Privacy Policy
Who we are
Kalligraphy is operated by [Kalligraphy Ltd], a company registered in England and Wales (company number [00000000]), registered office [registered office address] ("we", "us"). We are the data controller for personal data collected through kalligraphy.com. Contact: hello@kalligraphy.com.
What we collect and why
- Waiting list & drop register: your name, email address, and the designs, pieces, sizes and palettes you select. Used to email you about the launches you asked to hear about and to plan production quantities. Lawful basis: consent. You can unsubscribe at any time via the link in any email or by writing to us.
- Orders: name, delivery address, email and payment details are collected by Shopify when you check out. Payment is processed entirely by Shopify and its payment providers; we never see or store your card details. We receive your order and delivery details to fulfil your purchase. Lawful basis: performance of a contract.
- Analytics & advertising measurement: with your consent, we use Google Analytics 4, PostHog and Meta Pixel to understand how the site is used and to measure our advertising. These tools set cookies and collect device and usage data. You can decline or withdraw at any time (see our Cookies Policy). Lawful basis: consent.
- Correspondence: if you email us, we keep the correspondence for as long as needed to help you. Lawful basis: legitimate interests.
Who we share data with
Trusted service providers who process data on our behalf: Shopify (orders, payments, customer accounts), Klaviyo (email), Google, Meta and PostHog (analytics and advertising measurement, consent only), and Hostinger (website hosting). We do not sell your personal data.
International transfers
Some providers process data outside the UK (for example in the EU or United States). Where they do, transfers are protected by UK adequacy regulations or the appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
How long we keep it
Waiting list and register data: until you unsubscribe or ask us to delete it. Order records: 6 years, as required for tax and accounting. Analytics data: per the retention settings of each tool, typically 2–14 months.
Your rights
Under UK GDPR you have the right to access, correct, delete or restrict your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any right, email hello@kalligraphy.com. You can also complain to the Information Commissioner's Office at ico.org.uk.
Children
This site and our marketing are not directed at children under 16, and we do not knowingly collect their data.
Changes
We will post any changes to this policy on this page with an updated date.