This Privacy Policy explains how Never Settle Saga collects, uses, and protects your personal data when you visit neversettlesaga.com or place an order with us. We are committed to handling your data lawfully, transparently, and only for purposes you would reasonably expect.
This policy is written to comply with the UK GDPR, the Data Protection Act 2018, and the EU GDPR.
Who we are (the Data Controller)
Never Settle Saga is a small independent business operated by Abel Frare in partnership with his wife.
- Address: 262a Seven Sisters Road, London N4 2HY, United Kingdom
- Contact: helpdesk@neversettlesaga.com
For the purposes of UK and EU data protection law, we are the Data Controller for any personal data you provide to us through our website or by email.
What data we collect
We collect only the data we need to operate the website, fulfil your orders, and communicate with you. Specifically:
When you visit the website
- Standard technical data such as IP address (anonymised by our analytics providers), browser type, device type, and pages visited
- Cookies and similar technologies (see “Cookies” below)
When you place an order
- Name
- Billing and shipping address
- Email address
- Phone number (only if you provide one)
- Order details (products purchased, specifications, personalisation choices)
When you contact us by email
- Your name, email address, and the contents of your message
- Any images or specifications you send for custom orders
What we do NOT collect or store
- Full payment card details — these are entered directly into Stripe and never touch our servers
- Sensitive personal data (health, religion, ethnicity, political views, etc.)
Why we collect it (the legal basis)
We process your personal data under the following lawful bases set out in UK GDPR Article 6:
| Purpose | Legal basis |
|---|---|
| Processing and fulfilling your order | Contract performance |
| Communicating with you about your order | Contract performance |
| Sending order confirmations and shipping updates | Contract performance |
| Responding to enquiries | Legitimate interest / pre-contract |
| Operating and securing the website | Legitimate interest |
| Analytics to understand site usage | Consent (via cookie banner) |
| Complying with tax and accounting law | Legal obligation |
Who we share your data with
We do not sell, rent, or trade your personal data. We share data only with the following service providers, who act as Data Processors on our behalf:
- Stripe — payment processing. Stripe receives your payment information directly. See Stripe's Privacy Policy.
- Vercel — website hosting and Vercel Analytics (privacy-friendly, cookieless analytics by default). See vercel.com/legal/privacy-policy.
- Google Analytics (Google LLC) — for understanding how visitors use the site. We have configured Google Analytics with IP anonymisation. See policies.google.com/privacy.
- Microsoft Azure — backend storage of order records (Azure Cosmos DB and Azure Blob Storage), hosted in EU regions.
- Royal Mail and other couriers — to deliver your order. They receive your name, address, and (where you provide it) phone number.
- HMRC and our accountants — where legally required for tax and accounting purposes.
We may also disclose your data if required to do so by law, court order, or other legal process.
International transfers
Some of our service providers (Stripe, Google, Microsoft) may process data outside the UK and EEA. Where this happens, we rely on:
- UK International Data Transfer Agreement or the EU Standard Contractual Clauses (SCCs), and/or
- UK Adequacy Regulations for transfers to approved countries
to ensure your data receives equivalent protection.
How long we keep your data
- Order records: 7 years after the order date (required for UK tax and accounting law)
- Email correspondence: up to 3 years from the last contact
- Custom order specifications and images: up to 2 years after delivery, in case you reorder or request a repeat
- Analytics data: retention follows the provider's defaults (typically 14 months for Google Analytics)
Cookies
Our website uses the following cookies and similar technologies:
- Strictly necessary cookies — required for the site and checkout to function (e.g. Stripe session, basic site state). These are always on.
- Analytics cookies — used by Google Analytics to measure how visitors use the site. These are only set if you give consent through our cookie banner.
- Vercel Analytics — by default does not set tracking cookies and is privacy-friendly.
You can withdraw analytics consent at any time by clearing cookies for our domain or by contacting us.
Your rights under UK and EU GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — ask us to delete your data, subject to legal retention requirements (e.g. tax records)
- Right to restrict processing — ask us to limit how we use your data
- Right to data portability — receive your data in a portable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — for any processing based on consent
To exercise any of these rights, email us at helpdesk@neversettlesaga.com. We will respond within one calendar month, as required by law.
Right to complain
If you believe we have not handled your data correctly, you can complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
EU residents can also complain to their national data protection authority.
Security
We protect your data using industry-standard measures, including:
- HTTPS encryption across the entire website
- Encrypted database storage (Azure Cosmos DB)
- Limited access — only Abel and his wife have access to customer data
- Strong authentication on all admin systems
Children
Our website and products are not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent change. Significant changes will be communicated by email to customers with active orders.
Contact
For any questions about this policy or your personal data:
Never Settle Saga
262a Seven Sisters Road, London N4 2HY, United Kingdom
helpdesk@neversettlesaga.com
See also: Shipping Info · Returns Policy