We only take what we need to answer you and do the work — your name, how to reach you, and whatever you choose to tell us.
Your data stays with us. We hold the name, email, phone, and (for orders) shipping address you give us when you get in touch — nothing more. We never combine it with information from anywhere else, never enrich it with third-party data, and never pass it to brokers. Payment details, when an order is placed, are handled by our payment processor and we never see the card number ourselves. We retain order records for tax purposes for the period required by law (typically six years), and contact-form messages for up to two years unless you ask us to delete them sooner. You have the right to access, correct, port, or erase any of it; email us and we will respond within thirty days. You also have the right to complain to a supervisory authority if you believe we have mishandled your data.
We use it to do your work, keep in touch about it, and run the studio. We never sell it.
Cookies on this site are limited to the basics — keeping you signed in, remembering the items you've added to your cart, and recording the language and currency you've chosen. Nothing analytical, nothing for advertising, nothing shared with a third party. We do not use Google Analytics, Facebook Pixel, or any equivalent tool. We do not embed third-party content that drops its own tracking cookies. You can clear all cookies for this domain in your browser settings and the site will continue to work. The cookie that remembers your consent choice itself expires after twelve months; you can revisit your preferences any time by clearing it.
Ask us what we hold, fix it, or have it deleted, any time. A note to hello@spinesignature.co.uk is enough.
If you'd like to access, update, port, or erase any personal information we have on file, please contact us — we'll act on it within thirty calendar days, at no charge. You have the right to withdraw consent for any future processing, to restrict how we use existing records, and to ask that your data be moved to another service in a portable format. Records subject to legal retention (orders, invoices) cannot be deleted before the required period elapses, but everything else can. You also have the right to raise a complaint with the supervisory authority in your country.