privacy policy

who we are

wutong is a brand of common room limited (company number 16617414, registered in england and wales, registered office: london n1, united kingdom), the controller of your personal information under the uk gdpr and the data protection act 2018. you can contact us about privacy at contactwutongstudio@gmail.com.

what we collect

when you order: your name, email address, phone number, delivery address and what you bought. you enter your payment details on stripe’s checkout page and stripe handles them, so we never see or store your full card number.

when you email us: your email address and whatever you choose to tell us.

when you browse: we use google analytics to see how people find and use the site, such as which pages they visit, roughly where they are and what device they use. analytics cookies are only set if you accept them in the cookie banner. if you don’t, google analytics still records anonymous visits without cookies, so they can’t be linked to you or to your later visits. we don’t use advertising cookies. your cart, and the delivery country you choose, are kept in your browser’s local storage so they’re still there when you come back, and they stay on your device until you check out. our hosting provider processes technical information such as your ip address to deliver the site and keep it secure, and stripe uses its own cookies on its checkout page to prevent fraud.

how we use it, and why

• to take payment, send and deliver your order, handle returns and refunds and email you about your order, because we need to in order to fulfil our contract with you.
• to answer your messages and look after you, because it’s in our legitimate interests to do so.
• to prevent fraud and keep the site secure, because it’s in our legitimate interests.
• to understand how the site is used and improve it, with analytics cookies only if you’ve agreed to them, and otherwise with anonymous, cookieless counts, because it’s in our legitimate interests.
• to keep accounting and tax records, because the law requires it.

we don’t send marketing emails, and we never sell your information.

who we share it with

only the companies that help us run the shop, and only what they need:

• stripe, which runs our checkout and processes payments, and also uses some information for its own purposes, such as preventing fraud, under its own privacy policy
• delivery companies such as royal mail, which receive your name, address and, where needed, your phone number or email to deliver your order
• the providers that host this website and our email
• google, which runs google analytics for us
• our accountants and, where the law requires it, authorities such as hmrc

international transfers

some of these providers process information outside the uk, for example in the united states. when they do, it’s protected by the safeguards uk law requires, such as adequacy regulations or standard contractual clauses, or the transfer is needed to deliver your order.

how long we keep it

order and payment records for six years after the end of the financial year they belong to, because tax law requires it, and emails for as long as we need to help you, and no more than two years after your last message. your cart stays in your browser until your order is complete or you clear your browser’s storage. google analytics keeps its data for 14 months, and its cookies, _ga and _ga_ followed by an id, last up to two years unless you clear them or decline cookies.

your rights

you can ask for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, or ask for it in a portable format. email contactwutongstudio@gmail.com and we’ll reply within a month. some rights depend on the circumstances, and we may need to keep certain records for legal reasons.

you can change your mind about analytics cookies at any time with “cookie settings” at the bottom of every page. declining removes the ones already set.

if you’re unhappy with how we’ve handled your information, please tell us first. you can also complain to the information commissioner’s office at ico.org.uk, or to the data protection authority where you live.

changes

if we change this policy, we’ll update this page and the date at the top.