Privacy notice
The short version
- When you buy: we need your name, address and email to make and deliver your shirt.
- Card details: they go to Stripe, our payment company. We never see them.
- Printing and posting: Printful prints and posts your shirt, so they get your name and address.
- What we don't do: we never sell your data, never use it for advertising, and don't use tracking cookies.
- Your rights: you can ask what we hold about you, ask us to correct it, or ask us to delete it. Email hello@gerbertcheddar.com.
Who we are
This shop is run by Harry Webb, a sole trader, trading as Gerbert Cheddar. We decide how your personal data is used, which makes us the "controller" under UK data protection law.
- Address: 8 Russet Hill, Gerrards Cross, SL9 8JY
- Email: hello@gerbertcheddar.com
What we collect when you buy
- your name
- delivery address
- email address
- what you ordered: size, colour, and the country it's going to
Why: to make, deliver and support your order. Legal basis: contract, meaning we need it to do what you paid us for.
Tax records: we keep order records for 6 years, because HMRC requires business records to be kept that long. Legal basis: legal obligation.
Who we share it with
We only share what each company needs to do its job.
| Who | What for | What they get |
|---|---|---|
| Stripe | taking payment | name, email, billing and delivery details, card details (entered on Stripe's own page) |
| Printful | printing and posting your shirt | name, delivery address, email, what you ordered |
| Cloudflare | hosting the website | technical data such as IP addresses, used briefly for security |
| Resend | sending your dispatch email | email address and the message |
Some of these companies are based in, or process data in, the United States. They protect UK personal data using safeguards approved under UK law. We never sell personal data or share it for advertising.
How long we keep things
| What | How long |
|---|---|
| Order records | 6 years (HMRC) |
| Security logs | a few days |
Your rights
You can ask us to:
- show you what we hold about you
- correct anything wrong
- delete it, unless we have to keep it for tax
- stop using it, or object to how it's used
- give you your data in a format you can take elsewhere
Email hello@gerbertcheddar.com. We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to sort it out first.
Under 18?
We treat your data the same careful way as everyone else's. Please ask a parent or guardian before you buy anything. If anything here is confusing, email us, or ask someone you trust to go through it with you.
Cookies
We only use cookies the site needs to work. We don't use advertising or tracking cookies, so there's no cookie banner. Stripe's payment page may set its own cookies to prevent fraud.
Changes
If we change this notice, we'll update it here. If a change affects how we use your data, we'll say so on the site.