Privacy

Short version: I keep what an order needs and what the law makes me keep, and nothing else. If you have asked for emails I keep your address until you tell me to stop, and one click does that. There is no advertising tracking on this site and nothing here is sold to anybody.

Who is responsible

CoreMorph Limited, trading as SquareMorph. Company number 12617354. Registered office: The Carlile Institute Business Centre, Huddersfield Road, Meltham, West Yorkshire, HD9 4AJ. The studio, and the address to write to, is Flockton House, Audby Lane, Wetherby, West Yorkshire, LS22 7FD.

For anything on this page, email [email protected].

What I collect, and why

• When you order: your name, delivery address, email address and what you bought. I need these to send the cards and to email you about the order. Keeping them is also how VAT and company records work, which is why they stay for six years.
• When you sign up to emails: your email address, when you agreed, the wording you agreed to, and the fact that you clicked the link in the confirmation email. That last part is the evidence that you asked, which is what makes the email legal to send.
• When you use the site: your basket, held against a cookie for 30 days. The server also keeps ordinary logs of requests and errors for a short while, which include IP addresses.

Your card details never reach this site. Payment happens on Stripe's own pages, and what comes back is a reference and the last bit of an address. I could not see your card number if I wanted to.

Who else sees it

• Stripe takes the payment and holds the card details
• Mailgun sends the emails about your order
• MailerLite holds the mailing list, if you are on it
• Royal Mail gets the address, because something has to
• Krystal hosts the server, and Cloudflare sits in front of it

That is the list. Nothing is sold, and nothing is handed over for advertising.

What I do not do

There is no Google Analytics on this site, no Meta pixel, no advertising tags and no profiling. The old shop had two of those and this one has none, which is also why there is no cookie banner: there is nothing to ask you about.

Marketing

You only get emails from me if you asked twice: once by typing your address in, and again by clicking the link I send. Every email has an unsubscribe link, and it works immediately. Unsubscribing does not affect emails about an order you have placed.

Your rights

You can ask me what I hold about you, ask for it to be corrected, or ask for it to be deleted. Email [email protected] and I will answer within a month. Where an order is involved I have to keep the record for tax purposes even after you ask, and I will say so rather than quietly not doing it.

If you think I have got this wrong, you can complain to the Information Commissioner's Office. I would rather you told me first and gave me the chance to fix it.