Privacy notice
Last updated 14 November 2026
I collect as little as I can, use it to get your piece to you, and sell it to nobody.
Who is responsible for your details
I am — the data controller. You can reach me at:
Esther Ley, trading as Esther Ley Ceramic Art2 Withy Park
Bishopston
Swansea
SA3 3EY
United Kingdom
estherley.ceramics@gmail.com
What I collect
When you buy a piece: your name, your email address, your delivery address, and what you bought, paid and when. If you email me, I keep the email.
I never see your card number. Card details go straight from your browser to Stripe. What comes back to me is a reference, the amount and the last four digits.
Why I am allowed to hold it
- To perform our contract — I cannot post you a piece without your address.
- Because the law requires it — HMRC requires records of sales to be kept for six years.
- Legitimate interests — keeping the shop working and secure, and being able to answer you.
Who else sees it
Only the services that run the shop: Stripe (payment), Resend (order emails), Neon (the database), Vercel (the website), and Royal Mail or the courier (to deliver it). Each may only use your details for that job. Some are based outside the UK, and where your details leave the UK they are protected by the safeguards the UK government recognises.
Marketing
There is no mailing list. The only emails you get are about your own order, and your receipt includes a discount code for a future one — say the word and I will leave that out.
Cookies
This shop sets no tracking cookies: no analytics, no advertising pixels. The only cookie keeps me logged in to my own admin screen. When you go through to pay, Stripe sets its own cookies on its own checkout page to prevent fraud.
How long I keep it
Order records for six years, because HMRC requires it. Emails until there is no reason to keep them.
What you can ask me to do
You have the right to ask for a copy of what I hold about you, to have anything wrong corrected, to have it deleted where I am not required to keep it, to restrict or object to what I do with it, and to have it in a portable form. Email estherley.ceramics@gmail.com and I will answer within one month, at no charge.
I cannot delete the record of a sale within the six years HMRC requires, even if you ask. Everything else I can.
If you are unhappy with how I have handled it
Please tell me first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Anything here you would like explained, email me.