Privacy policy

Data controller

Katarina's Gifts, Reading, Berkshire, United Kingdom.

Contact: by message in the Katarina's Gifts! Facebook group.

What I process and why

• —Shop orders: name, email, phone, delivery address where applicable, the order contents and personalisation text — to make and deliver your gift and to communicate about the order. Legal basis: performance of a contract. Kept for 6 years (UK tax records).
• —Contact form and custom-gift enquiries: name, email, phone and your message — so that I can reply. Legal basis: steps prior to a contract / legitimate interest. Kept until resolved, at most 12 months.
• —Payments: made by bank transfer outside this website; I never see or store card details or your account access. I only see the incoming payment and its reference.
• —Visitor statistics: anonymous and first-party. I don’t store your name or full IP address — only an anonymised daily hash, pages visited, device and browser type and country. It runs only with your consent.

Cookies and local storage

• —Essential: your basket and your consent choice are stored in your browser (localStorage). The shop can’t work without them, so they can’t be switched off.
• —Analytics: only after you click “Accept all”. I don’t use third-party cookies or cross-site tracking.
• —You can change your choice at any time by clearing this site’s data in your browser settings.

Who I share data with

I never sell data or share it with third parties for marketing. I only use processors necessary to run the shop:

• —Cloudflare — website hosting, the order database and content delivery.
• —Resend — sends order confirmations and form messages to my email and to yours.
• —Royal Mail / carrier — name, address and phone for delivering your parcel.

Your rights

You have the right to access your data, have it corrected or erased, restrict processing, object, data portability and to withdraw consent at any time. Just write to me and I’ll take care of it.

• —You can complain to the Information Commissioner’s Office (ico.org.uk); customers in Slovakia also to the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).