Privacy policy

1. Data controller

The data controller is The Bandsaw Store, trading as The Bandsaw Store, company number 01716510, of Unit 2, 19 Willis Way, Poole, Dorset, BH15 3SS. Contact us about anything in this policy at sales@thebandsawstore.co.uk.

2. What we collect

• Order details: your name, billing and delivery address, email address, phone number and the items you order, including stated blade lengths.
• Enquiries: whatever you choose to tell us through the contact form or by email, kept with your contact details so we can answer.
• Account details: when customer accounts launch, your login email and order history. Accounts are optional; guest checkout keeps working.
• Site statistics: anonymous, aggregate page analytics with no cookies and no personal identifiers, as described in the cookie policy.

We never see or store your full card details. Payment happens on Stripe's infrastructure and Stripe passes us confirmation, not card numbers.

3. Lawful bases

Placeholder positions for the solicitor to confirm:

• Performance of a contract: taking payment, welding and delivering your order and handling returns.
• Legal obligation: keeping the accounting and tax records the law requires of a UK company.
• Legitimate interests: answering enquiries, preventing fraud and keeping the store working and secure.
• Consent: only where we ask for it explicitly. We do not send marketing email unless you have opted in, and there is nothing on this site that tracks you for advertising.

4. Who processes data for us

We use a small number of processors, each for one job, and this list is the honest whole of it:

• Stripe processes card payments. Your card details go to Stripe directly and never touch our servers.
• Supabase hosts our database, including orders and, when they launch, accounts.
• Resend sends transactional email such as order confirmations and dispatch notices.
• Plausible provides cookieless, aggregate site analytics that identify no individual visitor.

We do not sell personal data, share it with advertisers or pass it to anyone beyond the processors above, our courier (who needs your delivery address to deliver) and authorities where the law requires it.

5. How long we keep it

Placeholder positions rather than confirmed periods: order records are kept for as long as UK tax and accounting law requires, enquiry correspondence is kept while a question or order it relates to is live and account data is kept until you close the account. The solicitor sets the final retention schedule before go-live.

6. Your rights

Under UK GDPR you can ask us to:

• tell you what personal data we hold about you and give you a copy
• correct data that is wrong
• erase data we no longer need to keep
• restrict or object to particular processing
• hand your data over in a portable format

To exercise any of these, email sales@thebandsawstore.co.uk. We will respond within the timescales UK GDPR sets.

7. Complaints

If you think we have handled your data badly, tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

8. Changes to this policy

We will update this page if our data handling changes, and the stack described here is kept honest: if a new processor is added, it gets named.