Privacy policy

Last updated: 17 June 2026

Clavis & Claustra operates this website and online store. This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, contact us, create an account, place an order, or otherwise interact with us.

For the purpose of applicable data protection laws, including the UK GDPR, Clavis & Claustra is the data controller of your personal information.

This policy should be read alongside our Terms of Service, Refund Policy, Shipping Policy and Cookie Policy.

Contact details

If you have any questions about this Privacy Policy, how we handle your personal information, or if you would like to exercise your privacy rights, you can contact us using the details below:

Clavis & Claustra
5 Lord’s Close
Giggleswick
North Yorkshire
BD24 0EG
United Kingdom

Email: clavisandclaustra@gmail.com
Phone: +44 7790 681407

Personal information we collect

The personal information we collect depends on how you use our website and services. This may include:

Contact details, such as your name, email address, phone number, billing address and shipping address.
Order and transaction information, such as products purchased, items placed in your basket, order history, delivery details, payment status, returns, refunds and customer service records.
Account information, such as your email address, password, account preferences and order history, where you create or use a customer account.
Payment information, such as payment method, payment status and billing details. We do not directly store your full card details; payments are processed through Shopify and payment providers.
Communications, such as information you provide when contacting us through the contact form, email, Etsy messages or other channels. This may include your name, email address, phone number and message.
Marketing preferences, such as whether you have opted in to receive marketing emails and whether you have unsubscribed.
Device and usage information, such as IP address, browser type, device information, pages viewed, website interactions, cookie identifiers and similar technical information.
Accounting and business records, such as invoices, transaction records, order records and payment records.

How we collect personal information

We may collect personal information:

directly from you, for example when you place an order, create an account, contact us, or submit a form
automatically when you visit or interact with our website, including through cookies and similar technologies
from Shopify and other service providers who help us operate the website, process payments, manage orders, deliver products and provide customer support
from third-party marketplaces, such as Etsy, where you place an order or contact us through that platform
from third-party services where you interact with them through our website, such as payment, analytics or advertising services

How we use your personal information

We use your personal information for the following purposes:

To process and fulfil orders

We use your personal information to process purchases, take payment, confirm your order, arrange delivery, provide order updates, deal with returns or refunds, and provide customer support.

To operate and improve the website

We use personal information to operate our online store, maintain customer accounts, understand how visitors use the website, improve the shopping experience, troubleshoot issues and keep the website secure.

To respond to enquiries

If you contact us through the website, by email, through Etsy or by another method, we use the information you provide to respond to your enquiry and manage our communication with you.

To manage accounting and business records

We use order, payment and transaction information for accounting, bookkeeping, tax, financial record-keeping and business administration purposes. This may include processing relevant information in Xero or through an accountant/bookkeeping process.

To send marketing, where permitted

We may use your contact details to send marketing emails, updates or offers where you have chosen to receive them, such as by ticking a marketing opt-in box at checkout or signing up through the website.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in our emails or by contacting us directly.

We will still send you non-marketing messages where necessary, such as order confirmations, delivery updates, customer service replies or important information about your purchase.

To comply with legal obligations

We may use your personal information where necessary to comply with legal, tax, accounting, regulatory or record-keeping obligations.

For security and fraud prevention

We may use personal information to protect our website, customers and business, including to detect, investigate or prevent fraud, unauthorised activity, misuse of the website or other harmful activity.

Lawful bases for processing

Where UK GDPR or similar laws apply, we rely on the following lawful bases for processing personal information:

Contract: where processing is necessary to fulfil an order, deliver products, manage your account, or provide customer service connected to a purchase.
Legal obligation: where we need to keep records or comply with legal, tax, accounting or regulatory requirements.
Legitimate interests: where processing is necessary for running and improving our business, responding to enquiries, preventing fraud, keeping the website secure and maintaining appropriate business records.
Consent: where we rely on your consent for activities such as non-essential cookies, certain analytics or marketing communications.

Where we rely on consent, you can withdraw your consent at any time.

How we share personal information

We may share your personal information with trusted third parties where this is necessary to operate our website, fulfil orders, process payments, provide customer support, comply with legal obligations, or improve our services.

This may include:

Shopify, which hosts and powers our online store
Etsy, where you purchase from us or contact us through our Etsy shop
payment providers, including Shopify Payments, Shop Pay, card payment providers, Apple Pay and Google Pay
Royal Mail, where needed to deliver your order
Xero, where used for accounting, bookkeeping, tax and financial record-keeping
Google & YouTube, where enabled for analytics, measurement or advertising purposes, subject to your cookie and consent choices
qikify Form Builder, where used to manage website forms or enquiries
email and hosting providers, where used to manage communications with you
professional advisers, accountants, regulators or authorities where required by law

We do not sell your personal information in the ordinary sense. Some privacy laws define certain types of advertising, analytics or data sharing as a “sale” or “sharing” of personal information. Where this applies, you may have the right to opt out through the privacy choices or cookie controls available on our website.

