Privacy Policy

Tiny Stitch UK ("we", "us", "our") respects your privacy. This policy explains what personal data we collect through tinystitchuk.com, why we collect it, and what your rights are. It applies to our enquiry form, our contact form, our artwork upload page, and general use of the website.

We don't sell your data, and we don't share it for anyone else's marketing. Your data is handled only by Tiny Stitch UK, Lintel Digital (the studio that builds and hosts this website for us) and the service providers listed in "Sharing your data" below.

1. Who we are

Tiny Stitch UK is a partnership between Julie-Anne Riseley and Jamie Riseley, trading as Tiny Stitch Embroidery and Print. We are a premium embroidery and print studio based in Cheshire and are the data controller for the personal data described in this policy. We decide why and how your personal data is used.

You can contact us at [email protected] or 07891 489 579.

Lintel Digital builds and hosts this website and processes data on our instructions as our data processor; see "Sharing your data" below.

2. The personal data we collect

When you send an enquiry, we collect: your first name and surname, email address, and optionally your phone number, business or organisation name, what you're looking for, approximate quantity, whether you already have a logo, how you heard about us, details about your project, and any artwork files you attach. We collect this information so that we can respond to your enquiry, understand your requirements and provide an accurate quotation for the work.

When you use our contact form, we collect: your first name and surname, email address, optionally your phone number, the type of enquiry, and your message.

Enquiry and contact form details (but not artwork files) are also recorded in our customer management system, described in "Sharing your data" below, so that we can follow them up.

When you use our artwork upload page, we collect: your first name and surname, email address, optionally your business name and an order or enquiry reference, and the files you send.

When you browse the website, we collect aggregated, anonymous analytics through Plausible, described in "Cookies and analytics" below. This doesn't identify you.

We don't ask for or knowingly collect any special category data through this website.

3. How we use your data, and our legal basis

4. Sharing your data

We share your data only where it's needed to run Tiny Stitch UK and this website:

• Lintel Digital builds and hosts this website, and stores the data you submit on infrastructure they manage on our behalf, under a data processing agreement. They don't use your data for their own purposes.
• Resend delivers the email notifications your enquiry, message or upload triggers. Resend is based in the United States and stores and processes data there. Where using Resend involves transferring your personal data outside the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses and Resend's participation in the EU-U.S. Data Privacy Framework and its UK Extension. You can ask us for further information about these safeguards by emailing [email protected].
• The Action provides and supports our customer management system (CRM), where the details from your enquiry or contact message are recorded so that we can follow them up. The CRM runs on HighLevel, a platform based in the United States. HighLevel handles the data as a data processor under its data processing terms, and doesn't sell it. Artwork files are not sent to the CRM. HighLevel stores data with Amazon Web Services and Google Cloud, and the sub-processors it lists on its website may process data in other countries too. Where this involves transferring your personal data outside the UK, the safeguards are the UK International Data Transfer Addendum to the EU Standard Contractual Clauses and HighLevel's certification to the EU-U.S. Data Privacy Framework and its UK Extension. You can read HighLevel's privacy policy and its list of sub-processors, or ask us for further information by emailing [email protected].

We never sell your data, and we don't share it with anyone for their own marketing.

5. Artwork you send us

Files you attach to an enquiry or send through our upload page are stored securely and are only accessible to Tiny Stitch UK and Lintel Digital staff who need them to manage or produce your order. Artwork files are not sent to our CRM.

We keep artwork on file so that we can use it for future orders and avoid asking you to send the same artwork again. We keep artwork for as long as we reasonably need it for these purposes, subject to regular review.

If you'd like us to remove a particular file sooner, email [email protected]. We will delete it unless we have a legitimate or legal reason to retain it.

6. How long we keep your data

We keep artwork on file for as long as we reasonably need it to manage your orders and to make it available for future orders, subject to regular review.

We keep enquiry and order records for as long as reasonably necessary to respond to you, deliver your order, maintain appropriate business records and meet our legal and accounting obligations. We review the information we hold and delete or anonymise it when we no longer need it for these purposes, unless we are legally required or otherwise entitled to keep it.

Details recorded in our CRM are kept for the same purposes, and reviewed in the same way, as our other enquiry and order records. HighLevel keeps them for as long as our CRM account is active. Once the service ends, it promptly deletes or returns them if we ask, apart from anything it must keep by law. If you ask us to delete your data, we will remove it from our CRM as well.

7. Cookies and analytics

This website doesn't use cookies. We use Plausible, a privacy-focused analytics tool, hosted by Lintel Digital on infrastructure they control rather than a third-party analytics company. Plausible doesn't use cookies or any other tracking technology, doesn't collect or store your IP address or any other personal data, and can't identify you individually or track you across other websites. It only tells us aggregate information, such as how many people visited a page.

Because it doesn't process personal data or use cookies, no cookie consent banner is needed.

8. Keeping your data secure

We take reasonable technical and organisational measures to protect your data, including restricting access to enquiry and artwork records to authorised Tiny Stitch UK and Lintel Digital staff (and, for our CRM, authorised staff of The Action), and limiting how many submissions our forms accept from one source in a short period to reduce abuse. Our CRM encrypts data in transit and at rest, and limits what each user can see by role.

9. Your rights

Under UK data protection law, you may have the right to:

• ask what personal data we hold about you and get a copy of it;
• ask us to correct inaccurate data;
• ask us to delete your data, or restrict how we use it, in some circumstances;
• object to us using your data where the law gives you a right to object; and
• ask for your data in a portable format, where the right to data portability applies.

Right to object

You have the right to object to processing where we rely on legitimate interests as our legal basis, subject to the circumstances and exceptions provided by law. You can exercise this right by emailing [email protected].

To exercise any of your rights, email [email protected]. We will apply your request to the details held in our CRM too. If you're not satisfied with our response, you can complain to the Information Commissioner's Office (ICO).

10. Children's privacy

This website is aimed at businesses and adults, and we don't knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time, for example if the way we collect or use data changes. The current version always applies.

12. Contact us

Questions about this policy, or about your data, are always welcome at [email protected] or 07891 489 579.