Privacy Policy

This policy explains what personal information Illyrian Roots collects when you visit our website or buy from us, why we collect it, and your rights. Illyrian Roots is responsible for your information (the "data controller").

Contact: hello@illyrianroots.com · 50 Well Lane, Wolverhampton, WV11 1XR, United Kingdom

What we collect

• When you order: your name, email address, phone number, delivery and billing address, and what you bought.
• Payment details: these are entered on Stripe's secure payment page. We never see or store your full card number.
• When you email us: your email address and anything you include in your message.
• Your basket: the items in your cart and your chosen delivery region are saved in your own browser (local storage) so they are still there when you come back. This stays on your device and is not sent to us until you check out.

Why we use it

• To make, send and deliver your order, and to contact you about it. This is needed to fulfil our contract with you.
• To deal with returns, refunds and questions.
• To keep accounting and tax records, which the law requires.
• To prevent fraud and keep our website secure. This is in our legitimate interests.

If you sign up to our newsletter, we keep your email address (stored with Netlify) to send you news about new drops. You can unsubscribe at any time by emailing us.

We do not sell your information, and we do not send you marketing emails unless you have asked us to.

Who we share it with

We only share what each company needs to do its job:

• Stripe, to take payments securely.
• Printful, which makes and posts your order, and its delivery partners.
• Netlify, which hosts our website.
• Cloudflare Web Analytics, which counts visits to our website (pages viewed, country, device type and how you found us). It does not use cookies or identify you personally.

Some of these companies store data outside the UK, including in the USA. Where they do, they use approved safeguards such as standard contractual clauses to protect it.

Cookies

We do not use advertising or tracking cookies. Our visitor statistics (Cloudflare Web Analytics) work without cookies. Stripe may set cookies on its payment page to process your payment safely and prevent fraud.

How long we keep it

We keep order records for 6 years, because UK tax law requires it. Emails that are not about an order are deleted after 2 years.

Your rights

You can ask us to give you a copy of your information, correct it, delete it, or stop using it. Email hello@illyrianroots.com and we will reply within one month. Some information, like order records, we must keep for legal reasons.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.