Your data, kept simple.

We only collect what is needed to make and deliver your order:

• Order details — your name, email address, delivery address and phone number, collected at checkout so your order can be made, dispatched and tracked.
• Personalisation details— the name or wording you ask to have on your piece. This is used only to make your item. If it is someone else’s name (a gift), it is never used for anything beyond crafting that piece.
• Payment information — payments are processed securely by Shopify and its payment providers. We never see or store your card details.
• Messages — if you email or call us, we keep the conversation so we can help you with your order.

We do not buy data about you, track you around the web, or collect anything beyond what is listed here.

Your information is used to:

• Make your personalised piece and deliver it to you.
• Contact you about your order — confirmations, dispatch updates, or questions about your personalisation.
• Reply to messages you send us.
• Keep the records we are legally required to keep (for example, for tax purposes).

We will never sell your information, and we will never add you to a marketing list without your consent.

This site keeps things minimal. Your browser stores a single cart identifier locally so your basket is still there when you come back — it contains no personal details. When you proceed to checkout, Shopify sets the cookies it needs to process your order securely.

We do not run advertising or cross-site tracking cookies.

Your information is only shared with the services needed to get your order to you:

• Shopify— our store and checkout run on Shopify, which securely stores order and customer information. You can read Shopify’s own privacy policy on their website.
• Payment providers — to take your payment securely.
• Postal carriers — your name and address are shared with the courier so your parcel can reach you.

Nobody else. No data brokers, no advertisers.

Order records are kept for as long as UK law requires (typically six years, for tax and accounting). Emails and messages are kept only as long as they are useful for helping you. Personalisation details live with your order record and nowhere else.

Under UK GDPR you have the right to:

• Ask for a copy of the information we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete your information, where we are not legally required to keep it.
• Object to, or ask us to restrict, how your information is used.

To exercise any of these, just email tasbeehboutique@gmail.com. If you are unhappy with how your data has been handled, you also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

If this policy changes, the updated version will be posted on this page with a new “last updated” date. Any change will only ever be to describe more clearly how your data is handled — the principle stays the same: we collect the minimum, and it is yours.