# Privacy notice

## Who we are

Richard Gill, a sole trader trading as Pottery Ruler, is the controller of personal data covered by this notice. Our address is The Trampery Peckham, Peckham Levels, 95a Rye Lane, London SE15 4ST, United Kingdom. Contact us at [support@potteryruler.com](mailto:support@potteryruler.com).

## Information we use

- **Site preferences:** the `ruler-unit` cookie records your centimetre or inch preference. Your selected bundle, shrinkage percentages and delivery country are stored in your browser so the buy page can restore a draft.
- **Orders and payment:** we send your selected goods and delivery country to Stripe to create a checkout session. Stripe collects the payment, billing and delivery details entered in its checkout. Our site sets a seven-day, HTTP-only `checkout_owner` cookie to associate your browser with that session. A successful payment webhook records only the payment-session ID and payment status in this application.
- **Support:** if you email us, we use the details and information in your message to respond and deal with your order or request.
- **Technical information:** Cloudflare and PostHog process limited technical and error information to run, secure and diagnose the site. This can include route path, request method, status, timing, deployment information and a Cloudflare request ID. We do not send request-query values in these logs.
- **Product analytics:** when configured on the production site, PostHog records page views, ruler selections and browser exceptions to help us understand site use and improve it. It uses in-memory persistence, with automatic event capture and person profiles disabled.

## Why we use it

We use order, payment, delivery and support information because it is necessary to take steps at your request and perform our contract with you. We keep accounting records to meet legal obligations. We use essential cookies and limited technical information for our legitimate interests in operating, securing and fixing the site. Product analytics help us understand site use and improve it.

## Who receives it

We use Cloudflare to host the site, Stripe to process checkout and payment, PostHog for product analytics, technical and error reporting, our support inbox for customer emails, and Royal Mail to deliver orders. Royal Mail receives the name and delivery address needed to send an order. We do not sell personal data.

These providers may process personal data outside the UK. Their handling of data is also governed by their own privacy information. Contact us if you would like details of the safeguards relevant to a particular transfer.

## Retention

Our retention policy is to delete product analytics, technical and error logs after 30 days and support emails 90 days after a request is resolved, unless we need them longer for an ongoing matter. We retain order and accounting records for at least 5 years after the 31 January submission deadline for the relevant tax year, or longer where the law requires.

These retention periods are our policy. The application does not yet configure automatic deletion in Cloudflare, PostHog, Stripe or the support inbox, so provider-held data may remain longer until those settings and processes are put in place.

## Your rights

Subject to applicable law, you can ask for access to, correction or deletion of your personal data, restriction of its use, or portability. You may object to processing based on legitimate interests. To make a request, email [support@potteryruler.com](mailto:support@potteryruler.com). You can also complain to the UK Information Commissioner’s Office.

[View this page on https://potteryruler.com/privacy](https://potteryruler.com/privacy)