Privacy notice

DRAFT – needs review This text has not been reviewed and is not yet in force. Version 2026-10-draft-1.

St3p Ltd trading as MyMunro is the controller of the personal data described here. Contact: [email protected].

What we collect and why

• Orders: your name, email, delivery address and what you bought, to make, send and support your order (contract), and to keep accounts (legal obligation). Card details are handled by Stripe; we never see them.
• Gift vouchers: the buyer's email and the voucher's use. We store the code only in scrambled (hashed) form.
• Interest list: your email, the design you'd like, and the time you agreed to be emailed and the wording you agreed to (consent). We only email you after you confirm your address by the link we send, and you can unsubscribe at any time by emailing us. The first 100 confirmed sign-ups get free engraving on your first custom order.

Who processes it for us

• Stripe (payments), Resend (email), Railway (hosting). Each processes data only on our instructions.

How long we keep it

• Orders: six years after the end of the financial year of the order, for tax records.
• Interest list: until you unsubscribe or ask us to delete it. [Retention period to be set before launch.]

Your rights

You can ask to see, correct or delete your data, object to its use, or withdraw consent, by emailing us. You can complain to the Information Commissioner's Office (ico.org.uk).