Privacy
Short version: I don't sell your data, I don't run ads, and I only collect what I need to run the site and post you a print. This page spells out the detail. I'm Ed, I run Charity Shot as a sole trader, and I'm the data controller. Reach me at hey@charityshot.co.uk.
What I collect, and why
Analytics. I use Plausible (self-hosted, not Google) to see roughly how many people visit and which pages they read. It's privacy-friendly by design: no cookies, no personal data, no cross-site tracking, your IP isn't stored. It tells me a page got 50 views, not who you are. Legal basis: legitimate interest in knowing whether the site works.
Orders. If you buy a print I need your name, email and delivery address to get it made and posted. Legal basis: performing our contract (you bought a thing, I send the thing).
Payment. Card payments go through Stripe on their own hosted checkout. Your card number never touches this site or my servers, I never see it. Stripe handles it as a payment processor.
Email. If you email me, I keep that email so I can reply and keep track of the conversation.
Who I share it with
Only the people needed to actually deliver the order:
- Stripe — takes the payment.
- Prodigi — the print network that makes and ships your print. They get your name and delivery address so the parcel reaches you.
- Cloudflare — hosts the site and serves the pages.
- Plausible (self-hosted) — privacy-friendly analytics.
That's it. No data brokers, no ad networks, nobody buys a list off me.
How long I keep it
Order records I keep for 6 years, because HMRC expects sellers to hold sales records that long. Analytics is aggregate and kept while it's useful. Emails I keep until they're no longer relevant, then bin them.
Your rights
Under UK GDPR you can ask me to show you the data I hold on you, correct it, or delete it (where I'm not legally required to keep it, like tax records). Just email me.
Cookies
This site sets no cookies at all. Plausible is cookieless, so there's no cookie banner to click through. Stripe may set cookies on its own checkout page to process your payment securely and spot fraud, that's on their domain during checkout.
Last updated: [DATE].