Privacy notice

Last updated 2 November 2026

Little Layer Forge is a small UK business run by Sarah Letham. This notice explains what we keep about you, why, and what you can ask us to do with it. Questions or requests: [email protected].

What we keep and why

• Orders: your name, email address, delivery address and what you bought, so we can print, post and support your order. Payment is handled by Stripe; we never see or store your card details.
• Your account (if you create one): your name, email address and a password, held by Microsoft Entra External ID in the EU on our behalf so you can sign in and see your orders. We never see your password.
• Custom print requests: what you send us through the request form, so we can quote and make it.
• In your browser: your basket and, if you sign in, your sign-in session are kept in your browser's storage. We don't use advertising or tracking cookies.

We use your details only to provide what you asked for, and to meet our legal duties (for example, keeping sales records for tax). We don't sell your details or send marketing emails.

Who else handles it

Stripe (payments), Microsoft (accounts, email and our order system's hosting), GitHub (our private order list) and Cloudflare (website hosting). They process your details only to provide their service to us.

How long we keep it

Order records are kept for six years, as UK tax rules require. Your account stays until you ask us to delete it. Custom requests that don't become an order are deleted after a year.

Your rights

You can ask for a copy of your details, ask us to correct them, or ask us to delete your account. Email [email protected] and we'll reply within a month. If you're unhappy with how we've handled your details you can complain to the Information Commissioner's Office.

Returns

You can return an item within 14 days of delivery if it's unused; you pay the return postage. Personalised and custom prints can't be returned unless they're faulty. Faulty or damaged items are always replaced or refunded.