Coming From A Good Place is the controller for personal information handled through this website. Privacy enquiries may be sent to hello@comingfromagoodplace.co.uk or by post to Aizlewoods Mill, Nursery Street, Sheffield S3 8GG.
Information we collect
We collect contact, business, order, recipient, delivery and gifting-preference information you provide. We also retain enquiries, box configurations, uploaded artwork, account activity, consent choices and technical security records. Stripe handles card details directly; we do not store full payment-card information.
Purposes and lawful bases
We use information to respond before a contract, supply orders and bespoke projects, administer payments and delivery, meet tax and legal duties, protect the service against misuse, and manage customer relationships under our legitimate interests. Optional analytics and email marketing are used only with consent where consent is required.
Recipients and international transfers
Necessary information may be shared with payment, email, hosting, analytics, production and delivery providers, professional advisers and public authorities. Where a supplier processes information outside the UK, we require an approved transfer safeguard and appropriate contractual protection.
Retention
Order, invoice and accounting records are normally retained for six years after the relevant financial period. Unsuccessful enquiries and draft configurations are reviewed after 24 months. Security logs and expired sign-in links are retained only as long as operationally necessary. We may retain information longer where a dispute or legal duty requires it.
Your rights
You may ask for access, correction, deletion, restriction, portability or an objection to certain processing, and may withdraw consent at any time. We may need to verify your identity. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
Recipient information
Business customers supplying recipient addresses must have a lawful basis to do so, provide any required privacy information, and send only the details needed for fulfilment.