Shopify

Our online store is powered by Shopify. Shopify processes personal information on our behalf so that we can operate the website, process orders, take payments, manage customer accounts, provide checkout functionality and deliver the online shopping experience.

Information submitted through the website may be processed by Shopify and its service providers. Shopify may also process some information for its own purposes, such as fraud prevention, security, analytics, service improvement and features connected to Shopify services.

You can find more information about how Shopify handles personal information in Shopify’s own privacy materials.

Etsy

We may also sell products through Etsy. If you place an order through Etsy or contact us through Etsy, Etsy will process your personal information in accordance with Etsy’s own privacy policy and terms.

We may receive and process information from Etsy where necessary to manage your order, respond to your enquiry, arrange delivery, provide customer support, handle returns or refunds, and maintain business records.

Payments

Payments are processed through Shopify and supported payment providers. Depending on the payment method you choose, your personal information may be processed by Shopify Payments, Shop Pay, card payment providers, Apple Pay, Google Pay or other relevant payment services.

We do not directly store your full payment card details.

Delivery

We use Royal Mail to deliver orders. Where necessary, we may share your name, delivery address, order information and, where provided, your phone number or email address with Royal Mail or other delivery services used to fulfil your order.

Accounting and bookkeeping

We use Xero for accounting and bookkeeping. Order, invoice, payment and transaction information may be processed in Xero where necessary for accounting, tax, financial record-keeping and business administration purposes.

We may also share relevant information with accountants, bookkeepers or professional advisers where needed to manage our business records and comply with legal obligations.

Contact forms and enquiries

If you submit an enquiry through our contact form, we collect the information you provide, which may include your name, email address, phone number and message.

We use this information to respond to your enquiry and manage any follow-up communication. Please avoid sending sensitive or confidential information through the contact form unless it is necessary.

Cookies and similar technologies

We use cookies and similar technologies to operate our website, provide essential shopping features, understand how visitors use the website, improve performance and, where enabled, support analytics or advertising.

Some cookies are strictly necessary for the website to work, such as those used for the basket, checkout, security and account functionality. Other cookies, such as analytics or advertising cookies, are used only where permitted and subject to your cookie choices.

When you visit the website, you may be shown a cookie banner allowing you to accept, reject or manage non-essential cookies. You can update your cookie preferences using the cookie controls available on the website.

For more information, please see our Cookie Policy.

International transfers

Some of our service providers, including Shopify, Etsy, Xero, Google and other technology providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we rely on appropriate safeguards where required by law, such as adequacy decisions, standard contractual clauses, UK-approved transfer mechanisms, or equivalent protections.

How long we keep personal information

We keep personal information only for as long as necessary for the purposes described in this Privacy Policy.

This may include keeping information for as long as needed to:

process and fulfil orders
provide customer support
maintain customer accounts
comply with tax, accounting and legal obligations
resolve disputes
prevent fraud or misuse
maintain appropriate business records

The exact retention period depends on the type of information and the reason it is held.

Security

We take reasonable steps to protect personal information from unauthorised access, loss, misuse or disclosure.

However, no website, online store, email system or internet transmission is completely secure. You should avoid sending sensitive or confidential information to us unless it is necessary.

Your rights

Depending on where you live and subject to applicable law, you may have rights in relation to your personal information, including the right to:

request access to the personal information we hold about you
request correction of inaccurate or incomplete information
request deletion of your personal information
object to certain types of processing
request restriction of processing
request transfer of your personal information
withdraw consent where processing is based on consent
opt out of marketing communications

These rights are not absolute and may be subject to legal exceptions. For example, we may need to retain certain information to comply with legal, tax, accounting or fraud prevention obligations.

To exercise your rights, please contact us at clavisandclaustra@gmail.com.

We may need to verify your identity before responding to your request.

Marketing preferences

If you have opted in to receive marketing emails from us, you can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us.

Unsubscribing from marketing will not stop essential transactional emails, such as order confirmations, delivery updates or customer service messages.

Complaints

If you are unhappy with how we handle your personal information, please contact us first so that we can try to resolve your concern.

If you are based in the UK, you also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator.

You can contact the ICO through its website at: https://ico.org.uk/

Third-party links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of third-party websites. You should review the privacy policies of any third-party websites you visit.

Children

Our website and services are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so that we can take appropriate steps.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, legal obligations or business practices.

When we update this policy, we will change the “Last updated” date at the top of this page.