What is collected, and what becomes of it

The data controller is Volodymyr Lysyi, trading as Bold Wedding, of 11A Brunswick Square, Gloucester GL1 1UG, England, United Kingdom. He is an individual in business on his own account; there is no company behind the name.

Anything to do with this page goes to order@boldwedding.art, which is read by him and by nobody else. A first reply comes within two working days.

A message you write

Your name, your email address, the subject you pick and whatever you put in the message. You choose what goes in it, and there is no need to put anything in it that the answer does not require.

An order

None yet, because orders are not open and the checkout asks for nothing. When they are: your name, your email address, which items you bought, the amount, the reference, and your two answers to the cancellation questions at the checkout. No postal address is asked for, because nothing is posted.

A payment

None, at present: no payment page is connected to this site, so nothing can be paid for here and no payment data of any kind is collected, received or held. When a payment page is connected it will belong to the payment provider and sit on its own site. Card numbers, expiry dates and security codes will not reach this site and will never be seen, received or stored by the shop; what will come back to the shop is that a payment succeeded, for how much, and against which reference.

Ordinary server records

The hosting provider writes the usual access log: the address a request came from, the page asked for, the time and the browser's own description of itself. That happens for every site on the internet and is not switched on for anybody in particular.

There is no analytics, no advertising pixel, no social widget and no tracking script of any kind on this site. No profile is built about you, here or anywhere else.

Under the UK General Data Protection Regulation, processing needs a lawful basis. These are the three used here, and nothing is done on any other.

To answer you, and to fulfil an order

Article 6(1)(b): the processing is necessary to perform a contract with you, or to take steps at your request before one is made. Without your email address there is nowhere to send the templates and nowhere to send a reply.

To keep the shop working and defensible

Article 6(1)(f), legitimate interests. The interest is a plain one: keeping the site available, keeping evidence of what was agreed if a purchase is later disputed, and keeping the cancellation answers so that both sides can see what was consented to. It is balanced against your interests, and it does not extend to marketing.

To keep the records the law requires

Article 6(1)(c): a legal obligation. Sales records have to be kept for tax purposes, and the confirmation of an order, including the cancellation answers, is part of the record the Consumer Contracts Regulations 2013 expect a seller to give and keep.

Nothing is sold, rented or handed to anybody for their own purposes. What follows is the whole list of firms that touch any of it, each doing one job:

• the hosting provider, which serves these pages and keeps the access log;
• the email provider, which carries messages to and from the shop's address;
• a payment provider, once one is connected, which will run the payment page and hold the card details the shop never sees. None is connected today;
• an accountant, who sees the sales records the law requires to be kept.

The named firms in each of those roles can be given on request; they are listed in the shop's own records, and naming them here without keeping the page in step with a change would be worse than describing the role.

A separate case worth stating: the templates themselves live in Canva, and the link in an order email opens an account there. That is a service between you and Canva on its own terms; the shop does not pass your details to it.

Some of those suppliers process data outside the United Kingdom. Where they do, it is on one of the bases the law allows: either the country has been found by UK regulations to offer adequate protection, or the contract with the supplier includes the standard contractual clauses with the UK addendum. There is no transfer made on any other footing, and a copy of the safeguard relied on for a particular supplier can be asked for.

Messages and enquiries

Kept for twelve months from the last message in the exchange, then deleted.

Orders and the cancellation answers

Kept for six years from the end of the tax year the order falls in, because sales records have to be kept that long.

Server access logs

Kept for thirty days on the hosting provider, after which they are overwritten.

Nothing is kept indefinitely on the grounds that it might be useful one day, and nothing is archived to a second place after being deleted from the first.

This site sets no cookies at all: not for analytics, not for advertising, and not for preferences. Nothing about you is read by a third party as you move around it.

One thing is stored in your own browser. The basket keeps a short list of the item codes you chose, under the name boldwedding.basket.v1, so that the basket is still there if you close the tab and come back. It never leaves your browser, the shop cannot read it, and it holds nothing but the codes. Clearing this site's data in your browser settings removes it, and so does emptying the basket.

Because nothing is stored except what is strictly necessary to provide the basket you asked for, no consent banner is shown. A banner that asked permission for nothing would be a nuisance without a purpose.

There is no automated decision-making and no profiling on this site. Nothing scores you, sorts you or decides anything about you without a person, and no price changes according to who is looking at it.

Over your own data you have the right to:

• be told what is held and be given a copy of it;
• have anything inaccurate corrected;
• have it erased, where it is not being kept under a legal obligation;
• have its use restricted while a disagreement about it is sorted out;
• object to processing that rests on legitimate interests;
• have what you gave the shop sent to you, or to somebody else, in a commonly used machine-readable form;
• withdraw consent, where anything is ever done on the basis of consent.

Write to order@boldwedding.art and say which of those you want. There is no charge, no form to fill in, and a reply comes within one month.

Say so in writing and it is looked at properly. If that does not settle it, you can complain to the Information Commissioner's Office, which regulates data protection in the United Kingdom, at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or through ico.org.uk.

Complaining to the shop first is not a condition of complaining to them.

Nothing here is required by law for you to give. But an email address is what a template link is sent to and what a reply goes to, so without one an order cannot be delivered and a question cannot be answered. A name is asked for so that a reply has somebody to address.

If you would rather not place an order through the site at all, write instead, name the pieces you want, and the order can be arranged by email.

This is the edition of 17 September 2026. If it changes, the new version is published here and dated here; there is no mailing list to announce it on, so the date is the thing to check.