Privacy policy

Who is responsible for your data

Made By Arlo Email: support@madebyarlo.co.uk.

What we collect and why

  • Orders: your name, delivery address, email address, the items you order and the text you personalise them with. We need this to make and deliver your order (contract).
  • Accounts: your email address, name and saved addresses if you create an account (contract).
  • Enquiries and quotes: your contact details, your message and any file you send us (legitimate interests, or steps before a contract).
  • Reviews: the name and comments you choose to give us (consent). We ask for a review by email after an order (legitimate interests).
  • Website analytics: how the site is used, through Google Analytics (legitimate interests).
  • Records: order and payment records we must keep for tax and accounting purposes (legal obligation).

We don't see or store your full card details. They go directly to Stripe.

Who we share it with

  • Stripe, to take payments
  • Royal Mail or another carrier, to deliver your order
  • Twilio SendGrid, to send emails
  • Microsoft, which hosts our database
  • Cloudflare, to check that contact and quote forms are sent by people, not bots
  • Google, for analytics, and for sign-in if you choose it
  • Meta, for sign-in if you choose it

Some of these providers process data outside the UK, using the legal safeguards UK law requires. We don't sell your data.

How long we keep it

We keep order records for six years for tax purposes. Account details stay until you ask us to close your account. Enquiries and quote files are kept for two years, unless they lead to an order.

Cookies

  • Essential: keep your cart, sign-in and security working. These can't be switched off.
  • Google Analytics (_ga): measure how the site is used.

You can block or delete cookies in your browser settings. The cart and checkout need essential cookies to work.

Your rights

You can ask to see, correct, delete or restrict your data, object to how we use it, or take a copy of it. Where we rely on consent, you can withdraw it at any time. Email us and we'll respond within one month.

If you're unhappy, please contact us first. You can also complain to the Information Commissioner's Office at ico.org.uk.

Last updated: November 2026