Privacy Policy
01 Information We Collect
When you use Signaturra, we collect the following categories of personal information:
- Account information — your name, email address, and password when you register
- Order information — billing address, shipping address, and order details
- Personalisation data — names, messages, and custom text you provide for your gifts
- Payment information — processed securely by our payment provider; we never store card details
- Communications — messages you send us via email or our contact form
- Usage data — pages visited, time spent, device type, and browser information
- Cookies — session, preference, and analytics cookies (see Section 4)
02 How We Use Your Data
We use your personal data only for legitimate purposes directly related to providing our services:
- Processing and fulfilling your orders
- Sending order confirmations, shipping updates, and gift messages
- Verifying your email address during registration
- Sending promotional emails and discount codes (only with your consent)
- Improving our website and personalising your shopping experience
- Preventing fraud and maintaining security
- Complying with legal obligations
05 Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations:
- Account data — kept while your account is active; deleted within 30 days of account closure
- Order records — retained for 7 years for tax and legal compliance
- Email marketing data — kept until you unsubscribe or withdraw consent
- Analytics data — anonymised and retained for up to 26 months
06 Your Rights
Under data protection law, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — request deletion of your personal data ("right to be forgotten")
- Right to restriction — ask us to limit how we use your data
- Right to portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — at any time where processing is based on consent
To exercise any of these rights, please contact us using the details in Section 10. We will respond within 30 days.
07 Security
We take the security of your data seriously and implement appropriate technical and organisational measures including:
- SSL/TLS encryption for all data transmitted to and from our website
- Bcrypt password hashing — your password is never stored in plain text
- Email verification for new accounts
- Regular security reviews and updates
- Limited staff access to personal data on a need-to-know basis
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, please contact us immediately.
08 Children's Privacy
Signaturra is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
09 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify registered users of significant changes by email. The "last updated" date at the top of this page will always reflect the most recent revision.
Continued use of Signaturra after changes are published constitutes acceptance of the updated policy.
10 Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please get in touch:
Email: privacy@signaturra.com
Support: support@signaturra.com
We aim to respond to all privacy-related enquiries within 5 business days.