Privacy policy

This policy explains what personal data Alum & Ash collects, why, and the rights you have over it. We are the data controller; contact us at hello@alumandash.com.

What we collect

• Order information — your name, delivery address, email and order details, so we can fulfil and support your order.
• Payment information — handled entirely by Stripe. We receive confirmation of payment but never your full card number.
• Basket — kept in a cookie on your device so your basket survives between visits. It contains only product references and quantities.

Why we use it

To process orders, provide customer service, meet our legal obligations (including tax and consumer-law record-keeping), and — only if you ask — to let you know when a collection lands.

Who we share it with

Only the providers we need to run the shop: Stripe for payments, our delivery carrier, and our email provider for order confirmations. We don’t sell your data.

How long we keep it

Order records are kept as long as tax and consumer law require, then deleted. Cookie data lives on your device and clears when you clear your cookies.

Your rights

You can ask us to access, correct or delete your personal data, or to restrict how we use it. Email us and we’ll respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk).