Privacy Policy

Last updated 12 September 2026

This explains what we do with your personal information when you buy from us or get in touch. We keep as little as we can, and we don’t sell it to anyone.

Who is responsible

What we collect, and why

When you place an order

Your name, email address, delivery address and order details. We need these to take payment, send your order and deal with any returns. The lawful basis is performance of a contract with you.

Your payment details

Payments are processed by Stripe. Your card number is entered on Stripe’s own secure checkout and is never sent to us — we only see that a payment succeeded, along with the last four digits and the card type.

When you use our contact form

Your name, email address and message, so we can reply. The form is delivered by EmailJS. The lawful basis is our legitimate interest in answering customer enquiries.

Keeping business records

We keep records of sales because we have to. The lawful basis is legal obligation.

Who we share it with

Only the organisations needed to get your order to you:

• Stripe — payment processing and fraud prevention.
• EmailJS — delivering contact form messages to us.
• Royal Mail or another carrier — your name and delivery address, to deliver the parcel.
• Amazon — if you ordered through our Amazon storefront, Amazon handles that order under their own privacy policy.
• HMRC or another authority, where we are legally required to.

We do not sell your data, and we do not use it for advertising.

How long we keep it

• Order and payment records: six years after the end of the tax year they relate to, as required for tax purposes.
• Enquiries and support emails: up to two years, then deleted.

Cookies and this website

This site sets no tracking or advertising cookies. We use no analytics. Some things are loaded from other services to make the site work, and those services will see your IP address as part of that:

• Google Fonts — typefaces used across the site.
• jsDelivr — the script behind the contact form.
• Stripe — only once you go to checkout, where Stripe sets its own cookies for security and fraud prevention, covered by their privacy policy.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the information we hold about you;
• correct anything that is wrong;
• delete it, where we are not required to keep it;
• restrict or object to how we use it;
• provide it in a portable format.

Email support@jtdesigns.uk and we will respond within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can try to fix it. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113.

Changes

If we change this policy we will update the date at the top of this page.