UNFINISHED — NOT A POLICY
Privacy
What is kept about a buyer, why, and how to have it deleted.
THIS PAGE HAS NOT BEEN WRITTEN
Nothing below is a policy.
What follows is the checklist of what this page has to say — not the thing itself. The wording is Anastasiia Uschapivska's to write, or her solicitor's, because it binds her business and not the people who built the site. Nothing here creates or limits any right. Until it is written, ask on Instagram @nastya.ushchapo and you will get a straight answer.
What this page has to contain
- Who the controller is: legal name and a contact address for data questions.
- What is stored: name, postal address, email address, the note left with an order, and mailing-list subscriptions.
- Why each is held and on what lawful basis — performing the sale contract for an order, consent for the mailing list.
- That Supabase hosts the database and the images as processor, where it stores them, and who processes card payments.
- How long each record is kept: sale records have an HMRC clock of six years; a mailing-list subscription does not run on that clock.
- The buyer's rights — access, correction, deletion, objection, withdrawing consent — and the address a request goes to.
- The right to complain to the Information Commissioner's Office.
- Anything set in the visitor's browser: the basket, the admin session cookie, and whether any analytics runs at all.