Privacy Policy
Privacy Policy
Last updated: 29 August 2026
This privacy policy explains how Adam Camp, trading as FishBarn Pottery ("FishBarn", "we", "us" or "our"), collects and uses personal information when you visit https://www.fishbarnpottery.co.uk, contact us, or place an order. We are the data controller for the personal information described in this policy.
Contact details
Data controller: Adam Camp
Postal address: 58 Lilian Road, London SW16 5HW
Email: privacy@fishbarnpottery.co.uk
Telephone: [SUPPORT PHONE]
Information we collect
Depending on how you use the store, we may collect:
- identity and contact details, such as your name, billing and delivery addresses, email address and telephone number;
- order and transaction details, including the products purchased, amount paid, currency, delivery method and order history;
- payment-related information supplied to our payment processor, such as payment status, card type and the last digits of a payment card—we do not receive or store your full card number or security code;
- communications, including enquiries, return requests, complaints and customer-service correspondence;
- technical and usage information, such as IP address, device/browser information, security logs, cookie identifiers and interactions with the website; and
- marketing preferences, if you choose to receive marketing from us.
Please do not send us unnecessary sensitive personal information.
Why we use personal information and our lawful bases
| Purpose | Information used | UK GDPR lawful basis |
|---|---|---|
| Take payment, fulfil and deliver orders, send order updates, and handle returns | Identity, contact, order and transaction information | Performance of a contract or steps requested before a contract |
| Keep accounting, tax and transaction records and comply with lawful requests | Identity, contact, order and transaction information | Legal obligation |
| Prevent fraud, secure the website, investigate misuse and defend legal claims | Transaction, technical, usage and communication information | Our legitimate interests in protecting customers and the business, and legal obligation where applicable |
| Answer enquiries and provide customer service | Contact and communication information | Performance of a contract where the enquiry concerns an order; otherwise our legitimate interests in responding to enquiries |
| Improve the store and understand aggregate site use | Technical and usage information | Consent where non-essential cookies or similar technologies are used; otherwise our legitimate interests where permitted by law |
| Send email marketing | Contact details and marketing preferences | Consent, unless another basis is permitted by applicable electronic-marketing law |
Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing. You can unsubscribe from marketing using the link in the message or by contacting us.
Payment processing
Payments are processed by Stripe. Stripe receives personal and payment information needed to process the transaction, prevent fraud and comply with its legal obligations. Stripe acts as an independent data controller for some of this processing. Read Stripe's Privacy Policy for details.
Who receives personal information
We disclose information only where needed, including to:
- Stripe and other providers involved in payment processing and fraud prevention;
- delivery carriers and fulfilment providers, so they can deliver an order;
- our website, hosting, email, order-management and customer-support providers;
- professional advisers such as accountants, insurers or legal advisers;
- regulators, courts, law enforcement or public authorities where required by law; and
- a buyer or successor if the business or its assets are reorganised, sold or transferred, subject to appropriate safeguards.
We do not sell personal information.
International transfers
Some service providers may process information outside the United Kingdom. Where UK data-protection law requires it, we use an approved transfer mechanism or rely on another lawful safeguard, such as UK adequacy regulations or approved contractual clauses. Contact us if you would like more information about the safeguards relevant to your information.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose collected, including to meet tax, accounting, consumer-protection and legal requirements. Order and transaction records are normally retained for at least six years after the relevant accounting period or transaction where required for legal and tax purposes. Other correspondence and technical records are reviewed and deleted or anonymised when no longer needed.
Payment-card details are retained by Stripe according to Stripe's own policies; we do not store full card numbers or security codes.
Security
We use appropriate organisational and technical measures to protect personal information. Checkout and payment pages must use HTTPS, and payment-card data is handled through Stripe's secure payment systems. No online service can guarantee absolute security, but we limit access to people and providers who need the information for the purposes described above.
Your rights
Depending on the circumstances, UK data-protection law may give you the right to:
- ask for access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to erase information;
- ask us to restrict how information is used;
- object to processing based on legitimate interests or to direct marketing;
- receive certain information in a portable format; and
- withdraw consent where processing is based on consent.
These rights are not absolute. To exercise one, contact privacy@fishbarnpottery.co.uk. We may need to verify your identity and will normally respond within one month.
You may complain to the Information Commissioner's Office (ICO), the UK data-protection regulator, at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.
Cookies
We use strictly necessary technologies to operate the basket, checkout and site security. We use analytics, advertising or other non-essential cookies only where they are configured and, where required, after you have made a choice through the cookie controls. See our Cookie Policy for more information.
Children's information
The store is not directed at children, and we do not knowingly collect personal information directly from children. Orders must be placed by someone able to enter into a binding purchase contract.
Changes to this policy
We may update this policy when our practices, providers or legal obligations change. We will publish the revised version here and update the date above. Material changes will be brought to customers' attention where appropriate.