Who we are

Legal name: Jane Lund

Trading as: Cast Concrete Studio

Entity type and registration: Sole trader

Contact: castconcretestudio@gmail.com

Data Protection Officer: Not required; contact details above.

We are the data controller for personal data described in this notice when you interact with our website in the UK.

 

How we collect your data

We collect personal data:

Directly from you via our website when you place an order, send a message, or leave a review.

If you contact us outside the website (e.g., email, social media), we receive whatever details you provide.

 

The data we process

Identity data: your name 

Contact data: delivery address, email, phone (if provided).

Order details: items purchased, customisation notes, gift messages.

Payment info: We do not receive your full card or bank details. Payments are processed by Wix’s Payments and/or their providers; we receive payment confirmations and related transaction IDs.

Communications: Messages you send via the website or email.

Technical/marketing: We do not run independent website tracking for website interactions. Any cookies/tracking on Wix are governed by Wix’s policies.

We do not include special category data (e.g., health information) or children’s data in customisation notes.

​

Purposes and lawful bases

We use your data for:

Fulfilling your order, customer service, and returns. Lawful basis: performance of a contract.

Customising items per your instructions. Lawful basis: performance of a contract.

Record-keeping for tax and accounting. Lawful basis: legal obligation.

Handling complaints, fraud prevention, and protecting legal rights. Lawful basis: legitimate interests and/or legal obligation.

Marketing communications (if you opt in outside the website's messaging system). Lawful basis: consent. You can withdraw consent at any time.

​

Sharing your data

We share data only as needed to provide our services and meet legal duties:

​​

Wix, as platform provider and payment intermediary, under Wix’s own terms and privacy policy.

Delivery and courier services: Royal Mail / Evri / DPD.

Payment processors: via Wix’s payments and providers; we do not receive your full payment data.

Professional services: accountants, legal advisors, insurers (only if necessary).

Authorities: HMRC, law enforcement, courts where legally required.

We do not sell your personal data.

​

International transfers

Wix and some service providers may store or process data outside the UK. Where this occurs, protections are applied in line with UK GDPR, such as adequacy regulations (e.g., EU/EEA) or appropriate safeguards like standard contractual clauses and, where required, UK Addendum/IDTA.

​​

Data retention

Orders, invoices, and related records: kept for 6 years after the end of the tax year in which the transaction occurred (to meet UK tax/accounting obligations).

Customer messages: up to 2 years after last contact, unless needed longer for ongoing issues.

Marketing data (if any): until you withdraw consent or after 24 months of inactivity, whichever is sooner.

We securely delete or anonymise data when retention periods end.

​​

Your rights

Under UK GDPR, you have rights to:

Access your personal data and receive a copy.

Rectify inaccurate or incomplete data.

Erase data (in certain circumstances).

Restrict processing (in certain circumstances).

Object to processing based on legitimate interests.

Data portability (for data you provided, where processing is by consent or contract and automated).

Withdraw consent at any time (for processing based on consent).

Lodge a complaint with the UK Information Commissioner’s Office (ICO).

To exercise your rights, contact us using the details above.

​

Children

Our shop is not intended for children. We do not knowingly collect personal data relating to children. Please avoid including any children’s data in messages or customisation notes.

​

Security

We take appropriate technical and organisational measures to protect your data, including:

Access controls limited to those who need it.

Secure devices and accounts with strong authentication.

Using reputable service providers (Wix, couriers, accountants) with appropriate safeguards.

No method of transmission or storage is 100% secure, but we work to reduce risks proportionately.

​

Wix’s role

Wix operates as an independent controller for data it collects through its platform. Your use of Wix is also governed by Wix’s Terms and Privacy Policy. Please review Wix’s privacy policy for details on how they handle your data.

​

Marketing

We do not add you to off-Wix marketing lists without your explicit consent. Wix may send you transactional or platform communications under its own policies. If you opt in to our direct marketing off-Wix, you can opt out at any time by contacting us or using the provided unsubscribe method.

 

Custom orders and user content

For custom items, please provide only the information necessary to fulfil your order. Do not include sensitive data. We may retain design files or order notes for the retention periods above to support reorders, warranties, or legal obligations.

​​

Changes to this notice

We may update this Privacy Notice from time to time. We will post updates on our website and adjust the effective date. Material changes will be highlighted for a reasonable period.