Privacy policy

We collect the minimum we need to take your order, deliver it and answer your emails. We do not sell your data, we do not run targeted advertising on it, and we do not keep it longer than we need to.

CoverSpace Ltd is the data controller. Company number [TO CONFIRM]. Registered address [TO CONFIRM]. ICO registration [TO CONFIRM]. For data questions: hello@coverspace.co.uk.

When you leave your email to hear when orders open or when a design can be customised: your email address, the design you were looking at and where you signed up. We use it only to tell you about that.

When you place an order: name, email, billing and delivery address, wall measurements, the designs you chose and an order number.

Payment: card details are collected by Stripe directly. We never see your card number.

When you email us: your email address and your message.

When you browse: we count anonymous events, such as a product being viewed or a sample being added to the basket, so we know which designs people like. These records hold no name, email, IP address or visitor identifier. If enabled, Plausible Analytics counts page views without cookies.

Page views: we count visits without cookies. For each page you view we record the page, the site that sent you, your rough location (country and city, from your connection), and your device type, browser and operating system. To tell one visit from the next, we make a code from your connection details and the day's date that cannot be turned back into them and changes every day. We never store your IP address. Vercel Web Analytics and Speed Insights count visits and page speed in the same cookie-free way.

Cookies: one strictly necessary cookie remembers your basket for 30 days. There are no tracking or advertising cookies. Studio staff who sign in to the admin also get a sign-in cookie.

• Order records: 6 years, for tax
• Waitlist emails: until orders open and we have told you, or until you ask us to delete them
• Email correspondence: 2 years from last contact
• Anonymous events and page views: [TO CONFIRM]
• Basket cookie: 30 days

We use a small number of service providers: Stripe (payments), Supabase (database), Vercel (hosting), Resend (email), Plausible (privacy-friendly analytics), our [TO CONFIRM] print and delivery partners, and HMRC (tax).

We do not share, sell or rent your data to anyone else.

Under UK GDPR you can ask to access, correct, erase, restrict, object to or move your data, and withdraw consent. Email hello@coverspace.co.uk. We respond within 30 days. You can also complain to the Information Commissioner's Office (ico.org.uk).

CoverSpace is not directed at children under 16, and we do not knowingly collect their data.