Privacy Policy

Last updated: 14th Jan 2026

At Etch & Ember, we are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, place an order, or contact us.

1. Who We Are

Etch & Ember is the data controller responsible for your personal data.

If you have any questions about this policy or how your data is handled, you can contact us at:

Email: etchandemberuk@gmail.com
Social Media: Direct message via our official pages

2. Personal Data We Collect

We may collect and process the following personal data:

Name
Email address
Telephone number
Billing and delivery address
Order details and custom design requests
Images, drawings, or files you provide for engraving
Messages sent via our website, email, or social media
We do not knowingly collect data relating to children without parental consent.

3. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

Contract – to process and fulfil your orders
Legitimate interests – to communicate with you, provide customer support, and improve our services
Legal obligation – to comply with accounting, tax, or legal requirements
Consent – where you have explicitly provided it (for example, marketing communications, if applicable)

4. How We Use Your Data

We use your personal data to:

Process and deliver orders
Communicate with you about enquiries or custom designs
Create personalised engraved products
Manage payments and deliveries
Maintain business records and comply with legal obligations
We will not use your data for purposes outside those described in this policy.

5. Sharing Your Data

We do not sell or rent your personal data.
We may share your data with trusted third parties only where necessary, including:
Payment service providers
Delivery and courier services
Website hosting and IT service providers
All third parties are required to process your data securely and in compliance with UK data protection laws.

6. Payments

Payments made through our website are processed securely by third-party payment providers. We do not store or have access to your full payment card details.

7. Cookies and Analytics

Our website may use cookies or similar technologies to improve functionality and analyse website traffic. You can manage or disable cookies through your browser settings.

8. Data Retention

We retain personal data only for as long as necessary to:

Fulfil orders
Meet legal, accounting, or tax obligations
Resolve disputes or enquiries
When your data is no longer required, it will be securely deleted or anonymised.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. While no online system is completely secure, we take reasonable steps to safeguard your information.

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

Access your personal data
Request correction of inaccurate data
Request erasure of your data (where legally permitted)
Object to or restrict processing
Request data portability
Withdraw consent at any time (where applicable)
To exercise these rights, please contact us using the details above.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

11. Third-Party Links

Our website may contain links to third-party websites or social media platforms. We are not responsible for their privacy practices or content.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.