Privacy notice
Short version: we keep what we need to send your order, we count visits without tracking you, and we do not sell anything about you.
Who runs this shop
Stud & Spool is run by two kids, Vince and Maeve, with adult oversight. Their parent, Shawn Damon, is the person legally responsible for the shop and for your data, and is our contact for anything in this notice.
What we hold when you order
- Your name, delivery address and email address.
- What you ordered, and the order reference.
We use these to pack and send your order or arrange a pickup meet-up, to email your confirmation, and to refund you if needed. There are no customer accounts: you check out as a guest.
Payments and Stripe
We are getting ready to take card payments through Stripe Checkout. It is not switched on yet. When it is, you will type your card details on Stripe's own page, not ours. Card details go to Stripe and never reach us, and we never see or store your card number.
Counting visits (analytics)
We run our own copy of Umami on our own servers to see which pages and products people look at. It sets no cookies, and no third party receives this data. The events it records contain no names, email addresses, delivery addresses or payment details. When an order is counted, its order number is turned into a one-way hash, so nobody can work out which order it was. We use these counts only to improve the shop.
We keep analytics data for 30 days, then delete it.
How long we keep order details
TODO owner: retention period for order records not yet chosen
Your choices (PDPA)
Under Singapore's Personal Data Protection Act you can ask what we hold about you, ask us to correct it, or ask us to delete it. Email store@yeoda.space and put "Privacy" in the subject. We will reply as soon as we can.