Privacy policy

Privacy Policy

Last updated: 11th November 2026

1. Introduction

CircleSquare Ceramics respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, browse our products, place an order, subscribe to our mailing list, or contact us.

We process your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

In this policy, references to "we", "us", and "our" mean CircleSquare Ceramics. References to "you" and "your" mean visitors to our website and customers.

2. What Personal Information Do We Collect?

Personal data is any information that identifies you or could reasonably be used to identify you. Depending on how you interact with our website and business, we may collect the following information:

Personal and Contact Information

  • Your first and last name

  • Billing and delivery addresses

  • Email address

  • Telephone number

  • Other contact details you provide when communicating with us

Order and Transaction Information

When you place an order through our website, we may collect:

  • Details of the products you purchase

  • Order numbers and transaction dates

  • Billing and delivery information

  • Payment status and transaction details

  • Refunds, returns, and order history

Payments are processed securely through Shopify Payments and other payment providers made available at checkout (such as PayPal, Apple Pay, or Klarna). We do not routinely receive or store your full payment card details.

Customer Account Information

If you create a customer account, we may collect information associated with your account, including your login details, saved addresses, and order history.

Communications

If you contact us through our website, email, or social media, we may retain the information you provide, including your name, contact details, and the contents of your message. We use this information to respond to enquiries, provide customer support, and maintain relevant business records.


Website and Technical Information

When you visit our website, certain information may be collected automatically, including:

  • Your IP address

  • Browser type and version

  • Device type and operating system

  • Time zone and location settings

  • Pages and products viewed

  • How you navigate and interact with our website

  • Website referral sources

  • Information collected through cookies and similar technologies

Marketing Information

If you subscribe to our mailing list or otherwise agree to receive marketing communications, we may collect:

  • Your email address

  • Your marketing preferences

  • Your subscription and consent records

  • Information about how you interact with our marketing emails, where applicable

Sensitive Personal Information

We do not intentionally collect special category personal data (such as health data, religious beliefs, or political opinions) or personal information from children.

3. How Do We Use Your Personal Information?

We only use your personal information where we have a lawful basis under the UK GDPR.

Purpose / Activity

Type of Data

Lawful Basis under UK GDPR

Processing Orders & Payments

Contact, Transaction, Payment details

Performance of a contract with you; compliance with legal obligations.

Responding to Enquiries

Contact details, Message contents

Contract performance or Legitimate interests in managing customer relationships.

Website Operation & Improvement

Technical, Usage data, Cookie identifiers

Legitimate interests in running and securing our website; Consent for non-essential cookies.

Marketing Communications

Name, Email address, Marketing preferences

Consent, or Legitimate interests (under PECR customer soft opt-in).

Business Administration & Legal Compliance

Order history, Financial records, Communications

Compliance with legal obligations and Legitimate interests in business recordkeeping.


4. How Do We Collect Your Personal Information?

We collect personal information directly from you when you:

  • Place an order through our website

  • Create a customer account

  • Subscribe to our mailing list

  • Complete a contact form or send us an email

  • Interact with our website and social media accounts

We also receive technical and interaction data through automated technologies like cookies, as well as limited data from third-party partners who process payments and deliver orders on our behalf.

5. Marketing Communications

We would like to keep you informed about new ceramic pieces, collections, studio news, and updates.

  • Consent: If you subscribe to our newsletter, we rely on your explicit consent.

  • Soft Opt-In: If you have previously purchased products from us, we may send you marketing communications regarding similar products, provided you were given an opportunity to opt out at checkout and in every subsequent email.

You can opt out or unsubscribe at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us. Opting out of marketing does not affect non-marketing emails essential to an existing order (such as dispatch updates or receipts). We will never sell or share your details with third parties for their own marketing purposes.

6. Who Do We Share Your Personal Information With?

We share personal data with trusted service providers strictly as necessary to operate our business:

  • Shopify: Our shop is hosted on Shopify. Shopify processes customer and order information to support checkout and platform operations. Read Shopify's Privacy Policy for more information.

  • Payment Gateways: Secure payment providers (e.g., Shopify Payments, PayPal, Klarna, Apple Pay) process payment information according to their security standards.

  • Delivery & Fulfillment Services: Courier and postal services (e.g., Royal Mail, DPD) receive your name, address, email address and contact phone number to send delivery confirmations and deliver orders.

  • Professional Advisers & Legal Obligations: Accountants, legal advisers, insurers, or regulatory bodies where required by law or to protect our legal rights.

7. How Do We Protect Your Personal Information?

We enforce technical and organisational safeguards to prevent unauthorised access, loss, or misuse of your personal data. Access is limited to authorized personnel with a legitimate business need. While we and our trusted infrastructure partners maintain high security standards, no internet transmission can be guaranteed as 100% secure.

9. How Long Do We Keep Your Personal Information?

We retain personal data only for as long as necessary to fulfill the operational, tax, accounting, and legal purposes for which it was collected:

  • Order & Financial Records: Kept for up to 6 years following the end of the relevant tax year to comply with UK tax laws (HMRC).

  • Customer Enquiries: Retained for up to 2 years to resolve ongoing support matters or disputes.

  • Marketing Lists: Retained until you unsubscribe or withdraw consent.

10. Your Data Protection Rights

Under UK data protection law, you hold the following rights:

  • Right of Access: Request a copy of the personal information we hold about you.

  • Right to Rectification: Request correction of inaccurate or incomplete data.

  • Right to Erasure: Request deletion of data where there is no lawful reason for us to retain it.

  • Right to Restrict Processing: Request restricted processing under specific circumstances.

  • Right to Data Portability: Request a copy of your data in a portable, structured format.

  • Right to Object: Object to processing based on legitimate interests or direct marketing.

  • Right to Withdraw Consent: Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, please contact us. We respond to valid requests within one calendar month free of charge.

11. Cookies and Similar Technologies

Our website uses essential cookies required for shopping basket functionality and security, as well as optional analytics and performance cookies. You can manage non-essential cookie preferences via our website cookie consent banner or through your web browser settings. For complete details, please see our separate Cookie Policy.

12. Third-Party Links

Our website may contain links to external websites or social media platforms. We do not control their privacy practices and encourage you to review their respective policies.

13. Data Controller, Contact and Complaints

Data Controller Information

For the purposes of applicable data protection legislation (including the UK GDPR and Data Protection Act 2018), the data controller responsible for your personal information is:

  • Business Name: CircleSquare Ceramics

  • Data Controller Name: Cheryl Carter

  • Business Address: 9 Greenview Close, Kempston, Bedfordshire MK42 7BG

  • Email: circlesquareceramicsshop@gmail.com 

  • Website: https://circlesquareceramics.co.uk

How to Contact Us or Make a Complaint

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us using the details provided above.

We will acknowledge any privacy-related enquiry or complaint promptly and aim to investigate and resolve it within 30 days.

Contacting the ICO

If you remain unsatisfied with our response, you have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner's Office (ICO) https://ico.org.uk

We would appreciate the opportunity to resolve any concerns directly with you before you approach the ICO.