Effective date: 05/07/2026
This Privacy Policy explains how personal data is collected, used, and protected when you visit this website or place an order. It applies to all personal data processed through this website.
1. Data Controller
The data controller responsible for your personal data is Julien Le Pocher, a sole trader based in the United Kingdom ("I", "me", "my"). If you have any questions about this policy, or wish to exercise your rights, you may contact me through the Contact page on this website.
2. Personal Data I Collect
When you place an order, I collect your name, email address, billing address, delivery address, and the details of the items you purchase.
When you contact me, I collect your name, email address, and the content of your message.
When you subscribe to the newsletter, I collect your name and email address.
Your payment is processed directly by the payment provider (Squarespace Payments / Stripe), and I do not receive or store your full payment card details.
I also collect limited analytics and cookie data relating to your use of the website.
3. Purposes and Lawful Bases for Processing
I process your personal data to fulfil your order, including delivery and customer service, on the lawful basis of performance of a contract.
Where you have subscribed, I process your name and email address to send you the newsletter, on the lawful basis of your consent, which you may withdraw at any time. I process order and transaction data to comply with legal and regulatory obligations, including tax and accounting records, on the lawful basis of a legal obligation. I also process limited data to operate, secure, and improve the website, on the lawful basis of my legitimate interests.
4. Disclosure of Your Personal Data
I share personal data only where necessary, and only with a small number of trusted providers who process it on my behalf.
Squarespace provides website hosting and the online store.
The payment provider (Squarespace Payments / Stripe) processes payments.
Gelato produces and dispatches prints, and receives your name and delivery address for print orders.
My newsletter provider delivers the newsletter.
5. International Data Transfers
Some of the providers named above may process personal data outside the United Kingdom. Where such transfers occur, they are subject to appropriate safeguards recognised under UK data protection law.
6. Data Retention
I retain personal data only for as long as necessary. Order and transaction records are kept for as long as required for tax and accounting purposes, ordinarily six years. Newsletter data is kept until you unsubscribe. Enquiry correspondence is kept only for as long as necessary to deal with your enquiry.
7. Cookies
This website uses cookies for essential functionality and for analytics. You may manage or disable cookies through your browser settings and through any cookie notice displayed on the website.
8. Your Rights
Under UK data protection law, you have the right to request access to the personal data I hold about you, to request the correction of inaccurate data, and to request its erasure. You may also object to or request the restriction of processing, and where processing is based on consent, you may withdraw that consent at any time. You have the right to request the portability of your data, and the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any of these rights, please contact me through the Contact page.
9. Changes to This Policy
I may update this Privacy Policy from time to time. Any changes will be published on this page with a revised effective date.
10. Contact
For any questions about this Privacy Policy or the handling of your personal data, please contact me through the Contact page on this website.