THE LITTLE DETAILS
Your details, treated thoughtfully.
This notice explains how Made and Found UK uses personal information when you use the shop.
1. Who is responsible
A Thompsett, sole trader, trading as Made and Found UK, is responsible for personal information used for this shop. Business address: 8 Millview Meadows, Rochford, Essex, SS4 1EF. Contact hello@madeandfounduk.com for privacy questions or rights requests.
2. Information we use
Depending on how you use the shop, we may use your name, email, billing and delivery address, order and payment references, products and variants, personalisation details, images you upload, support and design-request messages, newsletter choices and limited security information such as rate-limit records and session identifiers. Stripe processes card details; we do not collect or store your full card number or security code.
Please do not send sensitive information that is not needed for your order, or images and text you do not have permission to share.
3. Why we use it
We use information to take steps you request before purchase and to perform our contract: respond to questions and design requests, take payment, prepare personalisation, deliver physical or digital products, and handle returns and faults. We use relevant records to meet legal and tax obligations. We use limited security and service information for our legitimate interests in protecting the shop, preventing abuse and handling correspondence. Newsletter messages are sent only if you choose to subscribe; you can unsubscribe at any time.
4. Who receives information
Cloudflare provides hosting, database, storage, security and administrator access. Stripe processes payments. Resend sends transactional email and newsletter messages. For a physical order, we share details needed for fulfilment with Printify, the selected print provider and carrier. This may include the recipient’s name and address, product and approved artwork. Reference uploads are reviewed and prepared before any supplier submission. We do not publish private reference images or use them for marketing without separate permission. We do not sell personal information.
5. Processing outside the UK
Our service providers and fulfilment partners may process information outside the UK. Where a restricted transfer takes place, we use a transfer mechanism permitted by UK data protection law. Contact hello@madeandfounduk.com to ask about the transfer arrangements and safeguards relevant to your information.
6. How long we keep information
Unused reference uploads expire after 30 days and are deleted unless they are linked to an order, fulfilment or active design request. Contact messages are deleted after 90 days. Closed or declined design requests are deleted 180 days after submission. Newsletter details are kept while you are subscribed; if you unsubscribe, we retain a suppression record so we do not send further marketing.
We retain order and accounting records for at least 5 years after the 31 January submission deadline for the relevant Self Assessment tax year, and longer where needed for a late return, HMRC enquiry, complaint or legal claim. Order-linked reference images and approved artwork are kept while needed to complete fulfilment, provide customer support, investigate quality issues and establish or defend legal claims. We review these files and delete them when they are no longer needed, unless a legal obligation or unresolved claim requires them for longer. Digital download links expire separately from the stored file.
Ready-made digital product files are kept while they are offered for sale. Bespoke digital files are kept while needed to supply the order and handle related support or legal claims.
7. Your choices and rights
You may ask to access or correct your information, and, where the law allows, to erase or restrict it. You may object to processing based on legitimate interests and request portability where that right applies. You can withdraw newsletter consent without affecting earlier processing. Some information must be retained to meet legal obligations or resolve a dispute. Contact hello@madeandfounduk.com; we may ask for proportionate information to verify your identity. You can complain to the Information Commissioner’s Office at ico.org.uk.
8. Security
We use protected administrator access and private storage for customer artwork. Uploads are limited by type and size and begin in quarantine for manual review; we do not describe them as malware-scanned. Access to order artwork is restricted to authorised administrators.
9. Changes
We may update this notice when the shop, its providers or its data practices change. The version available when you use the shop explains how we handle information at that time.