Legal

Privacy

This is a small workshop, not an advertising business. We collect what we need to build your box and get it to you, and nothing else.

Last updated August 2026

What we collect

When you place an order: your name, email address, postal address, and phone number if you give one, together with the specification of the box you designed and any artwork or text you upload for engraving.

When you use the contact form: your name, email address, subject and message.

That is the whole list. There is no account to create, and we ask for nothing that isn't used to make or send your commission.

Card details

We never see your card. Payments are handled by Stripe, and your card details are sent directly from your browser to Stripe without passing through this website or its database.

What we store is Stripe's reference for the payment and the amounts charged, so an order can be matched to its payment.

Cookies and tracking

There is no analytics, no advertising network, no tracking pixel and no third-party script watching you use this site.

The only cookies are sign-in cookies for the private workshop area, which only the maker uses. That is why you have never been asked to accept cookies here — there is nothing to accept.

Spam protection

To stop the contact form being abused, we record a one-way cryptographic hash of the sender's IP address and the time it was sent. A hash cannot be turned back into an address; it only lets us recognise that the same sender has submitted repeatedly within a few minutes. The address itself is never stored.

Who else handles it

We use a small number of services to run the site, and they only ever process this information on our behalf: Stripe for payments, Vercel for hosting and file storage, Neon for the database, and Resend for sending email.

We do not sell your information, share it for advertising, or pass it to anyone else.

How long we keep it

Order records are kept for as long as we are required to keep business and tax records. Engraving artwork is kept with the order, because it is the manufacturing record of what was made.

Contact-form messages are kept until they have been dealt with, and then deleted periodically.

Your choices

Write to us and we will tell you what we hold about you, correct it, or delete it. The one exception is records we are legally required to keep, such as those for tax — we cannot delete those on request.

Children

This site is not directed at children and we do not knowingly collect information from them.

Changes

If this notice changes, the date at the top of the page changes with it.

Questions about any of this? Write to the workshop.