Privacy Policy

This is a draft privacy notice prepared for review. It must be checked and completed before launch.

Who we are

Alif & Stone (“we”, “us”) is the controller of the personal data described below. [Add legal business name, trading address and ICO registration number if applicable.]

What we collect

• Design and enquiry details — the product, size, design and the personalisation text you enter (for example names, dates and messages), and an image of your preview.
• Contact details — your name and any phone number, email address or delivery address you give us, including through WhatsApp.
• Messages — what you send us through our contact form or WhatsApp.
• Technical data — a one-way hashed (non-reversible) version of your IP address used to prevent spam and abuse. We do not store your raw IP address.
• Analytics and marketing data — only if you accept these cookies (see Cookies below).

Why we use it and our lawful basis

• To respond to your enquiry, prepare your proof and fulfil your order — contract / steps prior to a contract.
• To keep business and accounting records — legal obligation.
• To protect the website from spam and abuse — legitimate interests.
• To understand how the website is used and measure advertising — consent, which you can withdraw at any time.

WhatsApp

When you choose “Order via WhatsApp”, your message is sent using WhatsApp, which is operated by WhatsApp Ireland Limited / Meta. Their privacy policy applies to your use of WhatsApp.

Sharing

We share personal data only with service providers who help us run the business (for example website hosting, database and storage providers, payment providers and couriers), and where required by law. [List your processors, e.g. Vercel, Supabase, your courier and payment provider.]

How long we keep it

• Enquiries that do not become orders: deleted after 90 days.
• Orders: kept for 24 months after completion, then anonymised. [Confirm against your accounting obligations.]
• Contact messages: deleted after 12 months.

Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its use, and to withdraw consent. Use the data request form or message us. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

We use strictly necessary storage to keep the site working (for example remembering your slate design while you work on it, and keeping administrators signed in). Analytics and marketing cookies are only set if you choose to allow them, and you can change your choice at any time using “Cookie settings” in the footer.