Privacy

We use your personal information to process your orders and run the shop. We do not sell your information or send marketing emails.

Who is responsible for your information

Pop Robin Cards is a brand of Aion Ecom Ltd, a company registered in England and Wales, company number 12038871. Aion Ecom Ltd is the data controller.

For privacy questions or requests, email harry@poprobincards.co.uk.

Information we collect

When you order, we collect your name, email address, delivery address, the items you bought, the amount paid and any gift message. We use these details to process your order, post your cards and send you order emails. Our lawful basis is performing our contract with you.

We print your gift message and store it with the order. Please include only information you are comfortable sharing with us.

We also record how you found the site, including the page you arrived on, the referring website and any campaign details in the link you followed. We use this to understand which websites and campaigns bring customers to the shop. Our lawful basis is our legitimate interest in understanding our sales. See cookies and browser storage for details of what is recorded.

You can order without creating an account.

We use these services to run the shop and fulfil orders:

Stripe processes payments and supplies the contact and delivery details entered at checkout. Your card details go directly to Stripe.
Amazon Web Services hosts the site and stores orders in its London region. Its email service, Amazon SES, sends order emails.
Royal Mail receives the recipient’s name and delivery address on the parcel.

We do not share your order information with advertising networks or use it to target you with adverts.

How long we keep information

Our retention policy is to remove delivery address details after 548 days (about 18 months). We keep order and payment records for around six years to meet tax and accounting requirements.

The browser record of how you found us is valid for 30 days. If you place an order during that time, we save referral and campaign details with the order. That order record can include an advertising click identifier from the link you followed. The 30-day browser limit does not delete those order details.

Your rights

You can ask us to:

give you a copy of your personal information
correct inaccurate information
delete information
restrict how we use it
provide it in a portable format
consider your objection to our use of it

Email harry@poprobincards.co.uk. We normally respond within one month. Some information must be kept for legal reasons, such as tax records. We will explain if we cannot carry out your request.

You can complain to the Information Commissioner’s Office about how we handle your information. You can also contact us directly to raise a concern.

Keeping information secure

The site uses HTTPS to encrypt information sent between your browser and our site. We restrict access to order records. Stripe handles your card details, and we do not store your card number.