Privacy Notice

This notice explains how Dragon in the Woodshed (“we”, “us”) collects and uses your personal data, and your rights under UK GDPR and the Data Protection Act 2018. We are the data controller for the information described below.

Questions or requests about your data? Email info@dragoninthewoodshed.com.

What we collect

If you join our list or save favourites: your email address, your first name (if you give it), and a record of your consent (date and time). We also keep a record of which products you have favourited.

If you request a commission: your name, email address and the details you enter about your enquiry.

Analytics: we count anonymous events — which products were viewed or clicked, and the page it happened on. These counts are not linked to your name, email or IP address, and nothing is stored on your device to collect them. Only if you accept on the cookie banner do we additionally attach a random session identifier (and the site you arrived from), which lets us see a visit as a journey rather than as separate events.

Why we use it, and our lawful basis

• Marketing emails — new products, deals and updates. Lawful basis: your consent.
• Responding to commission enquiries. Lawful basis: steps to enter into a contract.
• Anonymous product view & click counts, to improve the shop. These contain no personal data, so UK GDPR does not apply to them.
• Linking those events to a session identifier. Lawful basis: your consent (via the cookie banner).

We never sell your data, and we never use it for advertising or third-party tracking.

Who processes your data

We use a small number of trusted providers to run the site and send email. They process data on our instructions:

• Supabase — database & secure storage of the information above.
• Resend — sends our emails (welcome, updates, commission notifications).
• Vercel — website hosting and delivery.

Some providers may process data outside the UK/EEA. Where they do, appropriate safeguards (such as the UK International Data Transfer Agreement or equivalent) are in place.

How long we keep it

We keep your details for as long as you remain subscribed or in contact with us. If you unsubscribe or ask us to delete your data, we remove it promptly. Commission enquiries are kept only as long as needed to deal with your request and any resulting order.

Cookies & local storage

We use a minimal amount of browser storage:

• Strictly necessary — remembering your saved favourites and your email so you don't have to re-enter it. These are required for those features and are always on.
• Analytics — a random session identifier that groups your product views into a single visit. This is stored on your device only if you Accept on the cookie banner, and you can decline at any time. Declining does not stop us counting anonymous views and clicks, because that needs no browser storage.

We do not use advertising or third-party tracking cookies.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Have it corrected if it's wrong
• Have it erased (“right to be forgotten”)
• Restrict or object to how we use it
• Withdraw consent at any time — every marketing email has a one-click unsubscribe link
• Request a copy of your data in a portable format

To exercise any of these, email info@dragoninthewoodshed.com or use our contact page. We'll respond within one month.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

Last updated: July 2026. Website by Digivide.