Privacy Policy
Sculpt Labs (Plymouth Business Park, Plympton, PL7 1YB, United Kingdom) is the data controller for the personal data described here. We process it in line with the UK GDPR and the Data Protection Act 2018. Questions? Email SculptPeps@gmail.com.
What we collect
Your name, email address, delivery address and your order history. If you contact us through a support ticket we also hold the messages you send us. Card details are entered on Stripe's own payment pages — we never see or store your full card number.
Why we use it
To take and fulfil your order, to send order, payment and shipping emails, and to answer your support tickets. This is necessary to perform our contract with you. Marketing emails are sent only where you have opted in.
Who processes it for us
Stripe (payment processing), Supabase (hosting, database and file storage) and Resend (sending our emails). Each acts as a processor on our instructions. We do not sell your data or share it for advertising.
How long we keep it
Order and transaction records are kept for six years to meet UK tax and accounting requirements. Support tickets are kept for two years. Marketing contact details are kept until you unsubscribe.
Your rights
You have the right to access your data, to have it corrected, to have it erased, to receive it in a portable format, and to object to how we use it. Email us and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
Marketing opt-out
Every marketing email carries an unsubscribe link, and you can opt out at any time at /unsubscribe. Order, payment and shipping emails are service messages and are always sent.
Giveaways
If you enter a giveaway, we use your name and email to run it and contact the winner. Entries without the marketing tick are deleted within 30 days after the draw. If you tick the marketing box, we email restocks, price drops and offers until you unsubscribe.