Privacy & Cookies

1. Who we are

1.1 The St Edmunds Advertising Company is a trading name of its owner, a sole trader, who is the “controller” responsible for your personal information. You can contact us about anything in this policy using the details above.

2. What we collect

• Enquiries and proposals: your name, business name, email address, telephone number, the service you are interested in, your preferred dates and anything you tell us.
• “Tailor this site to me”: the answers you give, such as your business name, type of business, the style and colours you like. These are kept in your browser so the website stays tailored to you, and sent to us so we are ready when you get in touch.
• Orders and payments: billing details, what you bought and payment records. Card details go directly to our payment providers.
• Your work with us: emails, files, logins you share with us for your website or accounts, and our notes.
• The AI concierge: the messages you type into it. Please do not share sensitive information there.
• Technical information: your IP address and browser details, which our hosting company records in security logs.

3. Why we use it and our legal basis

• To reply to your enquiry and prepare a proposal: because you have asked us to, before entering a contract.
• To carry out your commission, take payments and deliver your order: to perform our contract with you.
• To keep accounts and tax records: because the law requires it.
• To keep this website secure, prevent fraud and improve our services: our legitimate interests, balanced against your rights.
• To send you news or offers: only if you have asked us to, and you can stop at any time.

3.2 We do not sell your personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

4.1 We share personal information only with trusted providers who help us run the business, and only what they need:

• our website hosting company, which hosts this website and its email forms.
• WooCommerce and WooPayments (Automattic), and Stripe, which process payments securely. We never see your full card details.
• OpenAI, which powers our AI concierge and processes the messages you type into it.
• Google, which delivers the fonts used on this website, so your browser connects to Google and shares your IP address with it.
• Printers, garment decorators and couriers, who receive only what they need to make and deliver your order.
• Our telecoms partner, if you take a business number from us.
• Our accountant and HM Revenue & Customs, for tax and accounting.

4.3 They may only use your information to provide their service to us. We may also share information if the law requires it.

5. International transfers

5.1 Some of our providers, such as Stripe, Automattic, Google and OpenAI, may process information outside the UK, including in the United States. When they do, the transfer is protected by UK-approved safeguards, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.

6. How long we keep it

• Enquiries that do not go ahead: up to 12 months.
• “Tailor this site to me” answers: up to 12 months, unless you become a client.
• Client records, invoices and payment records: six years after the end of the tax year they relate to, as tax law requires.
• AI concierge conversations: no longer than 12 months.

6.2 After that, we delete it or make it anonymous.

7. Cookies and storage on your device

7.1 We do not use advertising cookies, and we have switched off WooCommerce’s visitor tracking. We use only what the website needs to work and what you choose:

• Essential cookies: when you use the basket or checkout, WooCommerce stores cookies (such as woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_) to remember your basket, and our payment provider may set cookies to prevent fraud.
• Your preferences: when you choose light or dark mode, a season, sound, or tailor the website, your choice is stored in your browser’s local storage so it is remembered next time. This stays on your device.

7.3 Because these are needed for the services you ask for, they do not require consent. You can clear them at any time in your browser settings. If we ever add analytics or other optional cookies, we will ask for your permission first and update this policy.

8. Your rights

8.1 You have the right to ask for a copy of your personal information, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw any consent you have given. Just email us. We will reply within one month, and there is normally no charge.

8.2 If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

9. Keeping it safe

9.1 Our website uses an encrypted connection, payments are handled by specialist providers, and access to our records is protected with strong passwords and two-step verification where available.

10. Children

10.1 Our services are for businesses and adults. We do not knowingly collect information from anyone under 18.

11. Changes to this policy

11.1 We may update this policy from time to time, and the date at the top will always show the latest version. Please also see our Terms of Business.