Privacy Notice

The data controller is Sophie Bacall, trading as SHB Ketubahs.

For privacy questions or to exercise your rights, email sophieellenbogen94@gmail.com.

Depending on how you use the website, we may collect:

• your name, email address and telephone number;
• your Ketubah Studio waitlist preference and a record of when and how you consented to receive those emails;
• your email marketing preference, signup source and a record of the consent wording you accepted when requesting an offer, Studio link, consultation or making an enquiry;
• your delivery address and country;
• your wedding date and information included in an enquiry or special request;
• website chat messages, your optional chat-reply email preference, the page where the chat began and the language used;
• ketubah wording, vows, photographs, design references and proof approvals;
• order details, payment status and correspondence about your order;
• limited technical and usage information, such as pages viewed, device type, browser, approximate location and referral source; and
• preferences stored on your device, such as whether you dismissed a website message, together with a necessary secure cookie used to reconnect your browser to a chat you started.

Payment details are entered into Stripe's secure payment form. SHB Ketubahs does not receive or store your complete card number.

We only send marketing emails where they have been specifically requested. Every marketing email will provide a way to unsubscribe. We do not use order or enquiry information for marketing unless you separately choose the optional marketing opt-in, and we do not sell personal information.

We share information only where it is needed to operate the business, including:

• Stripe, which processes payments and carries out payment-security and fraud checks;
• Google, which provides the Gmail account used for enquiries and customer correspondence;
• Resend, which stores consented email marketing contacts and delivers requested Studio links and discount codes, marketing emails, transactional order confirmations, requested chat replies and internal notifications;
• Neon, which securely hosts the order-management database containing customer, delivery, order and website-chat information;
• Vercel, which hosts the website and provides privacy-focused web analytics;
• Google Analytics, which receives consent-based website usage, device, approximate location and referral information so that we can understand website traffic and performance;
• Contentsquare, which provides consent-based session recordings and usage analysis on the Ketubah Studio page;
• Meta, which receives consent-based page-view and browser ecommerce events through Meta Pixel for website and advertising measurement;
• Royal Mail, which receives the delivery information required to send your order; and
• accountants, legal advisers, insurers, regulators or public authorities where reasonably necessary or legally required.

These providers process information under their own privacy terms or under contracts requiring them to protect it. Some may process information outside the UK. Where UK data protection law applies, we rely on recognised safeguards for those transfers.

We keep personal information only for as long as it is reasonably needed:

• enquiries that do not become orders: up to 12 months after the last contact;
• website chats become inaccessible 12 months after the last message and are then shown to the administrator for the documented monthly permanent-deletion review;
• Ketubah Studio waitlist details: until consent is withdrawn or up to 12 months after the final launch or early-access email, after which the list is reviewed;
• general email marketing details: until consent is withdrawn, with inactive marketing records reviewed at least every 24 months;
• one-off Studio link requests and delivery records: up to 12 months;
• failed or abandoned payment records: up to 12 months;
• completed order, invoice, payment and essential accounting information: up to six years;
• personalised proofs and approval records: up to six years after delivery;
• final customer artwork kept for possible replacement orders: up to six years, after which it is reviewed, deleted or anonymised where appropriate;
• customer reference material that is not needed after completion: normally deleted within 90 days after delivery; and
• gallery artwork and wedding photographs: while the agreed permission remains valid and the material continues to be displayed.

We may keep information for longer where the law requires it or where it is reasonably needed to establish, exercise or defend a legal claim. Sophie's original artwork and other material that does not identify a customer may be retained as part of her permanent artistic archive.

Completed custom artwork and wedding photographs are displayed only with permission from the relevant couple and, where applicable, the photographer. You can ask us to stop future public use of material that identifies you by emailing us. This does not affect uses already made while the permission was valid or information that we must retain for legal reasons.

We use Vercel Web Analytics to understand aggregated website activity. Vercel states that this service does not use cookies or collect information that identifies visitors across websites. After you choose “Accept optional cookies”, we use Google Analytics across the website to collect page views and standard usage events, such as scrolling, outbound link clicks and file downloads. Google Analytics uses cookies and similar technologies to distinguish visitors and sessions. On the Ketubah Studio page, and only after that choice, we use Contentsquare to record interactions such as clicks, scrolling and movement through the design tool. Contentsquare suppresses form entries by default. Contentsquare uses cookies and similar technologies to recognise a session and returning browser. We also use Meta Pixel after that choice to send page-view, product-view, checkout and confirmed-purchase events to Meta for website and advertising measurement.

We also use local storage on your device to remember limited website preferences, including your analytics choice and dismissed notices. You can change your optional analytics choice from “Privacy settings” in the website footer or clear locally stored preferences through your browser. If you start a website chat, we set a strictly necessary secure cookie so that the same browser can reopen the conversation. This chat cookie is not used for advertising or analytics. For abuse prevention, we retain short-lived rate-limit records derived from a protected one-way representation of the requesting network address rather than the raw address. Stripe may use cookies or similar technologies that are necessary to provide and protect its payment service. You can object to our use of analytics by contacting us at the email address above.

Depending on the circumstances, you may have rights to access, correct, erase or restrict the use of your personal information, receive a portable copy of it, or object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time.

To make a request, email us using the address above. We may need to confirm your identity before responding. Some rights are subject to legal exceptions, including requirements to retain tax and transaction records.

You can also complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first.

We use reasonable technical and organisational measures to protect personal information and limit access to people and providers who need it. No internet service is completely secure, so please avoid sending unnecessary sensitive information in an enquiry form.

SHB Ketubahs does not use personal information to make solely automated decisions that have legal or similarly significant effects. Stripe may perform automated payment and fraud checks under its own privacy notice.

We may update this notice when our services, providers or legal obligations change. The latest version will always appear on this page with its updated date.

Questions about this notice can be sent to sophieellenbogen94@gmail.com. For other questions, you can also use our contact page.