Privacy policy

Last updated 27 August 2026.

This policy explains how The Raggedys uses personal information. It covers theraggedys.com, the Order Book, checkout, contact forms, and email sent to the studio. It is written for the shop as it actually runs — not copied from a generic template.

Who is responsible

The data controller is Emily Archer, trading as The Raggedys, in the United Kingdom. For privacy questions, orders, or to use your data rights, write to Hello@TheRaggedys.com.

What we collect

We only collect what the shop needs to work:

Orders. Name, email, phone (if you give one), delivery address, the Folk you chose, postage choice, amounts, and payment status. Card numbers are taken by Stripe on their pages. We never see or store full card details.
Messages. Name, email, phone if you leave it, and whatever you write in the contact, workshop, wholesale or Paper Trail forms. Email sent to studio addresses (such as hello@ or orders@) is received and forwarded so we can reply. The studio desk can also send letters from Hello@TheRaggedys.com.
Basket. The items in your basket are stored in your browser (local storage) on this device. That list is not sent to us until you start checkout.
Studio sign-in. The workshop desk is invite-only for Emily Archer. It uses a one-time code by email. Old WordPress customer accounts are not on this site.
Technical logs. Our hosts may record IP address, browser, and pages requested so the site stays up and abuse can be stopped.
Cookies and analytics. Necessary cookies keep the basket, shop and consent choice working. Google Analytics only runs if you allow statistics cookies. See the cookie policy.

Why we use it

To fulfil an order — contract. We pack, post, and write to you about your Folk.
To keep accounts and tax records — legal obligation in the UK.
To answer enquiries and run workshops or wholesale — steps toward a contract, or our legitimate interest in running the studio.
To keep the shop secure and working — legitimate interests.
Statistics cookies — consent. You can refuse or withdraw them at any time through the Cookiebot banner or the cookie policy.

We do not sell your information. We do not run ads from this site. We do not buy marketing lists.

Who helps us (processors)

Other companies process data for us, only to provide their service:

Stripe — taking payment. Stripe privacy
Convex — the shop database (orders, listings, the studio desk).
Vercel — hosting the website.
Resend — sending studio sign-in codes, sending letters from the studio desk, and receiving or forwarding studio email.
Cookiebot (Usercentrics) — the cookie banner and consent record.
Google — Analytics, and only if you allow statistics cookies. Google privacy

Some of these are in the United States or other countries outside the UK. Where that happens, they rely on the UK-approved transfer tools (such as the UK Addendum to the EU standard contractual clauses) or an adequacy decision.

We also use Royal Mail or another carrier to deliver what you buy. Their privacy terms apply to the address we print on the parcel.

How long we keep it

Paid orders and the details needed to fulfil them: for as long as we must keep tax and accounting records in the UK (usually six years after the tax year).
Unfinished checkouts: held briefly so stock can be reserved, then dropped if payment is not completed.
Enquiries and studio email: while we deal with them, then a sensible period in the inbox in case you write again about the same thing. Letters sent from the studio desk are kept with those records.
Analytics: according to Google Analytics and your Cookiebot choice.
Basket contents: on your device until you clear the basket or your browser storage.

Your rights

Under UK GDPR you can ask to see the information we hold, have it corrected or deleted, restrict or object to certain uses, and (where we process by consent or contract with automated means) receive a copy in a portable format. You can withdraw cookie consent at any time. Those rights are not always absolute — for example we cannot delete an order we still have to keep for tax.

Write to Hello@TheRaggedys.com. We will answer without undue delay, and within one month.

You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Children

The shop is aimed at adults buying for themselves or as gifts. We do not knowingly collect personal information from children under 13. If you think we have, please tell us and we will delete it.

Changes

If this policy changes in a material way, we will update this page and the date at the top. The current version is always the one published here.