Skip to main content
C41

Back to home

Privacy policy

Last updated:

This Privacy Policy applies to c41.uk, also referred to as www.c41.uk (“the Website”), owned and operated by C41, a division of Euvra-Mossant Foundation, 61 Bridge Street, Kington, England, HR5 3DJ, United Kingdom. The term “you” or “customer” refers to the user, visitor, or customer of the Website.

Under this policy, “we”, “us”, “our” and “C41” refer to C41 .

We are committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and how long we keep it.

Information we collect

We collect only the personal information strictly necessary to process and fulfil your order for a handmade cyanotype print. This includes:

  • Your name, email address, phone number and postal delivery address, provided by you during the ordering process
  • Your order details, including the photo(s) you submit for printing, print format, quantity

We do not collect any additional personal information beyond what is required to complete your order.

Payment information

Payments are processed exclusively through Stripe’s hosted checkout page. You enter your payment details directly on Stripe’s platform. We do not receive, store, or process any payment card information. Stripe’s handling of your payment data is governed by their own Privacy Policy.

How we use your information

Your personal data is used solely for the following purposes:

  • Processing, producing, and fulfilling your order
  • Communicating with you regarding your order status, including shipping and delivery confirmation
  • Responding to messages you send us through our contact form
  • Meeting applicable legal or tax obligations

We do not use your data for any marketing, profiling, or analytical purposes. We will never contact you with promotional or commercial communications.

Legal basis for processing (GDPR): Where the General Data Protection Regulation (EU) 2016/679 applies, the legal basis for processing your personal data is Article 6(1)(b) — processing is necessary for the performance of a contract to which you are a party, namely the fulfilment of your order.

Email communications

We send emails exclusively for transactional purposes: to confirm receipt of your order and to reply to enquiries submitted through our contact form. Our emails contain no marketing content, promotional offers, or commercial solicitations of any kind.

Sharing of personal data

We do not sell, rent, or share your personal data with third parties, except as strictly necessary to deliver your order. Specifically:

  • Your name, phone number and postal address are shared with the courier or postal service for the sole purpose of delivering your print

No personal data is shared with any other third party, including for advertising, analytics, or any other commercial purpose.

Data retention and deletion

We retain your personal data only for as long as necessary to fulfil your order and meet our legal obligations. Once delivery of your order has been confirmed, your personal data — including your name, email address, postal address, and any photo(s) submitted — will be promptly and securely deleted. We do not retain customer data for future marketing or any other purpose beyond the immediate service provided.

Cookies and tracking

The Website uses only strictly necessary session cookies to maintain the ordering process and to store your cookie consent preference. We do not use analytics, tracking, advertising, or any other non-essential cookies. For full details, please refer to our Cookies Policy.

Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Payment information is processed exclusively through Stripe, which maintains industry-standard security certifications.

Your rights

Under applicable data protection law, you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data
  • Object to or restrict the processing of your data

To exercise any of these rights, please contact us at:
privacy@c41.uk

We will respond within 2 to 7 business days.

If you are located in the European Union or European Economic Area, you also have the right to lodge a complaint with your local data protection supervisory authority. In Germany, the competent authority is determined by your state of residence (Landesdatenschutzbehörde). A list of supervisory authorities is available at: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html If you are located in the United Kingdom, you may contact the Information Commissioner's Office (ICO) at https://ico.org.uk/

California residents

C41 does not sell, share, or otherwise disclose personal data to third parties for commercial purposes. At the current scale of operation, C41 does not meet the thresholds that trigger obligations under the California Consumer Privacy Act (CCPA) or California Privacy Rights Act (CPRA). Regardless, we are committed to the same data minimisation and deletion practices described in this policy for all customers, wherever they are located.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version and its date of last revision will always be available on this page.

Further information

For further information about your data protection rights, you may consult the UK Information Commissioner’s Office (ICO): ico.org.uk.