Privacy Policy

Lucinda Button Textiles Last updated: 8 May 2026

This privacy policy explains how Lucinda Button Textiles ("I", "me", "my") collects, uses and protects the personal information you provide when you visit www.lucindabuttontextiles.com, sign up to my mailing list, contact me, or place an order. I am committed to handling your information carefully and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or about how your information is used, you can contact me at lucindagorringe@yahoo.co.uk

Who is responsible for your data

Lucinda Button Textiles is the data controller for any personal information you share through this website.

Contact: lucindagorringe@yahoo.co.uk 

What information I collect

The information I collect depends on how you interact with the site.

When you sign up to the mailing list, I collect your name (optional) and your email address.

When you place an order, I collect your full name, billing and delivery address, email address, telephone number (if provided), and details of the items you have purchased. Payment card details are entered directly with my payment provider and are not stored or seen by me — see "Payments" below.

When you contact me through the website or by email, I collect your name, email address and the contents of your message.

When you browse the site, my website host automatically collects limited technical information such as your IP address, browser type, device type, pages visited, and the date and time of your visit. This is used to keep the site secure and to understand how visitors use it. Cookies may also be used — please see the cookie section below.

How I use your information and the legal basis for using it

I only use your personal information for the purposes set out below, and only where I have a lawful basis under UK GDPR.

To send you marketing emails about new work, exhibitions and studio updates, where you have signed up to the mailing list (legal basis: your consent).

To process and fulfil orders you place with me, including taking payment, arranging delivery, providing receipts, and handling returns or queries (legal basis: performance of a contract with you).

To respond to enquiries you send me through the contact form or by email (legal basis: my legitimate interest in replying to people who get in touch).

To keep records of sales, refunds and tax in line with UK accounting and tax law (legal basis: legal obligation).

To keep the website secure, prevent fraud, and improve how it works (legal basis: my legitimate interest in running a safe, functional website).

Newsletter and mailing list

You will only receive marketing emails from me if you have actively signed up. Every email I send includes an "unsubscribe" link, and you can opt out at any time. When you unsubscribe, your email address is removed from my active mailing list. I do not sell, rent or trade mailing list data with anyone.

Payments

Online payments are handled by [my payment provider, e.g. Stripe / PayPal / Squarespace Payments]. When you pay, your card details are entered into a secure form provided by them and sent directly to the payment provider — they are not stored on my website and I never see your full card number. Payment providers are themselves regulated and use industry-standard encryption to keep your details safe. Their own privacy policies will apply to the data they hold:

Who I share your information with

I only share your information with trusted third parties who help me run the website and the studio. These include:

  • My website host and ecommerce platform — [e.g. Squarespace] — which stores the website, mailing list and order information.

  • My payment provider — [e.g. Stripe / PayPal] — which processes card payments.

  • My email marketing provider — [Squarespace Email Campaigns] — which sends the newsletter on my behalf.

  • Delivery and postal services — such as Royal Mail or a courier — to send your order to you.

  • My accountant and HMRC — for tax and bookkeeping records, where legally required.

I do not sell your personal information, and I do not share it with anyone for their own marketing.

Some of these providers may process data outside the UK (for example, in the EU or USA). Where this happens, I rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision, so that your data continues to be protected.

How long I keep your information

I keep personal information only for as long as I need it.

Mailing list details are kept until you unsubscribe or ask me to delete them. Order and customer records are kept for at least six years after the end of the relevant tax year, in line with HMRC requirements. General enquiry emails are usually deleted within 12 months unless they relate to an ongoing project or commission.

Your rights

Under UK GDPR you have the right to:

  • ask for a copy of the personal information I hold about you,

  • ask me to correct information that is wrong or out of date,

  • ask me to delete your information where there is no legal reason for me to keep it,

  • object to or restrict how I use your information,

  • ask for your information in a portable format,

  • withdraw your consent to marketing at any time.

To exercise any of these rights, please email me at lucindagorringe@yahoo.co.uk. I will respond within one month.

If you are not happy with how I have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Cookies

This website uses a small number of cookies to make the site work and to understand how it is used. Essential cookies are needed for things like the shopping basket and checkout. Analytics cookies (if used) help me see which pages are most visited. You can control cookies through your browser settings or, where shown, through the cookie banner on the site.

Security

I take reasonable steps to keep your information safe, including using a website host and payment provider that encrypt data in transit (HTTPS) and at rest. No system is ever completely secure, but I work only with reputable providers and keep access to personal information limited to what is necessary.

Children

This website is not intended for children, and I do not knowingly collect personal information from anyone under 16.

Changes to this policy

I may update this policy from time to time — for example, if I change payment provider or add new website features. The "last updated" date at the top will always show the most recent version.

Contact

For any questions about this privacy policy, or to exercise any of your rights, please contact:

Lucinda Button Textiles lucindagorringe@yahoo.co.uk