Privacy Policy

Who we are

Timbermere Studio(“we”, “us”) is the data controller for the personal information described here. We're a single-maker workshop based in Selby, North Yorkshire, United Kingdom.

• Email: [email protected]

What we collect

We collect only what we need to take and fulfil your order, and to answer you when you get in touch:

• Order details — your name, delivery address, email address, and what you bought. Checkout is handled by our payment provider, Snipcart; your card payment is processed by their payment partner. We never see or store your full card details.
• Correspondence — if you email us, we keep your message and address so we can reply and resolve your query.

We don't run analytics, advertising, or tracking — see our Cookie Policy.

Why we use it, and our lawful basis

• To process and deliver your order and provide customer service — performance of our contract with you.
• To keep business and tax records — compliance with a legal obligation.
• To keep the website secure and working — our legitimate interests in running the shop safely.

Who we share it with

We only share your information with the providers that help us run the shop:

• Snipcart — checkout and payment processing.
• Delivery couriers — to ship your order to you.
• Our hosting and infrastructure — Railway (hosting), Cloudflare (security/delivery), and Sanity (content). These handle the running of the site, not marketing.

We never sell your personal data or use it for third-party advertising.

Where your data is processed

Some of these providers may process data outside the UK. Where they do, appropriate safeguards (such as UK ‘adequacy’ decisions or standard contractual clauses / the UK addendum) are in place to protect it.

How long we keep it

We keep order and transaction records for around six years, to meet UK accounting and tax rules. Enquiry emails are kept only as long as needed to deal with your query.

Your rights

Under UK data-protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to delete data, or restrict or object to how we use it;
• ask for your data in a portable format, where applicable.

To exercise any of these, email [email protected]. If you're unhappy with how we handle your data, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last reviewed.