Shop privacy notice

Updated 25 October 2026

A. Who is responsible

Steve Candy-Hewett, trading as THE FOOL CHOOSES, is responsible for the customer information used to operate this shop. Contact: thefoolchooses@gmail.com; 4 Grafton Close, Bournemouth, BH3 7JW.

B. What we use and why

For purchases we use payment and order references, purchaser contact information, the product/design and selected options, amount, purchase time, fulfilment status, support messages and relevant consent records. Physical orders also require the delivery name and address, which may belong to a gift recipient. Our order system stores these details and supplier references to arrange printing, delivery, support and refunds. Our shop does not store payment card numbers.

For digital e-cards, you send the purchased link yourself. The e-card service does not ask you for recipient names, email addresses or phone numbers. It stores the selected design and private card-link identifier with the purchase record. Anyone receiving the link can open the card; it is not a password-protected private message.

We use necessary purchase/contact/delivery information to perform the sales contract and respond to steps you request before purchase. We retain required business records to meet legal obligations. We use limited connection/security information and relevant payment references in our legitimate interests of protecting the shop, preventing fraud and duplicate orders, resolving disputes and keeping the service reliable. We do not use order information to sign you up for advertising without an appropriate separate basis and notice.

C. Providers and sharing

Stripe processes payments, purchaser information and receipts under its own privacy information, and also helps prevent fraud. Cloudflare hosts and protects the shop and order service. Prodigi fulfils printed cards, art prints, coasters and mouse mats; Inkthreadable fulfils clothing and bottles. We share the order, artwork and delivery/contact details needed for the relevant supplier and delivery carrier to fulfil an order. Customer-support correspondence is handled through our existing email service, Gmail. Required information may also be shared with professional advisers or authorities where lawfully necessary.

These providers may process data outside the UK. Stripe and Cloudflare publish UK transfer arrangements including applicable adequacy frameworks and contractual safeguards; Prodigi publishes transfer mechanisms in its Data Processing Addendum. Their current notices and transfer documents are linked below. Contact us for information about safeguards applying to your information, including how to obtain a copy. Do not assume that UK production means every provider's data processing stays in the UK.

D. Keeping information and your rights

We retain information while needed to deliver and maintain the purchased service, handle support, cancellations, refunds or disputes, and meet applicable accounting, tax and legal record-keeping duties. Retention depends on the purpose and applicable obligation; information required for an unresolved claim or legal duty may need to be retained after a deletion request. Digital purchase/link records may remain needed while the purchased link is provided.

Depending on the circumstances and lawful basis, you can ask for access, correction, erasure, restriction or portability of your information. You can object to processing based on legitimate interests. If we rely on consent for a separate optional use, you may withdraw it without affecting earlier lawful processing. We may need to verify your identity. You may complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/; please contact us if you want us to address a concern first.

Information necessary to process payment and deliver an order is needed to complete that purchase. You do not have to provide optional information. The mystery-design selector makes a random product selection; it does not assess your eligibility or create a personal profile.

E. Browser and third-party services

The shop uses essential browser session storage to recover a checkout reference after refresh. Payment, security and address-completion providers may use their own essential technologies; their notices explain their handling. Do not send payment card details or sensitive personal information in support messages. Optional Buddy voice/helper features are separate from payment; information about their operation should be checked on the relevant Buddy page before using them.

Provider information: https://stripe.com/privacy ; https://stripe.com/legal/dta ; https://www.cloudflare.com/privacypolicy/ ; https://www.cloudflare.com/cloudflare-customer-dpa/ ; https://www.prodigi.com/privacy-and-cookie-policy/ ; https://www.prodigi.com/dpa/ ; https://www.inkthreadable.co.uk/privacy-policy ; https://policies.google.com/privacy .