Privacy policy
updated on 15th October 2026
This Privacy Notice explains how Resin & Beyond Studio collects, uses, stores and shares your personal information when you visit our website, place an order, contact us or use our services.
We are committed to respecting your privacy and handling your personal information responsibly in accordance with applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018.
1. Contact Details
Business name: Resin & Beyond Studio
Data controller: Amy Boatwright
Email: resin.beyond.studio@hotmail.com
Facebook: Resin & Beyond Studio
Website: www.resinbeyondstudio.co.uk
If you have any questions about this Privacy Notice or how we handle your personal information, please contact us by email or via our Facebook page.
2. What Information We Collect, Use and Why
We collect and use personal information where necessary to provide our handmade products and services, process orders, arrange deliveries, communicate with customers and comply with our legal obligations.
2.1. Providing products and fulfilling orders
We may collect and use:
- Names and contact details.
- Billing and delivery addresses.
- Order and purchase history.
- Payment and transaction information.
- Correspondence relating to orders.
- Product choices and personalisation instructions.
We use this information to process orders, create and deliver products, provide customer support and resolve any issues relating to your order.
2.2. Personalised products and memorial keepsakes
If you order a personalised resin product or pet memorial keepsake, you may choose to provide:
- Names and dates.
- Personal messages.
- Photographs of pets or other images you would like included. - Any other personalisation details needed to create your item.
We use this information only where reasonably necessary to fulfil your order, communicate with you and provide related customer support. Please ensure that you have permission to share any photographs or other information you provide.
We will not use your photographs or personalisation details in our marketing or social media content without obtaining the appropriate permission.
We will delete photographs and personalisation files once they are no longer needed, unless we have a legitimate reason or legal obligation to retain them.
2.3. Payments
Payments made through our online shop are securely processed by Stripe. We may receive transaction-related information, such as the payment status, transaction reference and other payment details linked to your order. Stripe handles payment information in accordance with its own privacy policy and applicable data protection requirements. We do not store your full payment card details.
2.4. Legal and financial requirements
We may collect and retain names, contact details, purchase information and financial transaction records where necessary to meet our legal, accounting and tax obligations.
2.5. Customer enquiries, complaints and claims
When you contact us, we may retain your contact details, relevant order information, correspondence and any other information necessary to respond to your enquiry, resolve a complaint or manage a claim.
2.6. Website information and cookies
Our online shop is hosted by Big Cartel. As part of providing its website and e-commerce services, Big Cartel may use cookies and similar technologies.
Depending on the features and technologies in use, this may involve collecting technical information about your visit, cookie-related data and details of how you interact with the shop. We have not installed any separate advertising pixels or independent advertising-tracking tools on our shop. However, Big Cartel may collect certain information through technologies used within its own platform.
For further information, please refer to Big Cartel’s privacy and cookie policies.
3. Lawful Bases and Your Data Protection Rights
Under UK data protection law, we must have a lawful basis for collecting and using your personal information. Where applicable, we rely on the following lawful bases.
3.1 Contract
We process your personal information where necessary to enter into or perform a contract with you. This includes processing orders, creating personalised products, arranging deliveries and providing customer support.
3.2. Legal obligation
We process and retain personal information where necessary to meet our legal obligations, including applicable tax and accounting requirements.
3.3. Legitimate interests
We may process personal information where necessary for our legitimate business interests, provided that those interests do not override your rights and freedoms.
Our legitimate interests may include responding to customer enquiries, resolving complaints, managing returns and refunds, addressing damaged or missing goods, maintaining appropriate business records and protecting our business against fraud or misuse.
We only process information that is reasonably necessary for these purposes and remain mindful of our customers’ reasonable expectations of privacy.
3.4. Consent
Where consent is relied upon as the lawful basis for processing your personal information, we will request your consent before processing it for that specific purpose. You may withdraw your consent at any time. However, withdrawing consent will not affect the lawfulness of any processing carried out before your consent was withdrawn.
4. Your Data Protection Rights
Depending on the circumstances, you may have
the right to:
- Access: Request a copy of the personal information we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete information.
- Erasure: Ask us to delete your personal information where the law allows.
- Restriction: Ask us to limit how we use your information in certain circumstances.
- Object: Object to certain types of processing, including processing based on
legitimate interests. - Data portability: Request certain information in a transferable format where applicable.
- Withdraw consent: Withdraw consent where we rely on it as our lawful basis.
These rights are subject to applicable legal conditions and exemptions. For example, we may be required to retain certain order and financial records even if you request their deletion. To exercise any of these rights, please contact us using the details provided in Section 1. We may need to verify your identity before processing your request.
We will respond within the timeframe required by applicable data protection law, which is usually one month.
5. Marketing and Service Updates
We may contact you where necessary to provide updates about your order, respond to an enquiry or address a customer service matter.
We do not currently operate an active email marketing list.
In the future, we may introduce an optional mailing list to share information about product launches, shop updates and news relating to Resin & Beyond Studio. If we do so, we will explain how your information will be used and obtain your consent where required by law.
You will be able to unsubscribe from marketing communications at any time.
We may also share business updates through our social media pages. Any personal information used for marketing purposes will be handled in accordance with applicable data protection and electronic marketing laws.
