Privacy policy

Who we are

Steelwood Co. operates steelwood.co. For any question about your personal data, or to exercise any of the rights described below, contact hello@steelwood.co.

What we collect

When you place an order

• Your name, email address and shipping address
• Your phone number, if you provide one, for carrier delivery contact
• What you ordered, and the amount paid

We never see your card details. Payment is taken on Stripe's own hosted checkout page. Card numbers are entered on Stripe's systems and are never transmitted to, processed by, or stored on this website.

When you contact us

• Your name, email address, and whatever you write in your message

Automatically

• Your cart is stored in your own browser using local storage. It stays on your device and is never transmitted to us until you begin checkout.
• Standard server request logs, including IP address, kept briefly for security and to diagnose faults.

Why we use it, and our legal basis

• To fulfil your order and provide customer support. Legal basis: performance of a contract with you.
• To answer your enquiries. Legal basis: our legitimate interest in responding to people who contact us.
• To keep the site secure and working. Legal basis: our legitimate interest in preventing abuse and fraud.
• To meet tax and accounting obligations. Legal basis: compliance with a legal obligation.

Who we share it with

We do not sell your personal data, and we do not share it with data brokers or advertisers. It is shared only with the processors needed to actually get you your order:

• Stripe processes payments. It receives your email address and billing details directly from you at checkout.
• Printify and its print providers receive your name, shipping address, email and order contents so the item can be produced and posted to you.
• Vercel hosts this website and processes the requests your browser makes to it.
• Shipping carriers receive your name and address to make the delivery.

Some of these providers operate in the United States and other countries. Where personal data is transferred internationally, those transfers rely on the safeguards each provider has in place, such as standard contractual clauses.

How long we keep it

• Order records: for as long as tax and accounting law requires, typically 7 years.
• Contact form messages: up to 24 months after the conversation ends.
• Server logs: typically 30 days.

Your rights

Depending on where you live, you may have the right to:

• Ask what personal data we hold about you, and get a copy
• Have inaccurate data corrected
• Have your data deleted, where we are not legally required to keep it
• Object to, or ask us to restrict, certain processing
• Receive your data in a portable format
• Withdraw consent, where processing relies on consent

California residents additionally have the right to know what personal information is collected and disclosed, the right to deletion, the right to correction, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

To exercise any of these, email hello@steelwood.co. We respond within 30 days. If you are in the UK or EU and are unhappy with our response, you may complain to your local data protection authority.

Children

This site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with information, contact us and we will delete it.

Cookies

We use no advertising or tracking cookies. Details of the small amount of local storage this site does use are in the cookie notice.

Changes

If this policy changes, the date at the top of the page changes with it. Material changes affecting how we use data you have already given us will be notified by email where we hold an address for you.