Your privacy, kept simple.

This private preview is hosted by ChatGPT Sites. The shop keeps basket choices and personalisation in your browser tab and does not submit them to an order service. There is no checkout or email collection here. Hosting and ChatGPT sign-in process technical and account information under the platform’s own privacy notice. The order-processing information below describes the planned shop; it must be finalised before sales begin.

Draft privacy notice. The data controller’s identity, processors, retention and contact details must be finalised before launch.

What the shop needs

We process your checkout email, products, payment reference, digital-content consent and any first name or gift description you choose to enter. This is needed to fulfil your contract, deliver downloads and provide support. Payment card details go directly to Stripe; we do not receive or store them. We do not ask for a child’s address, date of birth or photograph. A grown-up should place the order.

Storage used by this shop

Your basket and personalisation are stored in this tab’s session storage (chrimbo-basket) to carry your choices through checkout. They are cleared when the tab is closed or the order finishes. An opaque checkout-attempt key and a one-way basket fingerprint prevent accidental repeat orders when retrying checkout; these also last only for this tab. A secure, HTTP-only cs_access cookie provides access to your order for up to 7 days. It is set when you request checkout or use a download link. These are necessary for the shopping functions you request.

A small setting in this tab remembers your animation preference (chrimbo-motion). It contains no customer details and is not used for tracking. It is cleared when the tab closes. This presentation setting adapts the shop’s appearance. You can object to its storage below; doing so removes it and stops it being read or written. The homepage welcome restarts whenever the homepage opens, unless your device requests reduced motion. Pause stops it on the current page. No special preview link or visit flag is needed. A separate tab-only flag (chrimbo-presentation-blocked) remembers that objection. Playing an animation afterwards does not re-enable storage.

The shop’s own code uses no optional analytics, advertising cookies, tracking pixels or third-party font requests are used. If tools requiring consent are added later, they must stay off until you consent and provide an equally easy way to decline or withdraw.

Control this browser’s storage

Clearing storage removes this browser’s basket and download access. It does not cancel an order. You can use the email link or recovery route to access an existing order.

Who handles your information

In local demonstration mode, orders and test emails remain on the computer running this shop. Stripe test mode sends checkout information to Stripe. If configured, transactional email is sent using Resend. Production hosting, processor agreements and any international transfer safeguards must be confirmed by the seller before going live. No marketing subscription is created.

Retention and protection

Order contact and personalisation data are encrypted at rest. Private PDF files and development email files are held outside the public website. Download access is limited to 30 days. Automatic maintenance removes personalisation, generated files and local email outbox records after that period, and clears abandoned checkout details after two days. Accounting and order records may need longer retention for legal obligations; the seller must confirm the applicable schedule before launch.

Your rights and contact

You may have rights to access, correct or erase your information, restrict or object to processing, and receive a portable copy, subject to applicable exceptions. Contact the seller using the contact details to be supplied before launch. You can complain to the Information Commissioner’s Office.