Privacy Policy

Made by a Rose · Last updated: 16th October 2026

This is the privacy policy for the Made by a Rose online shop, run by Made by a Rose ("we", "us"), based in the UK. It explains what personal information we hold about you when you place an order, why we hold it, and what your rights are. We've kept it in plain English on purpose.

What we collect

• Your name, delivery address and email address — entered at checkout so we can make and post your order and send you an order confirmation.
• Any note you add to your order — for example your target or a colour request.
• Payment details — handled entirely by our payment provider, Stripe. We never see or store your card number. We keep a record of what you ordered, the amount and the date.

That's it. We don't use advertising or tracking cookies, and we don't collect anything about you while you're just browsing the site.

Why we collect it (our lawful basis)

We use your information to fulfil the order you've placed — making the item, posting it to you and telling you when it's on its way. In GDPR terms this is "performance of a contract". We don't sell or share your information for marketing, ever, and we won't add you to a mailing list unless you ask us to.

Who we share it with

• Stripe — processes your payment and collects your delivery address securely at checkout.
• Royal Mail (or the courier we use) — receives your name and address so the parcel can be delivered.

How long we keep it

Order records (including your name and address) are kept for 6 years, as required by UK tax law. Order notes are deleted once the item has been made.

Your rights

You can ask us at any time to show you the information we hold about you, correct it, or delete it where we're not legally required to keep it. Email us at hello@madebyarose.com and we'll respond within one month (usually much faster).

If you're not happy

You also have the right to complain to the UK's Information Commissioner's Office (ico.org.uk) — but we'd love the chance to sort things out first.