Privacy Notice

The data controller is Sophie Bacall, trading as SHB Ketubahs.

For privacy questions or to exercise your rights, email sophieellenbogen94@gmail.com.

Depending on how you use the website, we may collect:

• your name, email address and telephone number;
• your delivery address and country;
• your wedding date and information included in an enquiry or special request;
• ketubah wording, vows, photographs, design references and proof approvals;
• order details, payment status and correspondence about your order;
• limited technical and usage information, such as pages viewed, device type, browser, approximate location and referral source; and
• preferences stored on your device, such as whether you dismissed a website message.

Payment details are entered into Stripe's secure payment form. SHB Ketubahs does not receive or store your complete card number.

We do not use customer information for email, telephone or postal marketing, and we do not sell personal information.

We share information only where it is needed to operate the business, including:

• Stripe, which processes payments and carries out payment-security and fraud checks;
• Google, which provides the Gmail account used for enquiries and customer correspondence;
• Resend, which delivers transactional order confirmations and internal order notifications;
• Vercel, which hosts the website and provides privacy-focused web analytics;
• Royal Mail, which receives the delivery information required to send your order; and
• accountants, legal advisers, insurers, regulators or public authorities where reasonably necessary or legally required.

These providers process information under their own privacy terms or under contracts requiring them to protect it. Some may process information outside the UK. Where UK data protection law applies, we rely on recognised safeguards for those transfers.

We keep personal information only for as long as it is reasonably needed:

• enquiries that do not become orders: up to 12 months after the last contact;
• failed or abandoned payment records: up to 12 months;
• completed order, invoice, payment and essential accounting information: up to six years;
• personalised proofs and approval records: up to six years after delivery;
• final customer artwork kept for possible replacement orders: up to six years, after which it is reviewed, deleted or anonymised where appropriate;
• customer reference material that is not needed after completion: normally deleted within 90 days after delivery; and
• gallery artwork and wedding photographs: while the agreed permission remains valid and the material continues to be displayed.

We may keep information for longer where the law requires it or where it is reasonably needed to establish, exercise or defend a legal claim. Sophie's original artwork and other material that does not identify a customer may be retained as part of her permanent artistic archive.

Completed custom artwork and wedding photographs are displayed only with permission from the relevant couple and, where applicable, the photographer. You can ask us to stop future public use of material that identifies you by emailing us. This does not affect uses already made while the permission was valid or information that we must retain for legal reasons.

We use Vercel Web Analytics to understand aggregated website activity. Vercel states that this service does not use cookies or collect information that identifies visitors across websites. We also use local storage on your device to remember limited website preferences, such as dismissed notices. Stripe may use cookies or similar technologies that are necessary to provide and protect its payment service.

You can clear locally stored preferences through your browser. You can object to our use of analytics by contacting us at the email address above.

Depending on the circumstances, you may have rights to access, correct, erase or restrict the use of your personal information, receive a portable copy of it, or object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time.

To make a request, email us using the address above. We may need to confirm your identity before responding. Some rights are subject to legal exceptions, including requirements to retain tax and transaction records.

You can also complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first.

We use reasonable technical and organisational measures to protect personal information and limit access to people and providers who need it. No internet service is completely secure, so please avoid sending unnecessary sensitive information in an enquiry form.

SHB Ketubahs does not use personal information to make solely automated decisions that have legal or similarly significant effects. Stripe may perform automated payment and fraud checks under its own privacy notice.

We may update this notice when our services, providers or legal obligations change. The latest version will always appear on this page with its updated date.

Questions about this notice can be sent to sophieellenbogen94@gmail.com. For other questions, you can also use our contact page.