Privacy Policy

Who we are

Ink & Stone (inkandstone.co.uk) sells UV-printed stone slices cut from genuine Dorset stone. This policy explains what personal data we collect when you browse, buy from, or hold an account with us, and how we use, store and protect it.

What we collect

• Account data: name, email address, and authentication details, handled by our sign-in provider (Clerk). We never see or store your password.
• Order data: delivery address, the image or artwork you upload for printing, and your order/proof history.
• Payment data: processed directly by our payment provider over encrypted, PCI-compliant infrastructure. We do not store card numbers.
• Usage data: performance and error analytics (page load timings, pages viewed, approximate location from IP) to understand how the shop is used and to fix what's slow or broken. Collected only if you accept analytics on the cookie notice — if you decline, or haven't chosen yet, none of it is collected. See our Cookie Notice for details.

Why we collect it (lawful basis)

• Contract: to take your order, print your slice, arrange delivery, and provide customer support.
• Legal obligation: to keep records required for tax, accounting and consumer-rights purposes.
• Legitimate interest: to keep the shop secure, to improve it, and to prevent fraud.
• Consent: for non-essential cookies and any marketing emails — you can withdraw this at any time.

Your uploaded artwork

Images and artwork you upload for printing are used solely to produce your order and to generate the proof we send you before printing. We do not sell, publish, or reuse your artwork for marketing without your separate, explicit permission.

Who we share data with

We share the minimum necessary data with the third parties who help us run the shop: our authentication provider (Clerk), our payment processor, and the couriers who deliver your order. Each acts under its own data protection obligations. We do not sell your personal data to anyone.

How long we keep it

Account data is kept for as long as you hold an account. Order and payment records are kept for the period required by UK tax law (currently six years). You can request deletion of your account and personal data at any time — see below.

Your rights

Under UK GDPR you have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. If you have an account, you can download a full export or permanently delete your account and data from the account page. For anything else, contact us using the details below.

Contact & complaints

Questions about this policy or your data can be sent to [email protected]. If you're unhappy with how we've handled your data, you also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).