Because your trust means everything to us
At Bespoke Foil Company, your privacy is just as important as the memories you've chosen to share with us. We're a family-run business built on care, trust and connection. That means we take your personal data seriously and only ever use it to give you the very best service. This policy explains how we collect, store and protect your information, in line with UK GDPR and data protection laws.
We are The Bespoke Foil Company Ltd, a registered business in the United Kingdom. Our website is www.thebespokefoilcompany.co.uk. If you have any questions about this policy or your data, please contact us at hello@thebespokefoilcompany.co.uk.
When you place an order, use our website or contact us directly, we may collect the following personal information:
We do not collect or store any sensitive personal data unless you choose to share it with us as part of your design (e.g. scan images or personal dedications).
We use your data only to:
We promise never to sell, rent or share your personal data with any third parties for marketing purposes.
We store your data securely using trusted platforms and systems that are GDPR-compliant. Only authorised team members have access to your information, and we regularly review our security measures to keep your data safe.
We only share your data with trusted third-party services who help us run our business (such as payment processors, courier services or email platforms). These providers are bound by confidentiality and data protection agreements.
We never sell your data, and we never pass it to unrelated companies.
When you buy from our website, we let Meta (who run Facebook and Instagram) know that a sale happened, so we can see which of our adverts actually work. We send what was bought and its value, along with your email address, phone number, name, town and postcode. Those details are scrambled (hashed) before they leave us, so they are never sent as readable text. Meta uses them only to match the sale to one of its accounts, and how Meta handles data is set out in Meta’s privacy policy.
If you accept cookies, we also tell Meta from our own server when you look at one of our products or start a checkout: the same thing the Meta Pixel tells it, with your browser’s Meta cookie, IP address and browser type, so an advert blocker doesn’t hide it. If you decline cookies, we don’t.
If you’d rather we didn’t include your sales, email hello@thebespokefoilcompany.co.uk and we’ll stop.
We retain order details and correspondence for up to 6 years for tax and record-keeping purposes, after which they are securely deleted.
Your artwork is different, and we keep it for as long as we are trading. The prints you send us and the digital proof we create from them are archived indefinitely, so that if your keepsake is ever damaged or lost we can re-create it from the original rather than asking you to start again with a child who has grown. We have kept every print since we started in 2017, including the very first one.
Archived artwork is stored securely and is never used for anything other than re-creating your own keepsake. If you would rather we did not keep it, you can ask us to delete it at any time, including long after your order is complete, and we will.
Activity recorded on your proof and add-ons pages is kept separately and for a much shorter time, 90 days after your order is complete. See "Activity On Your Proof And Add-Ons Pages" below.
When you open the link to your proof, or the add-ons page for your order, that page records what you do on it and sends that to our own server. It is stored against the order reference that is already in your link.
We record when the link was opened and how many times, how long you spent actively on the page, which products you looked at and which personalisation panels you opened, anything added to or removed from the basket and its value, whether you reached checkout, whether a discount code was copied, whether you approved the proof or asked for changes, and a rough description of your device such as "iPhone, Safari".
We do not record your name, your email address, your child's name, your address or any payment details. The order reference is the only identifier.
This does not use cookies, and nothing is stored on your device. The session identifier exists only in your browser's memory while the page is open and is gone when you close it. That is why it is not covered by a cookie banner.
Our lawful basis for this is legitimate interests. We use it to run and improve the proof and add-ons service for your order, so we know whether you have seen your proof, and so that if we do follow up it is about the thing you were actually looking at rather than a generic chase.
We keep it for 90 days after your order is complete, and then it is deleted. You can object to this at any time under Article 21 of the UK GDPR. Email us at hello@thebespokefoilcompany.co.uk and we will stop it for your order.
If you type your email address into our kit checkout and leave before paying, we may send you up to two reminders about that basket: one about an hour later and one the next day. We never send them between 9pm and 8am, never after you have placed your order, and no more than one set in any 14 days.
To do this we save your email address, the kit and quantity you chose, the page you were on, and a reference to the payment that was started (never your card details), along with a scrambled code made from your internet connection that changes every day and is only used to stop the checkout being misused to email other people (we may compare it with the internet address recorded with the payment, for the same reason). This is kept for 30 days and then deleted. Nothing is stored on your device to do this.
You can say no before we send anything, with "Don't remind me" under the email box at checkout, or at any time with the link at the bottom of either reminder. If you say no, we keep a scrambled code made from your email address (not the address itself) on a list of people not to remind, for as long as we send these reminders, so that the choice sticks.
We send these under the "soft opt-in" in the Privacy and Electronic Communications Regulations, because you gave us your email address while buying from us and the reminders are only about the same order. Our lawful basis under the UK GDPR is legitimate interests.
You have the right to:
To exercise these rights, simply contact us at hello@thebespokefoilcompany.co.uk.
When you first visit, we ask whether you’re happy for us to use cookies. None of these set cookies on your device until you press Accept:
If you press Decline, the Meta Pixel isn’t loaded at all. Google Analytics and Microsoft Clarity still count visits, but without cookies, so they can’t recognise you from one page or visit to the next. You can change your mind at any time with the “Cookie settings” link at the bottom of every page.
We may occasionally update this policy to reflect changes in law or how we operate. The most up-to-date version will always be available on this page.
We know how personal these keepsakes are, and how much trust you place in us when you share your memories and information. We will always treat your data with the same care we put into every print we create.
Ashley & Ryan
Co-founders, Bespoke Foil Company
Become part of our parenting community and enjoy 10% off your first order as a welcome gift.