privacy policy

who we are

paumier is a brand of common room limited (company number 16617414, registered in england and wales, registered office: london n1, united kingdom), the controller of your personal information under the uk gdpr and the data protection act 2018. you can contact us about privacy at hello@paumierstudio.com.

what we collect

when you order: your name, email address, phone number, delivery address and what you bought. you enter your payment details on stripe’s checkout page and stripe handles them, so we never see or store your full card number.

when you email us: your email address and whatever you choose to tell us.

when you browse: we use google analytics to see how people find and use the site, such as which pages they visit, roughly where they are and what device they use. analytics cookies are only set if you accept them in the cookie banner. if you don’t, google analytics still records anonymous visits without cookies, so they can’t be linked to you or to your later visits. if you accept cookies, we also use google ads cookies to see whether you arrived from one of our google ads and went on to order; if you don’t, google ads only gets the same anonymous, cookieless signals. if you accept cookies, we also use the meta pixel, run by meta platforms ireland, to measure how our instagram and facebook ads perform: it tells meta which pages you visit, what you add to your bag, when you start checkout and the value of your order, and sets the _fbp cookie (and _fbc if you arrived from an ad). the meta pixel never loads if you decline, and stops if you change your mind. your cart, and the delivery country you choose, are kept in your browser’s local storage so they’re still there when you come back, and they stay on your device until you check out. our hosting provider processes technical information such as your ip address to deliver the site and keep it secure, and stripe uses its own cookies on its checkout page to prevent fraud.

how we use it, and why

• to take payment, send and deliver your order, handle returns and refunds and email you about your order, because we need to in order to fulfil our contract with you.
• to answer your messages and look after you, because it’s in our legitimate interests to do so.
• to prevent fraud and keep the site secure, because it’s in our legitimate interests.
• to understand how the site is used and improve it, with analytics cookies only if you’ve agreed to them, and otherwise with anonymous, cookieless counts, because it’s in our legitimate interests.
• to measure our google ads with google ads cookies, and our instagram and facebook ads with the meta pixel, only with your consent.
• to keep accounting and tax records, because the law requires it.

we don’t send marketing emails, and we never sell your information.

who we share it with

only the companies that help us run the shop, and only what they need:

• stripe, which runs our checkout and processes payments, and also uses some information for its own purposes, such as preventing fraud, under its own privacy policy
• delivery companies such as royal mail, which receive your name, address and, where needed, your phone number or email to deliver your order
• the providers that host this website and our email
• google, which runs google analytics and google ads for us, with google ads cookies only if you accept cookies
• meta, which runs the meta pixel for us, only if you accept cookies, and also uses this information under its own privacy policy
• our accountants and, where the law requires it, authorities such as hmrc

international transfers

some of these providers process information outside the uk, for example in the united states. when they do, it’s protected by the safeguards uk law requires, such as adequacy regulations or standard contractual clauses, or the transfer is needed to deliver your order.

how long we keep it

order and payment records for six years after the end of the financial year they belong to, because tax law requires it, and emails for as long as we need to help you, and no more than two years after your last message. your cart stays in your browser until your order is complete or you clear your browser’s storage. google analytics keeps its data for 14 months, and its cookies, _ga and _ga_ followed by an id, last up to two years unless you clear them or decline cookies. google ads cookies, _gcl_ followed by a name, and the meta pixel’s _fbp and _fbc cookies last up to 90 days.

your rights

you can ask for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, or ask for it in a portable format. email hello@paumierstudio.com and we’ll reply within a month. some rights depend on the circumstances, and we may need to keep certain records for legal reasons.

you can change your mind about analytics and advertising cookies, including google ads and the meta pixel, at any time with “cookie settings” at the bottom of every page. declining removes the ones already set.

if you’re unhappy with how we’ve handled your information, please tell us first. you can also complain to the information commissioner’s office at ico.org.uk, or to the data protection authority where you live.

changes

if we change this policy, we’ll update this page and the date at the top.