Privacy policy

EllTheLabel is run by [to be added], a UK business that makes handmade crochet bags and accessories. We are the controller of the personal information described in this policy.

You can contact us by email at shopellthelabel@gmail.com, or write to us at [to be added].

We only collect information you give us, or information needed to run the store:

• Orders: your name, email address, delivery address, phone number if you give one, what you ordered, any notes such as colour choices, and any voucher code you used.
• Your account: your name, email address and a securely stored password. If you sign in with Google, Google shares your name and email address with us. We never see your Google password.
• Payments: whether a payment succeeded, the amount and a payment reference. Your card details are entered on our payment provider's secure page and never reach us.
• Messages: what you send us through the contact form, by email or on Instagram.
• Newsletter: your email address, if you choose to join our list.
• Your region: the country you choose, or the country our hosting provider detects from your connection, so we can show prices in your currency. We do not store your IP address for this.

Under UK GDPR we must have a lawful basis for using your information:

• Contract: to take payment, make and deliver your order, run your account and handle returns.
• Legitimate interests: to reply to your messages, prevent fraud and spam, keep the site secure, show prices in your currency and improve our service. We balance these against your rights.
• Consent: to send our newsletter. You can withdraw consent at any time with the link in every email.
• Legal obligation: to keep order and payment records for tax and accounting.

Card payments are handled by Stripe. If we offer PayPal, payments made that way are handled by PayPal. They process your payment details under their own privacy policies and use them to complete the payment and to prevent fraud. We only receive confirmation that a payment was made and a reference for it.

We share only what each service needs to help us run the store. They may only use it to provide their service to us, unless they act as a separate controller as described above:

• Supabase: our database, account sign in and image storage, hosted in the European Union.
• Vercel: hosting for this website.
• Stripe and PayPal: payments.
• Our email provider: sending order emails, account emails and the newsletter.
• Our delivery carriers: your name, address and, where needed for delivery, your phone number.
• Google: only if you choose to sign in with Google.

Some of these providers store or access information outside the UK, including in the European Union and the United States. When they do, the information is protected by UK adequacy regulations or by the UK International Data Transfer Agreement or Addendum, as UK law requires.

We keep your information only for as long as we need it:

• Orders and payment records: six years after the end of the tax year they relate to, to meet HMRC rules.
• Your account: until you ask us to close it. Orders placed with it are then kept as above.
• Messages: as long as needed to help you, and no longer than two years.
• Newsletter: until you unsubscribe.

You have the right to:

• ask for a copy of the information we hold about you
• have it corrected if it is wrong
• have it deleted, unless we must keep it by law
• object to, or ask us to limit, how we use it
• withdraw consent for emails at any time
• receive it in a format you can move to another service

Contact us by email at shopellthelabel@gmail.com. We will reply within one month. There is no charge.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Our store is not aimed at children under 13 and we do not knowingly collect their information.

Our cookie policy explains the small amount of information we store in your browser.

If we change this policy, we will update the date at the top of this page. If the change is important, we will tell you by email.