Privacy

Last updated 11 November 2026

Carey Colour is run by Joe Carey, a sole trader in Shropshire, England, who is the data controller for this shop. Questions or requests: hello@josephcarey.com.

What we collect and why

• Orders: your email address, what you bought, the price and the date, so we can deliver your files, send your receipt, let you download again later and keep tax records. Legal basis: performing our contract with you, and legal obligation for accounting records (kept for six years).
• Payments: handled entirely by Stripe. We never see or store your card details. Stripe's privacy policy applies to the payment step.
• Newsletter: only if you ask for it, with a confirmation email first. You can unsubscribe from any email. Legal basis: consent.
• Shop statistics: we count anonymous events such as "a basket was started" to understand which pages work. We don't use cookies for this, and we don't store your IP address or build a profile of you. A random number kept only for your current browser tab joins up one visit. Legal basis: legitimate interest in running the shop.
• Where an order came from: with each order we note the campaign tags in the link you arrived by (for example "instagram / reel"), the website that referred you and the first page you landed on, so we know which adverts work. This is stored with the order, not shared. Legal basis: legitimate interest.
• Your basket is kept in your own browser's storage so it survives a page reload. It never leaves your device until you check out.

Advertising cookies

If advertising pixels (such as Meta's) are ever switched on, they only load after you say yes in the cookie banner, and you can change your mind any time using "Privacy choices" at the bottom of every page.

Who processes data for us

Cloudflare (hosting; our order database is stored in the EU), Stripe (payments) and our email provider (receipts and newsletters). Each is bound by a data processing agreement. Some may process data outside the UK under approved safeguards.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to processing or withdraw consent at any time. Email us and we'll reply within a month. You can also complain to the Information Commissioner's Office at ico.org.uk.