, make your order and post it to you. Legal basis: performance of a contract.
When you send a message or a personalised order enquiry — your name, email, phone number if you give it, and whatever you tell me about the design. Legal basis: legitimate interests — replying to you.
Payment details — I never see or store your card number. Payments are handled entirely by Stripe.

Personalised order details

Personalised enquiries often include details about other people — names of children, pets, family and so on. I use these only to design your piece, and I delete them once the order is finished and the return period has passed, unless you ask me to keep them so you can reorder.

Who else sees your information

Stripe — takes the payment and handles the checkout. See stripe.com/gb/privacy.
Royal Mail or another courier — gets your name and delivery address so your parcel arrives.
The form service that delivers website enquiries to my inbox.
Cloudflare — hosts this website and keeps it online and secure.

That is everybody. Your details are never sold, rented or passed to anyone for marketing.

How long I keep it

Order records are kept for six years, because HMRC requires business records to be kept that long. General enquiries that do not turn into orders are deleted within twelve months.

Cookies and what is stored on your device

This website sets no advertising or tracking cookies and uses no analytics that identify you.

It stores two small things in your own browser, on your own device:

Your basket — so your items are still there if you close the tab. It never leaves your device until you go to checkout.
A note that you have seen the cookie message — so it does not keep reappearing.

Both are strictly necessary for the site to work as you have asked it to, so no consent is needed for them. You can clear them at any time in your browser settings, which will simply empty your basket.

If you go through to checkout, Stripe will set its own cookies on its own pages, which are necessary to take payment securely and prevent fraud.

The fonts on this site are loaded from Google Fonts, which means Google receives your IP address when a page loads.

Your rights

Under UK GDPR you can ask me to give you a copy of what I hold about you, correct it, delete it, or stop using it in a particular way. Just ask — there is no charge and I will reply within a month.

If you are not happy with how I have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.