Privacy policy

This policy explains what Evercarry does with your personal information. We are the data controller. You can contact us at adamattif123@gmail.com.

Your photographs

When you order a personalised charm you send us a photograph. Photographs of people are personal data, and often they are photographs of someone who has died. We treat them accordingly.

  • What we do with it. We use it for one purpose only: to print and make the item you ordered. A person checks it by eye before printing, and we pass it to our UK production partner so they can print it.
  • What we never do. We do not use your photograph in advertising, on social media, on our website, or anywhere public. We do not sell it or licence it, and we share it with nobody other than the production partner making your order. If we ever want to feature a customer's charm, we ask first and only proceed if you say yes in writing. Saying no changes nothing about your order.
  • How long we keep it. We delete it 30 days after your order is delivered. We keep it that long only so we can remake your charm if something goes wrong.
  • Deleting it sooner. Email us any time and we will delete it immediately. If we have not yet made your charm, that cancels the order and we refund you in full.

Other information we collect

  • Contact and delivery details — your name, email address, delivery address and phone number if you give one.
  • Order information — what you bought, when, and the amount paid.
  • Payment information — handled by Shopify Payments. We never see or store your full card number.
  • Technical information — IP address, browser and device type, and how you moved around the site. Collected through cookies and similar technology.
  • Messages — anything you send us by email.

Why we use it, and our legal basis

  • To fulfil your order — contract. This covers your photograph, contact details, delivery address and payment.
  • To answer your questions — legitimate interests, so we can run a business people can talk to.
  • To prevent fraud and keep the site secure — legitimate interests.
  • To meet our legal duties — legal obligation. Tax law requires us to keep order records for six years.
  • To send marketing emails — consent. Only if you ask for them, and you can stop at any time using the unsubscribe link.

Who we share it with

  • Shopify — hosts this store and processes payments on our behalf.
  • Prodigi — our UK production partner, who receives your photograph and delivery address so they can make and post your order.
  • Royal Mail or another carrier — your name and address so your parcel arrives.
  • HMRC or other authorities — where the law requires it.

We do not sell your personal information to anybody, ever.

Where your information goes

Our suppliers may process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or by standard contractual clauses approved for use in the UK.

How long we keep things

  • Photographs: 30 days after delivery.
  • Order and tax records: six years, as UK tax law requires.
  • Marketing consent: until you withdraw it.
  • Emails: two years, then deleted.

Your rights

Under UK GDPR you can ask us to: show you what we hold, correct it, delete it, restrict what we do with it, send it to you or another provider, or stop processing it. Where we rely on consent, you can withdraw it at any time.

Email adamattif123@gmail.com and we will respond within 30 days. It costs you nothing.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.

Cookies

This store uses cookies that are necessary for it to work — keeping your basket, keeping you signed in, and keeping checkout secure. We also use cookies that measure how the site is used so we can improve it. You can block cookies in your browser settings, though parts of the store may then stop working.

Children

This store is not intended for children, and we do not knowingly collect information about anyone under 16. If you believe a child has given us their information, email us and we will delete it.

Changes

We may update this policy. The version that applies to your order is the one published when you placed it.