Privacy notice

Who we are

The data controller is Oliver Hobbs, trading as Lineologie, of 151 Reigate Avenue, Sutton, Surrey, SM1 3JR, United Kingdom. If you have any questions about this notice or your data, email pipandquill@gmail.com.

What we collect

• Order details. When you buy a pack we collect your email address, the country of your billing address and the details of your order: which pack you bought, what you paid and when.
• Payment. Payment is handled by Stripe, who collect your card details directly. We receive confirmation that you have paid, not your card details.
• Analytics. Information about how the pages on this site are used, such as which pages are visited and which buttons are clicked.
• Account. If you sign in, your email address, the packs you save as favourites, and when you signed in. Signing in is optional: you can buy without an account.

Why we use it and our lawful basis

• To take your order, deliver your download and send you your order emails. This is necessary to perform our contract with you.
• To understand how the site is used so we can improve it, and to detect and prevent fraud. This is in our legitimate interests in running and protecting the shop, and we use the data only in ways you would reasonably expect.
• To offer you Google's survey about your purchase, so the shop can earn independent reviews. This is in our legitimate interests, and Google surveys you only if you agree.
• To keep records of orders for tax and accounting. This is a legal obligation.
• Where the law requires your consent, we ask for it first, and you can withdraw it at any time.

Who processes data for us

We use a small number of service providers to run the shop. They process personal data only on our instructions and under contracts that protect it.

• Stripe takes payments.
• Resend sends our order emails.
• PostHog provides our analytics.
• Vercel hosts the site.
• Supabase hosts our database.
• Cloudflare serves our images and downloads.

Google Customer Reviews. After you buy, the order confirmation page may show Google's offer to email you a short survey about your purchase. To make that offer we give Google your email address, your order number, your country and the date of your order. If you agree, Google emails you the survey and uses your answers for the shop's rating on Google; if you decline or close the offer, you won't be surveyed. Google uses this information under the Google Privacy Policy.

Some of these providers are based outside the UK. Where personal data is transferred outside the UK, we make sure it is protected by safeguards recognised under UK data protection law. We don't sell your personal data, and apart from the Google Customer Reviews offer above, we don't share it with anyone else unless the law requires us to.

How long we keep it

• Order records are kept for six years, as UK tax law requires.
• Analytics data is kept no longer than we need it to understand how the site is used.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased, where there is no good reason for us to keep it;
• restrict how we use your data;
• receive the data you gave us in a portable, machine-readable form;
• object to our use of your data, including analytics based on our legitimate interests.

To exercise any of these rights, email us at pipandquill@gmail.com. We may need to keep some order records to meet our tax obligations even if you ask us to erase your data.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk. We'd welcome the chance to help first.

Cookies and storage

We don't use advertising cookies, and our analytics runs without cookies. If you sign in, a cookie keeps you signed in until you sign out or it runs out after 90 days. The site also keeps a small amount of information in your browser's storage to remember your settings, your basket and favourites, and whether you are in a test group when we try out a change to the site. You can clear it at any time through your browser.

Contact

Questions about this notice or your data: email pipandquill@gmail.com. Our contact page has our full business details.