Last updated: 10 October 2026
Who we are
This website is operated by Clocks by Design (“we”, “us”, “our”), a sole trader business trading at clocksbydesign.co.uk from 37D Heol Llanishen Fach, Rhiwbina, Cardiff, CF14 6LA, United Kingdom. If you have any questions about this policy or how we handle your personal data, contact us at mike@clocksbydesign.co.uk.
What personal data we collect
When you place an order, we collect the information needed to fulfil it: your name, billing and shipping address, email address, phone number, and details of the products ordered. This is handled through WooCommerce, the store platform running this site.
When you pay, your card details are entered directly into a secure form provided by Stripe, our payment processor. We do not see or store your full card number on our servers. Stripe’s own privacy policy covers how they handle payment data: https://stripe.com/gb/privacy
When you contact us by email, we collect whatever information you include in that message so we can reply to you.
When you browse the site, some technical data (such as IP address and browser type) is processed automatically by our hosting and security tools, described under Cookies below.
Cookies
This site uses cookies for the following purposes:
- Shopping cart and checkout – WooCommerce uses cookies to remember what’s in your basket and to keep you logged in during checkout.
- Login – if you have an account, WordPress sets cookies to keep you signed in.
- Site management and security – Jetpack (a WordPress management plugin) may set cookies related to site performance and security. See Automattic’s privacy policy: https://automattic.com/privacy/
- Performance – our caching plugin (WP Fastest Cache) may use a cookie to serve you the correct version of a page; this does not identify you personally.
- Analytics (only if you accept) – we use Google Analytics 4 to understand which pages are visited and how people find the shop. It sets cookies called _ga and _ga_ followed by an identifier, and records things like the pages you view, your device and browser type, and your approximate location. It does not tell us who you are. It only runs if you click Accept on the cookie banner (consent). Google’s privacy policy: https://policies.google.com/privacy
- Your cookie choice – a cookie called cbd_consent remembers whether you accepted or declined, for up to 180 days.
We do not use cookies for third-party advertising or tracking across other websites. If you decline, no analytics cookies are set. You can change your mind at any time using Cookie settings, and you can delete cookies at any time in your browser settings.
Our pages load fonts from Google Fonts. This means your browser requests the font files from Google’s servers, which receive your IP address as part of that request.
Who we share your data with
We share personal data only with the service providers needed to run this store and never sell your data to third parties:
- Stripe – to process payments
- Amazon Web Services (AWS) – to host this website and, via Amazon SES, to send order confirmation and account emails
- Delivery/courier providers – to fulfil and deliver your order
We do not share your name, order details, or contact information with Facebook, Instagram, or Pinterest. We do use those platforms to publish our own marketing content (product photos and posts) via their official APIs, but this is one-directional: we post to our own business accounts there, we do not send your data to them. If you choose to interact with our content on those platforms, that interaction is subject to their own privacy policies, not ours.
Where your data is stored
This site is hosted on Amazon Web Services in London, UK (eu-west-2). Some of our service providers (such as Stripe) may process data outside the UK; where they do, they maintain their own appropriate safeguards under UK data protection law.
How long we keep your data
We keep order records for as long as required by UK tax and accounting law (normally 6 years). If you have an account with us, you can ask us to delete your personal data at any time, except for information we are legally required to retain.
Your rights
Under UK data protection law, you have the right to:
- Ask what personal data we hold about you, and get a copy of it
- Ask us to correct inaccurate data
- Ask us to delete your data, where we are not required to keep it
- Object to how we use your data
To exercise any of these rights, email mike@clocksbydesign.co.uk. If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).
Security
This site uses HTTPS encryption, two-factor authentication and login-attempt limiting on admin accounts, and does not store full payment card details.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.