Privacy Policy
Last updated: 2026-06-07
1. Who We Are
Take Up Space Ltd ("we", "us", "our"), a company registered in England and Wales under company number 12203181, with its registered office at 21 Dunwich, Shoreham by Sea, BN43 5PE, is the data controller of personal data collected through uk.zenwallclocks.com. We trade as Zen Wall Clocks.
2. What This Notice Covers
This Privacy Policy explains what personal information we collect when you use uk.zenwallclocks.com or buy from us, why we collect it, who we share it with, how long we keep it, and what rights you have over it.
We are based in the United Kingdom and process personal information in accordance with UK data protection law — the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
3. Personal Data We Collect
We collect:
- Order data — your name, billing address, delivery address, email address, and (optionally) phone number. Collected when you place an order.
- Payment data — your card payment is handled directly by Stripe. We never see, store or transmit your full card number, expiry, or CVC. We receive only a transaction reference and the last four digits of your card from Stripe to identify the payment.
- Order content — your design choices for each clock (the quote, font and colours). Stored against your order.
- Communications — any email correspondence you send us, retained for customer service.
- Technical data — your IP address, user-agent and pages visited are processed in aggregate by our analytics provider (see Section 8). We do not log raw IP addresses against your account.
We do not collect special category data (race, health, beliefs etc.) in normal operation. If you volunteer such information in a custom quote or in correspondence, we treat it confidentially.
4. How We Use Your Personal Data, and Our Lawful Bases
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Processing your order, taking payment, arranging delivery, customer service | Performance of a contract (Article 6(1)(b)) |
| Keeping records for accounting and tax purposes | Legal obligation (Article 6(1)(c)) |
| Detecting and preventing fraud | Legitimate interests (Article 6(1)(f)) |
| Understanding aggregate site usage to improve the service | Legitimate interests (Article 6(1)(f)) |
| Responding to your enquiries | Legitimate interests (Article 6(1)(f)) |
We do not currently send marketing emails. If we add a marketing mailing list in future we will ask for your explicit consent and make unsubscribing easy.
5. Who We Share Your Personal Data With
We share your personal data only with the service providers we need to fulfil your order. Each is a data processor acting on our instructions under contract:
| Processor | Purpose | Location |
|---|---|---|
| Stripe | Card payment processing | United States |
| Cloudflare | Image storage and CDN delivery | Global edge network |
| Railway | Application hosting and database | United States |
| Treat Pod | Print and shipping fulfilment | United Kingdom |
| Umami | Aggregate analytics | [Self-hosted on Railway / Umami Cloud, EU] |
| [Email provider] | Sending order confirmations | [Region] |
We do not sell your personal data and we do not share it with third parties for their own marketing.
We may disclose personal data if required by law, court order, or to protect our legal rights.
6. International Transfers
Your clock is printed and shipped within the United Kingdom. Some of our processors (for example Stripe and Railway) are based in the United States, so limited personal data may be transferred there. Where personal data leaves the UK we rely on the UK Government's adequacy decisions, the UK International Data Transfer Agreement, or Standard Contractual Clauses, as appropriate.
7. How Long We Keep Your Personal Data
| Data type | Retention period |
|---|---|
| Order records | 7 years (statutory record-keeping requirement under UK tax law) |
| Customer service email | 2 years from last contact |
| Aggregate analytics | 24 months |
| Marketing preferences | Until you withdraw consent |
After these periods, we delete or anonymise the data.
8. Cookies and Similar Technologies
We use a small number of strictly necessary cookies and similar technologies to make uk.zenwallclocks.com work. We do not use advertising, profiling or tracking cookies. Because we only use strictly necessary technologies, we do not display a cookie consent banner — this is permitted under the Privacy and Electronic Communications Regulations (PECR).
| Item | Purpose | Type / Duration |
|---|---|---|
| session (Flask) | Keeps your shopping basket and login state | Session cookie; cleared when you close your browser |
| __stripe_mid, __stripe_sid | Stripe payment fraud prevention | Set by Stripe during checkout. See Stripe's privacy policy. |
| Umami analytics | Aggregate page-view counts and referrers | No cookies set. Sessions identified server-side via a daily-salted hash that cannot be linked back to you. |
You can block or delete cookies in your browser settings. If you block our session cookie, your shopping basket will not work; if you block Stripe's cookies, you will not be able to complete payment.
9. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate personal data corrected
- Have personal data deleted (subject to legal retention obligations)
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent (where consent was the basis for processing)
- Complain to the Information Commissioner's Office
To exercise any of these rights, email [email protected]. We will respond within one month.
10. Security
We protect personal data with appropriate technical and organisational measures including TLS encryption in transit, encrypted database backups, restricted access on a need-to-know basis, and reputable processors (Stripe, Cloudflare, Railway). No system is perfectly secure; if a breach occurs that is likely to risk your rights, we will notify the ICO and you as required.
11. Changes to This Notice
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. For material changes we will notify customers by email where possible.
12. Contact
Questions about this notice or your data? Email [email protected].