6. Where We Get Personal Information From
We obtain personal information from the following sources:
- Directly from you: When you place an order, provide personalisation details, contact us or communicate with us through our social media pages.
- Our service providers: Such as Big Cartel and Stripe, where they provide us with information needed to process orders, payments or customer enquiries.
- Other sources where appropriate: For example, publicly available information or information supplied by another party where there is a lawful reason to use it.
We only use information obtained from these sources where necessary and where we have an appropriate lawful basis.
7. How Long We Keep Information
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by law.
7.1. Customer and order information
We retain customer and order information only for as long as necessary to fulfil orders, provide customer support, manage complaints, returns and claims, and comply with our legal obligations.
7.2. Financial and transaction records
We retain relevant financial and business records for the period required by HMRC and other applicable legal requirements.
For self-employed business records, this is generally at least five years after the 31 January submission deadline for the relevant tax year, subject to any applicable exceptions.
7.3. Customer correspondence and complaints
We keep relevant correspondence for as long as reasonably necessary to handle enquiries, resolve complaints or claims and protect our legitimate business interests.
7.4. Personalisation photographs and files
We will delete photographs and personalisation files when they are no longer needed for creating the product or handling related customer service matters, unless there is a valid reason to retain them.
7.5. Marketing information
We do not currently operate an active email marketing mailing list. If we introduce one, we will retain marketing information only for as long as necessary and in accordance with applicable legal requirements and your rights.
7.5. Website and cookie information
Information collected through Big Cartel’s cookies and website technologies is subject to the relevant technologies, purposes and retention periods. For further information, please refer to Big Cartel’s privacy and cookie policies. When personal information is no longer needed, we will securely delete or destroy it or anonymise it where appropriate.
8. Who We Share Information With
We do not sell your personal information.
We may share relevant information with the following organisations where necessary to operate our business.
8.1. Big Cartel
Purpose: E-commerce platform and website hosting provider.
Big Cartel provides and hosts our online shop and processes information needed to operate the storefront, manage orders and provide services to customers. Its platform may also use cookies and related technologies.
8.2. Stripe
Purpose: Payment processing provider
Stripe processes payments and relevant transaction information to enable customers to pay for orders and allow us to receive payments.
8.3. Delivery providers
We may share your name, delivery address and other necessary information with delivery providers, such as Royal Mail, to facilitate the delivery of your order.
8.4. Regulatory authorities and other organisations
We may disclose personal information to relevant regulatory authorities or other organisations where required by law, or where necessary to establish, exercise or defend legal claims.
8.5. Other suppliers and service providers
We may share personal information with trusted service providers where necessary to operate our business, deliver our services or address customer-related matters.
We will limit any information shared to what is reasonably necessary for the specific purpose.
9. Sharing Information Outside the UK
Some service providers may process or store personal information outside the United Kingdom.
Big Cartel, LLC
Category: E-commerce platform and website hosting provider.
Country: United States.
Big Cartel may process customer and order information to provide our online shop services.
Stripe
Category: Payment processing provider.
Country: Information may be processed in the United States or other countries, depending on the services and arrangements involved.
Stripe processes payment and transaction information to provide payment services.
Where personal information is transferred outside the United Kingdom, applicable UK data protection requirements must be met, including any necessary adequacy arrangements or appropriate safeguards. For further details about international transfers, please consult the relevant provider's privacy information.
10. Cookies
Our online shop is hosted by Big Cartel, which uses cookies and similar technologies to provide and support its website and e-commerce services. Depending on the platform’s settings and the features in use, these technologies may support essential shop functions, shopping features, security measures and other operational purposes.
We do not currently use our own advertising pixels or separate advertising-tracking tools.
Big Cartel’s use of cookies and similar technologies is separate from any tracking tools we may choose to implement independently. Accordingly, we do not represent that our website is entirely free of cookies. Where applicable law requires consent for non-essential cookies or similar technologies, the relevant consent requirements will apply.
For further information about the cookies and similar technologies used by Big Cartel, please refer to its current privacy and cookie information.
11. Keeping Your Information Secure
We take reasonable and appropriate measures to protect the personal information we process against unauthorised access, loss, misuse, alteration or disclosure. We use third-party platforms and service providers to operate our online shop and process payments. We do not store full payment card details ourselves. Although no method of electronic transmission or storage can be guaranteed to be completely secure, we take reasonable steps to safeguard customer information.
12. Children's Privacy
Our shop is intended for customers who are legally able to place orders.
We do not knowingly collect children's personal information for marketing purposes. If you believe a child has provided personal information to us unnecessarily, please contact us as soon as possible so that we can review the matter and take appropriate action.
13. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to our business, services, website, data-processing practices or legal obligations. The most recent version will be published on our website, with the date of the latest update displayed at the top.
14. How to Complain
If you have concerns about how we use your personal information, please contact us first so we can try to resolve the issue.
Email: resin.beyond.studio@hotmail.com
Facebook: Resin & Beyond Studio
You also have the right to complain to the UK Information Commissioner's Office (ICO) if you are unhappy with how we handle your personal information.
ICO website: https://ico.org.uk/make-a-complaint/