Privacy policy

Who we are

This site is operated by Scribespire Limited, a company registered in England and Wales (company no. 15090317; registered office: 1 The Briars, Waterberry Drive, Waterlooville, Hants, PO7 7YH). "Oxfordshire Meadow & Hive" is a trading name of Scribespire Limited. Throughout this policy, "we", "us" and "our" mean Scribespire Limited. We are the data controller for the personal information described here.

What we collect, and why

The shop is not currently open and there is no way to place an order or pay on this site, so none of the processing that would involve is happening. What follows is what actually takes place today.

If you email us

• Your email address and whatever you choose to put in the message.
• Mail to hello@ is forwarded to a personal inbox by Cloudflare Email Routing.

Legal basis: legitimate interest in replying to you.

When you simply visit the site

• Anonymised, aggregated usage statistics (which pages are popular, country-level location, browser type) via Cloudflare Web Analytics, no cookies, no personal identifiers.
• Nothing else. The site loads no third-party scripts, fonts or trackers: everything, including the typefaces, is served from our own domain.

Legal basis: legitimate interest in understanding which content is working.

When the shop reopens

Taking orders will mean handling a name, a delivery address, an email address and an order history, with card payment handled entirely by a payment provider so we never see card numbers. None of that is happening yet. This page will be updated, and dated, before it does.

Who we share data with

While the shop is closed the list is short. We never sell or rent your data to anyone.

• Cloudflare (US, with UK presence), DNS, content delivery, email forwarding and cookieless analytics. Cloudflare privacy.
• Spaceship (UK / EU), hosting for this website.
• Sanity (Norway, EU), the system that stores the site's own text and images. It holds no information about visitors.
• HMRC and other regulators, where we are legally required to share something.

Stripe, Beehiiv, Royal Mail and an email-sending provider will appear here when the shop reopens and they start receiving data. They do not receive anything today.

Where any of these providers store data outside the UK / EEA, they operate under safeguards (Standard Contractual Clauses, adequacy decisions, or the UK-US Data Bridge) recognised by UK data protection law.

Cookies

We try to keep this site as cookie-free as possible. Right now we use:

• Cloudflare's cookieless analytics, which sets no identifier on your device.
• That is the whole list. The site sets no cookies of its own and stores nothing in your browser.

We don't use behavioural tracking, advertising cookies, or third-party analytics scripts. If we ever add any, this page will say so first and you'll see a consent banner.

How long we keep it

• Order records: none held, as no orders can be placed. When the shop reopens these will be kept for 7 years, as HMRC requires.
• Newsletter: if you ask to be kept posted, until you ask us to stop.
• Email enquiries: 2 years.
• Anonymous analytics: aggregated indefinitely; no personal data attached.

Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

• Ask what data we hold about you (right of access).
• Ask us to correct anything wrong (rectification).
• Ask us to delete it (erasure, within limits where we're legally required to keep records).
• Ask us to stop or restrict certain processing.
• Request your data in a portable format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time (e.g. unsubscribe from the newsletter).

Email [email protected] to exercise any of these. We'll respond within one calendar month.

If you're not happy with how we've handled your data

You have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator, though we'd appreciate the chance to put it right first.

ICO: ico.org.uk/make-a-complaint · 0303 123 1113.