Privacy & cookies

Who we are

Cartelle London Ltd is the data controller for this website. We are registered in England and Wales, number 17322131. Our registered office is 128 City Rd, London EC1V 2NX, United Kingdom. You can reach a person at hello@cartelle.co.uk.

Cookies

Four, at most, and three of them only in particular circumstances. We ask before setting the one that is not strictly necessary; if you ignore the question or refuse it, it is not set.

The consent cookie — strictly necessary

Remembers your answer to the cookie question, so we do not ask again. Without it we could not honour a refusal, which is why it is set either way.

The site password cookie — strictly necessary

While the shop is still being built, most of the site is behind a shared password. This cookie remembers that you got past it. It holds a hash, never the password. It goes away entirely when we open.

The sign-in cookie — strictly necessary

Only if you have an account and have signed in. It identifies your session and nothing else. There is no password on your account — signing in is a link sent to your inbox.

The first-touch cookie — optional, only with your permission

Records which link first brought you here — a campaign tag, or the site you arrived from. It is written once and never overwritten, so it remembers the first door rather than the latest. It lasts a year, it is not readable by any script on the page, and it is never sent to anybody else. Refuse the cookie question and it is never created; we simply lose that information, which is the cost of asking honestly.

You can change your answer whenever you like, as easily as you gave it: use Cookie settings, here or at the foot of any page. Saying no to the first-touch cookie after saying yes deletes it from your device straight away.

How we count visitors

We keep our own record of which pages are viewed. It uses no cookie at all, which is why it continues for people who have refused everything — counting a page view stores nothing on your device and reads nothing already there.

To estimate how many separate people visited on a given day without identifying anybody, each view is stamped with a short one-way hash of your browser’s user-agent, its language setting, a secret only our server knows, and today’s date. That value cannot be reversed, it is different tomorrow for the same browser, and it cannot be joined to an order, an email address, or yesterday’s rows. The user-agent itself is never stored.

No IP address is stored anywhere, ever. Our host tells us the country and region a request came from; we keep those two and discard the address they were derived from.

What we hold, and why

Waitlist

Your email address and the fact that you asked to hear when we open.

Designs you save

The options you chose. If you asked us to email a design to you, your address as well, and separately whether you agreed to hear from us again — those are two different questions and we keep them apart.

Orders

Your email address, delivery address and what you ordered, kept for six years, as UK tax and accounting rules require. After six years your name, email address, phone number, postal addresses and anything personal on the order — the words on a nameplate or an embossing, a gift message — are removed, and only the record of the sale stays: what was bought, for how much, when, and to which country.

Emails you send us

What you write to us, and our replies, kept with your order for two years and then deleted.

Reviews

What you wrote, and the order it was about.

Emails we send you

A record of what was sent and whether it arrived, was opened, or a link in it was followed. How we know, and what we keep, is under Opens and clicks in our emails.

Your consent choices

When you gave or withdrew permission, so we can show that we asked and what you said.

Marketing email

We write to you only if you asked us to, or because you bought something and the letter is about that order. Every marketing email carries a one-click unsubscribe that works without signing in, and stopping them is immediate and permanent unless you ask us again.

One exception, told to you on the basket page before you reach checkout: if you type your email at checkout and leave without finishing, we may send one reminder about that basket (at most two, a couple of days apart). It uses only the address and the basket you left, carries the same one-click unsubscribe, and never goes to anyone who has unsubscribed or who went on to order. The basket you left, and what you typed into the checkout, is kept for six months and then deleted.

Opens and clicks in our emails

Our emails — the ones about your order as much as the letters you signed up for — contain a small invisible image, and their links pass through our email provider, Resend, on the way to wherever they point. When your mail app loads that image, or you follow a link, Resend tells us. That is how we can see whether an email was opened and which links in it were clicked. Some mail apps load every image the moment an email arrives, so “opened” is a good guess rather than a certainty.

We use it for two things: knowing that the emails about your order arrive and are read, and making the newsletter better by learning which letters are worth sending. We do not use it to build an advertising profile of you, and we do not share it with anybody.

What Resend reports includes your IP address and details of your device. We strip both out before we store anything, so what we keep is the address the email went to, which email it was, whether it was opened or which link was followed, and when.

To avoid it, turn off automatic image loading in your mail app: the image is never fetched, so no open is recorded. A link is counted whenever it is followed, so the only way round that is not to follow it — or, for marketing, to unsubscribe, which stops those letters altogether.

We keep these records for 13 months and then delete them. If you ask us to erase your data before then, they are detached from your address straight away.

Who else touches your data

Only the suppliers that make the site work, each acting on our instructions and none of them permitted to use your data for their own purposes:

• Vercel — hosting and content delivery.
• Neon — the database, hosted in the EU.
• Cloudflare R2 — storage for images.
• Resend — sending email, and telling us when one is delivered, opened, or a link in it is clicked.
• 17TRACK — following a parcel with the carrier once it is posted: we give it the tracking number and the carrier, and nothing else, so we can tell you when it is out for delivery. Never your name, email or address.

We do not sell your data, we do not share it with advertisers, and there is no third-party advertising or analytics code on this site to share it with.

How long we keep things

Order records for six years, as tax and accounting rules require; after that the order is kept only as a sale to nobody in particular, with your name, contact details, addresses and personal words removed. What you type into a checkout you don’t finish, and a basket you leave there, for six months. Emails you send us, and our replies, for two years. Waitlist entries until you leave the list. Page-view records are anonymous from the moment they are written, so there is nothing in them to delete. Anything you send us while photographing a notebook page, the photographs included, is held for thirty minutes and then deleted, within the hour at the latest. Records of emails opened and links clicked are kept for 13 months and then deleted.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. You can withdraw consent at any time, and you can object to us using your data for marketing — that one we always honour, without asking why. Write to hello@cartelle.co.uk and a person will answer. We will respond within one month.

If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first, but it is your right either way.

Changes

If what we do with your data changes, this page changes with it, and the date at the top moves. It is not moved for anything else.