Privacy policy

Who is responsible for your information

Martin Blyth trading as LithoGlow is a self-employed sole trader based in Fife, Scotland. LithoGlow is the trading name of this business.

Email: info@lithoglow.co.uk.

Martin Blyth is the controller of the personal information LithoGlow uses for the purposes described here. Contact us using the details above about this notice or your information.

What we collect and why

We receive information directly from you and from the services involved in your account, payment and delivery.

• Orders and delivery: your name, email, telephone number, billing and delivery addresses, products, payment status and transaction references. We need these to take payment, supply your order and provide updates. Our lawful basis is performing our contract with you, or taking steps you request before a contract.
• Accounts and baskets: account identifiers, sign-in information, saved basket items and linked order history. We use these to provide the account and shopping features you request, on the basis of our contract with you.
• Enquiries and complaints: contact details and the information you choose to send. We use these to respond, resolve problems and maintain relevant correspondence. The basis is our contract where it concerns an order, or our legitimate interest in responding to enquiries and resolving disputes.
• Business and security records: transaction records needed for tax and accounting obligations, and technical information such as IP addresses or request logs processed by our hosting and security providers. The bases are legal obligations and our legitimate interests in preventing fraud, protecting the service and dealing with claims.
• Optional campaign analytics: the limited information explained below, based on your consent.

If you do not provide information needed to process an order or maintain an account, we may be unable to provide that service. You can browse and buy without agreeing to optional analytics.

Who receives your information

We share relevant information with the providers needed to run the shop:

• Stripe processes payments and supplies transaction and customer details needed for orders. LithoGlow does not receive or store your full card number or security code.
• Clerk provides account registration and sign-in.
• Base manages order fulfilment and delivery records. Delivery carriers receive the contact and address details needed to deliver your parcel.
• OpenAI Sites and Cloudflare provide the website platform, hosting, storage and supporting infrastructure.
• Our email service handles customer correspondence. Professional advisers or public authorities may receive relevant records where required for our business obligations or legal claims.

Providers may act as processors for us or as separate controllers for some of their activities, such as payment fraud prevention. Their own notices explain that processing: Stripe privacy, Clerk privacy, OpenAI privacy and Cloudflare privacy.

Optional campaign analytics

If you choose Allow analytics, we store a random session identifier and the campaign labels from your link in this browser tab. The session expires after 30 minutes of inactivity. We measure page views, basket actions and checkout starts, and carry campaign labels into Stripe so a confirmed paid order can be attributed to that campaign.

Our campaign event records do not include your name, email address, IP address, browser fingerprint or full browsing URL. Attributed order records use the checkout reference, campaign labels, currency and amounts. This is separate from the personal information used to fulfil an order and any technical logs held by service providers.

Reports cover the last 90 days. Older analytics records are removed when a report is refreshed, rather than automatically at the exact 90-day point. The data helps us understand campaign performance; it does not provide complete or cross-device attribution.

Declining or withdrawing consent stops future optional collection in this browser and clears the campaign session from this tab. Withdrawal does not affect processing already carried out lawfully. Read our cookie policy for storage details.

How long we keep information

We keep order and payment records for fulfilment, customer support and applicable accounting, tax and legal claim periods. The period depends on the type of record and any outstanding obligation or dispute; closing an account does not necessarily remove records we must retain.

Account and saved basket records are kept to provide the service until the account or relevant information is deleted, subject to records needed for security, legal obligations or claims. Enquiry correspondence is retained while the enquiry is active and for any related order, complaint or claim. Contact us for the retention criteria applicable to a particular record or to request deletion.

Browser storage lasts as explained in our cookie policy. Our analytics retention is described above. Service providers may have separate retention periods for information they control.

Security and international processing

We use access controls and hosted services to help protect information. Only share the details needed for your enquiry; never email us payment card security codes, passwords or full card numbers.

Our platform, account and payment providers operate internationally, so information may be processed outside the United Kingdom. Where UK data protection law requires safeguards for a restricted transfer, these must be provided through an applicable adequacy arrangement or approved contractual protections. Contact us for information about the safeguards relevant to your data; provider notices also describe their international processing.

Your rights and complaints

Depending on the circumstances, you can request access to your personal information, correction, deletion, restriction of processing or a portable copy. You may object to processing based on legitimate interests and withdraw consent where we rely on it. These rights have legal exceptions, including where records must be kept for tax or legal claims.

Contact info@lithoglow.co.uk to make a request. We may ask for proportionate information to verify your identity. We normally respond within one month; we will explain any lawful extension or reason we cannot fulfil a request.

LithoGlow does not use campaign analytics to make solely automated decisions that have legal or similarly significant effects on you. Payment and account providers may use their own fraud-prevention processes.

You can complain to us using the contact details above, or to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Changes to this notice

We update this notice when the way the shop uses information changes. The date at the top identifies this version. Where a change materially affects you, we will provide any further notice or consent request required by law.