Privacy Policy
This policy explains how Hilary Harris, trading as Tangled Wire Creations (“we”, “us”), uses personal information when you visit tangledwirecreations.co.uk, shop, book a workshop, join a membership, create an account or get in touch.
We are the data controller. We are based in England. Our contact details are at the end of this page.
Who we are
Tangled Wire Creations is Hilary's studio shop: handcrafted copper wire jewellery, gift vouchers, and wire-weaving workshops. The public website is the Next.js storefront. Orders, customer accounts and catalogue data are stored in WooCommerce on our WordPress admin site (shop.tangledwirecreations.co.uk).
What we collect
Depending on how you use the site, we may collect:
- Identity and contact details — name, email address, phone number, billing and delivery address.
- Account details — email and password (the password is stored hashed on WordPress, not in a readable form), and order history.
- Order details — what you bought, prices, delivery choice, gift voucher codes we issue, and notes on the order.
- Payment information — payments are taken by Stripe. We do not store your full card number. We keep the payment status, amount and Stripe references needed to complete the order.
- Membership information — plan, renewal dates and workshop credits, if you subscribe to Silver Thread or Golden Thread.
- Messages — contact form enquiries, newsletter sign-ups, and emails you send us.
- Technical information — IP address and basic server logs used to run and secure the website.
- Visit statistics — which pages are viewed, roughly where in the world a visit came from, the browser or device type, and the referring site. This is collected by Plausible. It is not tied to your name or email, and Plausible does not store your IP address.
There is no mailing list software yet. If you join the newsletter, your email is sent to Hilary so she can keep it until a proper list (for example Mailchimp) is set up. We will not add you to a third-party marketing platform without telling you.
How we use it
We use personal information to:
- take and fulfil orders, including delivery and gift vouchers;
- run your account, membership and workshop credits;
- reply to enquiries and provide customer service;
- keep a note of newsletter interest until a list is in place;
- keep records we need for tax, accounting and legal claims;
- keep the website secure and working;
- see, in aggregate, which pages are used so we can improve the shop (Plausible).
The main lawful bases under UK GDPR are:
- Contract — to take your order, deliver it, issue a voucher, run a membership or answer a booking enquiry.
- Legitimate interests — to run and secure the website, keep business records, count visits with Plausible, and improve how the shop works, where that does not override your interests.
- Consent — for optional marketing messages, including the newsletter sign-up. You can ask us to stop at any time.
- Legal obligation — for example tax and accounting records.
Who we share it with
We only share what is needed, with:
- Stripe — to take card payments and run memberships. Stripe is a payment provider. See Stripe's privacy policy.
- Royal Mail or another courier — to deliver physical orders (name, address and contact details).
- Our email provider — to send order emails, voucher codes, and messages from the contact and newsletter forms.
- Our website hosting and development partners — so the storefront and WordPress shop can run. They process data on our instructions, not for their own marketing.
- Plausible — an EU analytics company we use for visitor counts (pages viewed, referrers, device and approximate location). They do not use cookies or build a profile of you. See Plausible's data policy.
- Bookwhen — only if you leave this site to book a workshop on Bookwhen. That booking is then with Bookwhen under their terms, until workshops move onto this site.
We do not sell your information. We do not use Google Analytics on this website. We do not run Facebook, Instagram or TikTok tracking pixels on this storefront.
Some processors (notably Stripe) may store or access data outside the UK. Where that happens, they rely on UK-approved safeguards such as the UK Extension to the EU-US Data Privacy Framework and/or standard contractual clauses. Plausible stores analytics data in the EU.
Analytics
We use Plausible to understand how the website is used: which pages are visited, how people arrived, and roughly which country or device they used. The lawful basis is our legitimate interest in running and improving a small shop website.
Plausible does not set cookies, does not use the data for advertising, and does not identify you as an individual. A short-lived use of IP address may happen on their servers to derive a country and to count unique visits, then the IP is discarded. We do not combine this with your orders or account.
The script only loads on the public shop (tangledwirecreations.co.uk), not on the preview host. You can block it with a browser content blocker if you prefer. The Cookie Policy has more detail.
How long we keep it
- Orders and invoices — usually at least six years after the tax year, which is what UK accounting records typically require.
- Account — for as long as the account is open, then deleted or anonymised when it is no longer needed.
- Contact and newsletter emails — long enough to reply and, for newsletter interest, until you ask us to stop or we move you onto a proper list with a clear opt-out.
- Server logs — for a short period, for security and troubleshooting.
- Plausible statistics — kept in our Plausible account for up to 24 months, then dropped from that reporting window.
Your rights
Under UK GDPR you can ask us to access, correct, erase or restrict your information, object to certain uses, or receive a copy in a portable format. Where we rely on consent, you can withdraw it. These rights are not always absolute — for example we may need to keep an invoice.
Email hilary@tangledwirecreations.co.uk and we will respond. You can also complain to the Information Commissioner's Office.
Children
This shop is aimed at adults. You must be 18 or over to create an account or place an order. We do not knowingly collect information from children.
Changes
If we change this policy we will update this page and the review date at the top. The Cookie Policy explains cookies, similar storage, and Plausible.
Contact
Hilary Harris
Tangled Wire Creations
16 Sycamore Road, Birstall, Leicester, LE4 4LT
hilary@tangledwirecreations.co.uk
07722 039781