Skip to main content
Shipping to?

Privacy Policy

Last updated 17 October 2026

"We use your information to fulfil orders and provide optional emails you choose. Optional Google Ads measurement starts only after you allow it."

Email only

We collect order details and checkout cart snapshots. Newsletter signup is optional and separate.

Purpose-bound

Used to fulfil orders, support purchases, restore checkout carts and send cart reminders. Newsletter signup is optional and separate.

Privacy-first

No customer accounts. Self-hosted analytics are separate from order records, and optional Google Ads measurement can be declined or withdrawn through Cookie settings.

How your data is used

Exactly what happens with the information you provide at checkout.

What we collect

  • Email address. Provided at checkout to receive your order confirmation and fulfillment updates.
  • Newsletter email (opt-in). If you sign up to our newsletter, we collect only your email address and use it solely to send the newsletter. Double-opt-in confirmation required, and every email includes a one-click unsubscribe link.
  • Optional cart reminder. Checkout cart snapshots contain your email, cart contents, country, currency and browser-session identifier. These support cart reminders and restoring a checkout. They do not sign you up to the newsletter. Unsubscribe from cart reminders using the link in the email; this applies to future carts too.
  • Shipping details. Name and delivery address, passed directly to our print fulfillment partner to produce and ship your order.
  • Payment details. Handled entirely by Stripe — we never see or store your card information.

What we share

  • Stripe. Processes your payment and sends your receipt.
  • Print partner. Receives your shipping details to produce and deliver your print.
  • Resend. Sends order confirmations and fulfillment updates, and cart reminders. Newsletter signup uses a separate confirmation. Resend processes the recipient address and email content, including relevant order or cart details, and delivery and suppression records.
  • Google Customer Reviews. If you opt in on the order confirmation page, we share your email address, order number, and delivery country with Google's Customer Reviews program so Google can email you an optional survey about your purchase. Participation is voluntary. Google's use of this data is governed by the Google Privacy Policy.
  • Google Ads measurement (optional). If you allow ad measurement through the site's Cookie settings, the Google tag may send page and confirmed-purchase measurement data and use Google measurement cookies or similar storage. We send the order ID, value and currency for the confirmed purchase; we do not send your name, email address or delivery address in this measurement event. You can choose Reject optional or withdraw the choice later.
  • No sale or customer-list audiences. We do not sell personal information or upload customer lists for advertising audiences. Google Ads measurement receives only the limited fields described above after you allow it.

Where your data goes

Our hosting and CDN providers also process network metadata needed to deliver and secure the site. Some of the partners listed above are based outside Australia — primarily the United States (for payment processing, transactional email, and our hosting/CDN) and the United Kingdom (for print fulfillment). Your data may be processed in those countries to deliver your order. We only use partners that publish their own privacy commitments and meet international data-protection standards.

Cookies and analytics

A clear, complete list of the storage used for site operation and optional measurement.

Cookies we set

  • Order confirmation. A secure server-only cookie keeps your confirmed order available if you reload the confirmation page, without leaving the payment reference in the address bar. It expires after one hour.
  • Cookie settings. Your optional session-replay and advertising-measurement choices are saved in this browser for up to 180 days. They can be changed through Cookie settings in the footer.
  • witw_country. Remembers your shipping country when you choose one from the switcher, so prices and delivery options show in your currency on your next visit. Stored for 1 year. Contains a 2-letter country code — nothing more.

Cookies from our partners

  • Stripe (checkout only). Sets cookies on the checkout page to prevent payment fraud. Required to complete a purchase.
  • Google Ads measurement (optional). Google may set or read measurement cookies or similar storage only after you allow ad measurement. Use Cookie settings in the footer to withdraw that choice; declining does not affect browsing or checkout.
  • Cloudflare. Our hosting provider may set a short-lived cookie for bot protection and site security. Used for site security.

Analytics

We use a self-hosted, privacy-respecting analytics tool to count aggregated page views and understand which photos and pages people visit. The baseline page and event counts are cookieless and do not record a session. You can exclude this browser from anonymous analytics. Separately, optional session replay starts only after you allow it in Cookie settings. Replay is limited to clean public browsing pages, samples 15% of eligible sessions, masks all text and input values, blocks newsletter/search/contact widgets, and stops after five minutes. New consented replay recordings are stored in our self-hosted analytics service and removed from the live service after 30 days by a daily cleanup. Encrypted backup copies can remain for up to seven additional days while the normal backup rotation completes. Optional Google Ads measurement starts only after you allow it through Cookie settings. It uses a Google tag for page and confirmed-purchase measurement, with payment and customer contact fields excluded from the purchase event. We remove non-whitelisted query parameters before sending page or referrer values.

Data storage

We do not create customer accounts. Our database stores order records including email, purchased items, payment and fulfilment references, delivery country and tracking details. Stripe and the print partner hold your delivery name and address. Financial order records are generally retained for seven years for accounting and tax purposes; deletion and anonymisation requests are reviewed subject to records we must legally retain. We do not promise automatic deletion on a fixed date. Optional cart snapshots are deleted by our cleanup job after 30 days. We retain a hashed email identifier and opt-out timestamp separately to honour cart-reminder unsubscribes across future visits; these are not used for marketing. Newsletter preferences are held by Resend. Unsubscribing suppresses newsletter delivery and may retain a suppression record rather than deleting the contact. Encrypted backups and provider delivery records can remain for their normal retention periods.

Your rights

If you'd like to know what data we hold about a past order, or if you'd like it deleted, email us at hello@rhyswyles.com and we'll sort it out within a few days.

Questions about your data?

Email hello@rhyswyles.com — we aim to respond within 24 hours.

Browse the Gallery