Privacy

What we keep, and what we don't.

Who we are

[Your trading name], [your address], contact hello@trphy.co.uk. We are the data controller for everything below.

What we collect, and why

Your name and email address

To make your order, send you a proof, and tell you when it is posted. Without them there is no order.

Your delivery address

To post the parcel. It is collected by Stripe at the checkout and passed to us.

What you put on the Record

Your finish time, the date, any dedication. It is printed on the thing you bought, so we hold it for as long as we might need to reprint it.

Your route file

The GPX you upload, and the model built from it. Used to make your disc and nothing else.

Your IP address

Recorded against a sign-in link request, to make it harder for somebody else to request one in your name. Nothing else.

We do not ask for anything we do not need, and we never see your card details - those go straight to Stripe and never touch this server.

The legal basis

Almost all of it is performance of a contract: you ordered something and we cannot make it without these details. Keeping order records afterwards is a legal obligation - HMRC requires six years. Where we rely on legitimate interests, it is to stop the sign-in system being abused. We do not send marketing email, so there is nothing here you have to consent to.

Who else sees it

Stripe

Takes the payment and collects the delivery address. They are the controller of your card data, not us.

Resend

Delivers the email we send you - your address and the message.

Our hosting provider

Runs the server the shop sits on, in the EU.

Royal Mail or another carrier

Your name and address, on the parcel.

That is the whole list. We do not sell your data, we do not share it for advertising, and nothing you give us is used to train anything.

How long we keep it

Order records for six years, because tax law says so. Your route file and the model built from it for two years, so a reprint is possible - ask sooner and we delete them at once. Sign-in links expire in minutes and are deleted.

Cookies

Three, all strictly necessary and all first-party: one that keeps you signed in, one that keeps the shop's back office signed in, and one that carries a status message from one page to the next. There is no analytics, no advertising and no third-party tracking of any kind on this site, which is why you have not been asked to accept anything.

What you can make us do

You have the right to see what we hold, correct it, have it deleted, get a copy in a portable form, object to us holding it, or restrict what we do with it. Email hello@trphy.co.uk and we will answer within one month. There is nothing to pay.

Deleting an order we are still making means cancelling it - we cannot post a parcel to an address we have erased - and records we are legally required to keep for HMRC we have to keep.

If we get it wrong

Tell us first: hello@trphy.co.uk. If we do not put it right you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

If this changes in a way that affects you, we will say so on this page before it takes effect.