Skip to content

Legal

Privacy policy

The legally-required boring bit. Short version: we collect the minimum we need to send you your order and stay in touch, we don't sell your data to anyone, and you can ask us to delete it any time.

Last updated: 8 June 2026

Who we are

This site is operated by Scribespire Limited, a company registered in England and Wales (company no. 15090317; registered office: 1 The Briars, Waterberry Drive, Waterlooville, Hants, PO7 7YH). "Oxfordshire Meadow & Hive" is a trading name of Scribespire Limited. Throughout this policy, "we", "us" and "our" mean Scribespire Limited. We are the data controller for the personal information described here.

What we collect, and why

If you place an order

  • Name, billing address, delivery address, email, phone number, to fulfil your order and contact you about it.
  • Order history, to handle returns, refunds, and customer support.
  • Payment details, handled entirely by Stripe; we never see or store your card numbers.

Legal basis: performance of a contract with you.

If you subscribe to our newsletter

  • Email address (and your name, if you give it).

Legal basis: your consent. You can unsubscribe at any time via the link at the foot of every newsletter.

If you email or contact us

  • Whatever you choose to share in the message itself.

Legal basis: legitimate interest in responding to your enquiry.

When you simply visit the site

  • Anonymised, aggregated usage statistics (which pages are popular, country-level location, browser type) via Cloudflare Web Analytics, no cookies, no personal identifiers.

Legal basis: legitimate interest in understanding which content is working.

Who we share data with

We use a small number of carefully-chosen providers. We never sell or rent your data to anyone.

  • Stripe (US, UK, Ireland), payment processing. See Stripe's privacy policy.
  • Sanity (Norway, EU), our content management system. Only order metadata (slug, quantity, stock count) touches Sanity; never your name or address.
  • Cloudflare (US, with UK PoP), DNS, CDN, email forwarding, analytics. Cloudflare privacy.
  • Resend (US), transactional emails (order confirmations, "we got your message" replies). Resend privacy.
  • Beehiiv (US), newsletter platform. Only if you've subscribed. Beehiiv privacy.
  • Spaceship (UK / EU), static hosting for this website.
  • Royal Mail (UK), for posting your order. They get your name and delivery address.
  • HMRC and other regulators, where we're legally required to (tax, fraud, crime).

Where any of these providers store data outside the UK / EEA, they operate under safeguards (Standard Contractual Clauses, adequacy decisions, or the UK-US Data Bridge) recognised by UK data protection law.

Cookies

We try to keep this site as cookie-free as possible. Right now we use:

  • A small browser-local store for your shopping cart (this never leaves your device, it's how the cart remembers items between pages).
  • Cloudflare's cookieless analytics (no identifier set on your device).
  • If you check out, Stripe sets cookies needed to run the secure payment page they host. We don't see those.

We don't use behavioural tracking, advertising cookies, or third-party analytics scripts. If we ever add any, this page will say so first and you'll see a consent banner.

How long we keep it

  • Order records: 7 years (we're required to keep these for HMRC).
  • Newsletter: until you unsubscribe, plus a few months in case you re-subscribe.
  • Email enquiries: 2 years.
  • Anonymous analytics: aggregated indefinitely; no personal data attached.

Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

  • Ask what data we hold about you (right of access).
  • Ask us to correct anything wrong (rectification).
  • Ask us to delete it (erasure, within limits where we're legally required to keep records).
  • Ask us to stop or restrict certain processing.
  • Request your data in a portable format.
  • Object to processing based on legitimate interest.
  • Withdraw consent at any time (e.g. unsubscribe from the newsletter).

Email [email protected] to exercise any of these. We'll respond within one calendar month.

If you're not happy with how we've handled your data

You have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator, though we'd appreciate the chance to put it right first.

ICO: ico.org.uk/make-a-complaint · 0303 123 1113.

Changes to this policy

If we change anything that materially affects how we handle your data, we'll update the "last updated" date at the top and, where the change is significant, mention it in our next newsletter.