Privacy notice
What we collect when you buy something, why we need it, who else sees it, and how to get rid of it.
Who is responsible
Ian Bruce Campbell, a sole trader established in the United Kingdom trading as No Condemnation, 21 Hill Street, Haverfordwest, Pembrokeshire, SA61 1QQ, United Kingdom, is the controller of the personal data described here. Questions, or any request under this notice: [email protected].
What we collect
- Your order: name, email address, delivery address, the pieces and sizes you ordered, and the order reference.
- Payment: handled entirely by Stripe on their own secure pages. We receive confirmation that a payment succeeded and the last four digits of the card, but never the card number or security code.
- Correspondence: anything you send us by email about an order.
- Technical: the usual server logs kept by our hosting provider — IP address, browser type, time of request — for security and to keep the shop running.
We do not ask for, and do not want, any special category data (health, beliefs, and so on).
Why we use it
- To fulfil your order — taking payment, printing, delivering, and answering you when something goes wrong (performance of our contract with you).
- To keep records — invoices and order records we are required to keep for tax and accounting (legal obligation).
- To keep the shop working — security, fraud prevention and diagnosing faults (our legitimate interest in running the shop).
We do not send marketing email, we do not build profiles, and we do not sell or rent personal data to anyone.
Who else sees it
Only what each of them needs to do their job:
- Stripe — card payments and receipts.
- our print partner — the name, delivery address and order details needed to print and ship your piece. They ship in our name, not theirs.
- Cloudflare — hosting the shop and its order service.
- our email provider — receiving and storing the messages you send us.
Some of these providers process data outside the UK, mainly in the United States and the European Union, under standard contractual clauses or an equivalent safeguard. We will tell you which provider handled your order if you ask.
We will also disclose data where the law requires it, and to professional advisers if we ever need them.
How long we keep it
- Order and payment records: six years from the end of the tax year, because we must.
- Emails about orders: two years after the order is resolved.
- Server logs: a short period, typically weeks, then deleted.
Your rights
You can ask for a copy of your data, have it corrected, have it deleted, restrict or object to how we use it, or ask for it in a portable format. Email [email protected] and we will respond within one month. We may need to confirm who you are before acting — usually by replying from the address the order was placed with.
If you are unhappy with how we have handled it you can complain to the Information Commissioner's Office (ico.org.uk). We would rather hear from you first.
Cookies
This shop sets no advertising or analytics cookies, and we run no tracking scripts. The card payment pages are hosted by Stripe, which sets its own cookies there to keep the payment secure; those are covered by Stripe's own privacy notice. Our hosting provider may set a strictly necessary security cookie.
Changes
If this notice changes in a way that matters, the date below changes with it and — where we have your email and the change affects an order — we will tell you.
Last updated 19 October 2026. The terms of sale are in our terms.