Privacy Notice

The data controller is Sophie Bacall, trading as SHB Ketubahs.

For privacy questions or to exercise your rights, email sophieellenbogen94@gmail.com.

Depending on how you use the website, we may collect:

• your name, email address and telephone number;
• your Ketubah Studio waitlist preference and a record of when and how you consented to receive those emails;
• your email marketing preference, signup source and a record of the consent wording you accepted when requesting an offer, Studio link, consultation or making an enquiry;
• your delivery address and country;
• your wedding date and information included in an enquiry or special request;
• ketubah wording, vows, photographs, design references and proof approvals;
• order details, payment status and correspondence about your order;
• limited technical and usage information, such as pages viewed, device type, browser, approximate location and referral source; and
• preferences stored on your device, such as whether you dismissed a website message.

Payment details are entered into Stripe's secure payment form. SHB Ketubahs does not receive or store your complete card number.

We only send marketing emails where they have been specifically requested. Every marketing email will provide a way to unsubscribe. We do not use order or enquiry information for marketing unless you separately choose the optional marketing opt-in, and we do not sell personal information.

We share information only where it is needed to operate the business, including:

• Stripe, which processes payments and carries out payment-security and fraud checks;
• Google, which provides the Gmail account used for enquiries and customer correspondence;
• Resend, which stores consented email marketing contacts and delivers requested Studio links and discount codes, marketing emails, transactional order confirmations and internal notifications;
• Neon, which securely hosts the order-management database containing the customer, delivery and order information needed to fulfil purchases;
• Vercel, which hosts the website and provides privacy-focused web analytics;
• Contentsquare, which provides consent-based session recordings and usage analysis on the Ketubah Studio page;
• Meta, which receives consent-based page-view and browser ecommerce events through Meta Pixel for website and advertising measurement;
• Royal Mail, which receives the delivery information required to send your order; and
• accountants, legal advisers, insurers, regulators or public authorities where reasonably necessary or legally required.

These providers process information under their own privacy terms or under contracts requiring them to protect it. Some may process information outside the UK. Where UK data protection law applies, we rely on recognised safeguards for those transfers.

We keep personal information only for as long as it is reasonably needed:

• enquiries that do not become orders: up to 12 months after the last contact;
• Ketubah Studio waitlist details: until consent is withdrawn or up to 12 months after the final launch or early-access email, after which the list is reviewed;
• general email marketing details: until consent is withdrawn, with inactive marketing records reviewed at least every 24 months;
• one-off Studio link requests and delivery records: up to 12 months;
• failed or abandoned payment records: up to 12 months;
• completed order, invoice, payment and essential accounting information: up to six years;
• personalised proofs and approval records: up to six years after delivery;
• final customer artwork kept for possible replacement orders: up to six years, after which it is reviewed, deleted or anonymised where appropriate;
• customer reference material that is not needed after completion: normally deleted within 90 days after delivery; and
• gallery artwork and wedding photographs: while the agreed permission remains valid and the material continues to be displayed.

We may keep information for longer where the law requires it or where it is reasonably needed to establish, exercise or defend a legal claim. Sophie's original artwork and other material that does not identify a customer may be retained as part of her permanent artistic archive.

Completed custom artwork and wedding photographs are displayed only with permission from the relevant couple and, where applicable, the photographer. You can ask us to stop future public use of material that identifies you by emailing us. This does not affect uses already made while the permission was valid or information that we must retain for legal reasons.

We use Vercel Web Analytics to understand aggregated website activity. Vercel states that this service does not use cookies or collect information that identifies visitors across websites. On the Ketubah Studio page only, and only after you choose “Allow analytics”, we use Contentsquare to record interactions such as clicks, scrolling and movement through the design tool. Contentsquare suppresses form entries by default. Contentsquare uses cookies and similar technologies to recognise a session and returning browser. After you choose “Accept optional cookies”, we also use Meta Pixel across the website to send page-view, product-view, checkout and confirmed-purchase events to Meta for website and advertising measurement.

We also use local storage on your device to remember limited website preferences, including your analytics choice and dismissed notices. You can change your optional analytics choice from “Privacy settings” in the website footer or clear locally stored preferences through your browser. Stripe may use cookies or similar technologies that are necessary to provide and protect its payment service. You can object to our use of analytics by contacting us at the email address above.

Depending on the circumstances, you may have rights to access, correct, erase or restrict the use of your personal information, receive a portable copy of it, or object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time.

To make a request, email us using the address above. We may need to confirm your identity before responding. Some rights are subject to legal exceptions, including requirements to retain tax and transaction records.

You can also complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first.

We use reasonable technical and organisational measures to protect personal information and limit access to people and providers who need it. No internet service is completely secure, so please avoid sending unnecessary sensitive information in an enquiry form.

SHB Ketubahs does not use personal information to make solely automated decisions that have legal or similarly significant effects. Stripe may perform automated payment and fraud checks under its own privacy notice.

We may update this notice when our services, providers or legal obligations change. The latest version will always appear on this page with its updated date.

Questions about this notice can be sent to sophieellenbogen94@gmail.com. For other questions, you can also use our contact page.