Legal

Privacy Policy

Last updated: Draft — not yet published

Who we are

This website is operated by [legal business name], trading as Forme & Found (“we”, “us”). We are the controller of the personal data described in this policy.

Registered or trading address: [address]
Contact email: [email address]
ICO registration number, if applicable: [number]

Information we collect

Depending on how you use the site, this may include:

Contact details you give us, such as your name and email address.
Order details, such as delivery address and the items you buy.
Payment information — processed by our payment provider [e.g. Stripe]; we do not store full card details.
Messages you send us through the contact form or by email.
Technical information, such as browser type and pages visited [confirm whether any analytics are used].

How we use your information

To process and deliver your orders.
To respond to your enquiries.
To send marketing emails, only if you have opted in.
To meet our legal and accounting obligations.

Lawful basis for processing

[Confirm the lawful basis under UK GDPR for each purpose — e.g. contract, legal obligation, legitimate interests, consent]

We only share personal data with service providers who help us run the shop, such as:

Payment processing: [provider]
Delivery: [e.g. Royal Mail]
Website hosting and database: [e.g. Cloudflare, Supabase]
Email: [provider, if any]

International transfers: [describe any transfers outside the UK and safeguards]

How long we keep it

[Set retention periods for order, account, enquiry and marketing data]

Your rights

Under UK data protection law you have rights including access, rectification, erasure, restriction, objection and data portability, and the right to withdraw consent at any time. To exercise these rights, contact us using the details above.

Cookies & local storage

This site currently stores your shopping bag contents in your browser’s local storage so that your bag is remembered between visits. This information stays on your device and is not sent to us. [List any cookies or analytics added later, and consent approach]

Contact & complaints

If you have a concern about how we handle your data, please contact us first at [email address]. You also have the right to complain to the Information Commissioner’s Office (ICO).