Last updated: 17 October 2026
This policy explains what personal information Sora & Stone collects when you visit soraandstone.co.uk or buy from us, why we collect it, and what rights you have. We’ve kept it short and plain on purpose.
Who we are
Sora & Stone is the data controller for the information described here.
Address: Unit 3, The Old Workshops, Pitt Lane, Bideford, EX39 3JA
Email: hello@soraandstone.co.uk
What we collect and why
- When you place an order — your name, billing and delivery address, email, phone number (if you give it) and what you bought. We need this to take payment, send your order and handle any returns, and we keep order records because tax law requires it.
- When you pay — card payments are handled by Stripe, and by Klarna or Amazon Pay if you choose them. We never see or store your full card details.
- If you create an account — your login details and order history, so you can track orders and check out faster.
- If you join our newsletter — your email address, plus your name if you sign up at checkout. We only email you because you asked us to, and every email has an unsubscribe link.
- When you contact us — whatever you include in your message, so we can reply.
- When you browse the site — only if you accept analytics cookies, Google Analytics records how the site is used: pages viewed, approximate location, device type, and shop activity such as products viewed and orders placed. We use it to make the shop better. If you decline, nothing is stored on your device.
Who we share it with
We only share what each service needs to do its job:
- Hostinger — hosts our website and its data.
- Stripe — processes card payments, and Klarna and Amazon Pay payments where you choose them.
- Royal Mail — delivers your order, so receives your name and delivery address.
- Brevo — sends our newsletter and stores our mailing list.
- Google — Google Analytics, only if you accept analytics cookies. Our fonts are currently loaded from Google Fonts, which means Google receives your IP address when a page loads.
We never sell your personal information.
Transfers outside the UK
Some of these providers, such as Google and Stripe, may process data in the United States. Where they do, the transfer is covered by the UK–US Data Bridge or the UK International Data Transfer Addendum.
How long we keep it
- Order records: six years after your purchase, as required for tax.
- Account details: until you ask us to close your account.
- Newsletter: until you unsubscribe.
- Analytics data: up to 14 months.
Cookies
We use the cookies the shop needs to work — your basket, checkout and staying logged in — and analytics cookies only if you agree. You can change your choice at any time using the “Cookie settings” link at the bottom of every page. Our Cookie Policy lists every cookie we use.
Your rights
Under UK data protection law you can ask to see the personal information we hold about you, have it corrected or deleted, restrict or object to how we use it, or have it sent to you or another organisation. Where we rely on your consent — the newsletter and analytics — you can withdraw it at any time. Email hello@soraandstone.co.uk and we’ll respond within one month.
If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first.
Changes to this policy
If we change this policy, we’ll update the date at the top of this page.