Privacy policy

Who is responsible for your data

Kim Kho Studio is the data controller for the information described here.

The short version

• There are no analytics and no tracking cookies on this site. Nothing follows you around the internet afterwards.
• Your basket is stored in your own browser and is never sent to us.
• We only see your details if you place an order or send a message.
• There is no mailing list, so nothing to unsubscribe from.

What we collect, and why

When you browse

Nothing that identifies you. The site keeps your basket in your browser's local storage so it survives a refresh — that stays on your device, and clearing your browser data removes it. It is strictly necessary to make the shop work, so it isn't something we ask consent for.

Our hosting provider, Vercel, keeps short-lived server logs that can include your IP address. That's a normal part of running a website securely and spotting abuse.

When you message us

The contact form opens your own email app with the message written out. Nothing is sent through this website, and we hold nothing until you actually press send. After that we have whatever you wrote and your email address, sitting in an inbox, so we can reply.

When you order

To send you stickers we need your name, delivery address, email address and what you bought. We keep those records so we can post your order, answer questions about it, handle returns and satisfy HMRC — business records have to be kept for six years.

We never see your card details. Payments are handled by Stripe, who take the card information directly. Your card number does not pass through this website and is not stored by us.

The lawful basis

• Performing our contract with you — processing and posting an order you placed.
• Legal obligation — keeping sales records for tax.
• Legitimate interests — replying to your message, and keeping the site secure and working.

Who else sees it

Only the companies needed to actually get an order to your door:

• Stripe — takes the payment and handles card details.
• Royal Mail (or whichever carrier is used) — needs your name and address printed on the parcel.
• Vercel — hosts the website.
• Google — provides the email account we reply from.

We do not sell your information, and we do not share it for anyone else's marketing. Some of these companies are based outside the UK; when that's the case they operate under transfer safeguards approved for UK data.

How long we keep it

• Order records — six years from the end of the tax year, because HMRC requires it.
• Emails — up to two years, then deleted.
• Server logs — a short period set by our host, usually under a month.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of what we hold about you;
• correct anything that's wrong;
• delete it — though we can't delete order records we're legally required to keep;
• restrict or object to how we use it;
• send it to you, or another provider, in a portable format.

Email kimkhostudio@gmail.com and we'll sort it out. There's no charge, and we'll reply within a month.

If you're unhappy with how we've handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd rather you told us first so we can put it right.

Children

This shop is intended for adults. We don't knowingly collect information from children — if you're under 16, please ask a parent to order for you.

Changes

If this policy changes, the date at the top of the page changes with it.