Privacy Policy
Last updated: [Date]
1. Who we are
EDOFEDE Studio is operated by [Legal name / Company name] ("EDOFEDE Studio", "we", "us", "our"), [Business address]. We are the controller of your personal data. Contact us about privacy at francesca27@me.com.
This policy explains what personal data we collect when you visit our website, buy from us, commission bespoke work or contact us, and how we use and protect it, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
2. The information we collect
Identity and contact details: name, email address, phone number, delivery and billing address.
Business details (trade clients): company name, job title, business address, VAT number.
Order details: products bought, order history, delivery instructions, returns.
Commission details: briefs, measurements, room plans, photos, mood boards and correspondence you send us for bespoke work.
Payment details: card payments are processed securely by Shopify Payments. We do not see or store your full card number.
Technical data: IP address, browser and device type, pages visited, collected through cookies and analytics (see our Cookie Policy).
Marketing preferences: whether you have agreed to receive our emails.
We do not knowingly collect data from children under 13.
3. How and why we use it
| What we do | Legal basis |
|---|---|
| Process, deliver and handle returns for your order | Performance of a contract |
| Quote for, design and produce bespoke or trade commissions | Performance of a contract / steps before entering a contract |
| Respond to enquiries and customer service requests | Legitimate interests (running our business) |
| Keep accounting and tax records | Legal obligation |
| Send newsletters and offers | Your consent (you can withdraw at any time), or for existing customers our legitimate interests under the PECR "soft opt-in" with an easy opt-out |
| Analytics to understand and improve our website | Your consent via our cookie banner |
| Prevent fraud and keep our website secure | Legitimate interests |
4. Who we share it with
We never sell your personal data. We share it only with trusted providers who help us run our business, and only as much as they need:
Shopify Payments — payment processing [Delivery provider] — delivering your order [Website host, e.g. Lovable / Supabase] — website and database hosting [Email marketing tool] — sending newsletters [Analytics tool] — website analytics Our accountant, professional advisers, and authorities such as HMRC where the law requires Makers or workshops producing your bespoke piece, where needed to complete it All our providers are bound by contract to keep your data secure and use it only on our instructions.
5. International transfers
Some of our providers may store data outside the UK (for example in the EU or USA).
Where they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
Order and accounting records: 6 years after the end of the financial year (required for tax).
Bespoke commission files: 6 years after completion, so we can deal with any warranty or contract questions.
Enquiries that don't lead to an order: 12 months.
Marketing list: until you unsubscribe, after which we keep only a suppression record so we don't email you again.
Analytics data: as set in our analytics tool, no more than 26 months.
7. Your rights
Under UK data protection law you have the right to:
access a copy of your personal data; have inaccurate data corrected; have your data deleted in certain circumstances; restrict or object to our use of your data, including for direct marketing (an absolute right); receive your data in a portable format; withdraw consent at any time, where we rely on consent.
To use any of these rights, email francesca27@me.com. We will reply within one month. There is normally no charge.
8. Security
We use secure, encrypted (HTTPS) connections and reputable providers, and limit access to your data to people who need it. No online system is completely secure, but we take reasonable steps to protect your information.
9. Complaints
If you are unhappy with how we have handled your data, please contact us first at francesca27@me.com so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, helpline 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with the date it was last updated.