Privacy policy
This explains what personal information Sussex Made uses, why we use it and the choices you have.
Last updated: 7 October 2026.
Who is responsible for your information?
The data controller is Greyrock Enterprises Ltd.
Business address: 82A James Carter Road, Mildenhall, IP28 7DE, United Kingdom
Privacy enquiries: hello@sussexmade.co.uk
Information we collect
- contact details such as your name, email address and phone number;
- delivery and billing information needed to fulfil an order;
- the products, personalisation choices and proof decisions connected with an order;
- limited technical audit information, such as IP address and browser user-agent, when you approve a design proof so we can retain evidence of that approval;
- for local delivery, delivery status, delivery method and, where appropriate, a proof-of-delivery photograph showing the delivery location or letterbox;
- messages you send through the contact form or about an order;
- reviews you choose to submit for publication;
- payment status and provider references needed to reconcile payment — card details themselves are handled by our payment provider;
- limited first-party website analytics described below.
Why we use it
We use personal information where it is necessary to perform a contract with you, to take steps you request before entering a contract, to meet legal obligations, and for legitimate business interests such as customer support, fraud prevention, service improvement and maintaining reliable records.
Where consent is the appropriate legal basis, you may withdraw it at any time.
Payments and service providers
Payments are processed through Stripe. We also use hosting, email and infrastructure providers to operate the store, send transactional messages and keep the service secure. Those providers process information only as needed to provide their services and subject to their own legal obligations and contractual safeguards.
Our analytics
Sussex Made currently uses a privacy-conscious, first-party server-side analytics system. It records aggregate events such as page views, product views, add-to-basket actions, checkout views and completed payments.
We do not store your IP address, full browser user-agent, customer email, order number or a unique analytics identifier in the analytics table, and we do not set a separate analytics cookie. Referrer information, where available, is reduced to the referring website’s host name rather than storing the full referring URL.
Analytics records are automatically removed after 395 days.
Reviews
Reviews are linked internally to a completed order so we can verify the purchase. If a review is published, the public page shows only the display name, rating, review wording and relevant purchased product names. We do not publish your email address or order number with the review.
How long we keep information
Order, payment and proof-approval audit records are kept for as long as needed to fulfil orders, evidence customer instructions, handle disputes and meet tax, accounting and other legal requirements. Local-delivery proof photographs are automatically removed after 210 days; the delivery method and timestamp remain on the order record. Resolved contact enquiries are removed according to our operational retention policy when they are no longer needed. Analytics events follow the retention period stated above.
Your rights
Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict or object to the use of your personal information, and to receive certain information in a portable format.
To exercise a right, contact us. You can also complain to the UK Information Commissioner’s Office if you believe your information has been handled unlawfully.
Changes to this policy
We may update this policy when the store, our service providers or legal requirements change. The latest version will always be published on this page.