Privacy Policy

Lewis James Phillips respects your privacy. This policy explains what personal information we collect through this website, why we collect it, how long we keep it and the rights you have over it, as required by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

For the purposes of data protection law, Lewis James Phillips is the data controller of the personal information described here. Our name, address and contact details are set out at the foot of this page. If you have any question about how we handle your information, please get in touch.

What we collect and why

When you contact us

If you send us a message through the contact form, we collect the details you give us: your name, email address, telephone number and the content of your message. We use this to reply to you and to deal with your enquiry. Our lawful basis is that this is necessary for the steps you have asked us to take before entering into any agreement with you, and our legitimate interest in responding to people who contact us. Messages are held on our website and delivered to our email inbox, and we keep them for as long as we need to deal with your enquiry and for our own records.

Newsletter

If you sign up for our newsletter we collect your email address so that we can send it to you. We do this only with your consent, which you give by subscribing and can withdraw at any time using the unsubscribe link in any newsletter or by contacting us. We keep your address until you unsubscribe.

When you place an order

When you buy from us we collect your name, email address, telephone number, billing address and, for anything we deliver, the delivery address and any note you leave with the order, together with details of what you bought. We use these to take payment, to fulfil and deliver your order, to send you confirmation and dispatch emails and to deal with any query, return or refund. This is necessary to perform the contract between us. We keep order records for six years after the order, because tax and accounting law requires us to.

Payment is taken by Stripe. When you check out you are taken to Stripe’s secure payment page: your card number and other payment details are entered there and are never sent to, or stored on, this website. Stripe sends us confirmation that the payment succeeded and a reference for it, and processes your details as an independent controller under its own privacy policy. Stripe may also use your details to detect and prevent fraud.

Keeping the website secure

Like almost every website, our web server and security logs record the internet (IP) address of each visitor, the type of browser used and the pages requested. We use this to keep the site running, to detect and block abuse, and to protect the site against attack, which is our legitimate interest. These logs are kept for a limited period and are not used to identify you as a person.

Embedded content

Some pages may include content from other websites, such as YouTube videos or Google Maps. Those services may collect information about you and set their own cookies when the page loads, in the same way as if you had visited their site directly. Their handling of your information is governed by their own privacy policies.

Who we share your information with

We do not sell your personal information, and we do not share it with anyone for their own marketing. We share it only with the service providers we need to run this website and our business: the company that hosts this website, our email provider, and any provider named elsewhere in this policy. Each acts on our instructions and is bound to protect your information. We may also disclose information where the law requires it.

How long we keep it

We keep personal information only for as long as we need it for the purpose we collected it, as described above, or for as long as the law requires. When it is no longer needed it is deleted.

Your rights

Under the UK GDPR you have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• erase your information in certain circumstances;
• restrict or object to how we use it;
• receive a copy of information you gave us in a portable form; and
• withdraw consent at any time where consent is the basis on which we use it.

To exercise any of these rights, contact us using the details below. We will respond within one month. If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

This website uses a small number of cookies. What they are, what they do and how to control them is explained in our Cookie Policy.

Changes to this policy

We may update this policy from time to time, for example when we change the services we use. The current version is always the one published on this page.