Privacy policy

Who we are

This site is run by MASHWRKS ("we", "us"). We are the data controller for the personal data collected here. You can contact us about privacy at [privacy contact email]. Our registered details: [company name, registered address and company number].

What we collect

When you sign up for updates we collect:

• your email address and phone number
• your first and last name
• which updates you agreed to receive (email, SMS or both)

To prove you gave consent we also record the exact wording you agreed to, the date and time, the page you signed up on, your IP address and your browser's user agent.

If you accept analytics or marketing cookies, we and our partners collect information about how you use this site (see Cookies below).

If you buy something from our shop, your order is processed by Shopify, which collects the details needed to take payment and deliver your order.

Why we use it and our lawful basis

• To send you updates by email and/or SMS: your consent. You can withdraw it at any time.
• To keep a record of your consent: our legitimate interest in being able to show we have your permission, and our legal obligations.
• To process shop orders: performance of a contract with you.
• Analytics and marketing cookies: your consent, given through the cookie banner.

Who we share it with

We use trusted service providers who process data on our behalf, under contract:

• Sanity (content and sign-up storage)
• Vercel (website hosting)
• Shopify (shop and checkout)
• our email and SMS delivery providers, when we send updates
• analytics and advertising partners such as Google and Meta, only if you accept those cookies

We never sell your personal data.

International transfers

Some providers store data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to protect your data.

How long we keep it

We keep your sign-up details for as long as you are subscribed. If you unsubscribe, we delete your contact details within 30 days, but keep a minimal record of your consent and withdrawal for up to 2 years so we can show we acted on your choice. Cookie choices are remembered for 6 months.

Your rights

You have the right to access, correct or delete your data, to restrict or object to how we use it, and to data portability. To use any of these rights, email [privacy contact email].

Withdrawing consent

• Email: use the unsubscribe link in any email.
• SMS: reply STOP to any message.
• Cookies: use Cookie settings at the bottom of the page.
• Or email [privacy contact email].

Cookies

We only set non-essential cookies if you agree. Essential storage remembers your cookie choice and your shopping cart. Analytics cookies help us understand how the site is used. Marketing cookies let us and our advertising partners show you relevant ads elsewhere. We use Google Consent Mode, so Google tags respect your choice. You can change your mind at any time via Cookie settings.

Complaints

If you are unhappy with how we handle your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy. The date at the top shows when it last changed.