Data controller
Two Weirdos Workshop is responsible for personal information used to operate this store. The legal trader name, geographic correspondence address and privacy email must be added here before checkout is enabled.
Privacy notice
Your details are not workshop gossip
What we collect, why we need it and the choices you have.
Information we collect
This can include your name, email, delivery and billing details, order contents, collection choice, messages, custom-project dimensions and files, consent choices, fraud-prevention information and technical security logs. Stripe handles card details; we do not store full card numbers.
Why we use it and lawful bases
Contract: to quote, take payment, make, deliver and support an order. Legal obligation: for tax, accounting, consumer rights and product-safety records. Legitimate interests: to secure the service, prevent abuse, improve operations and defend legal claims where those interests do not override your rights. Consent: for optional analytics or marketing where required.
Who receives information
We share only what is needed with service providers such as Stripe, Cloudflare, delivery carriers, email providers and professional advisers. These providers act under their own terms or data-processing arrangements. We do not sell customer information.
International transfers
Some technology providers may process information outside the UK. Where that happens, we use an applicable adequacy regulation or contractual and organisational safeguards. Provider details and safeguards will be recorded in the workshop’s data-processing register.
How long we keep it
Order and accounting records are kept for the period required by tax and consumer law. Unaccepted quote files are scheduled for deletion after 30 days; accepted custom-job files are retained only for the job, support and legal-record period communicated to you. Security logs and messages are kept only as long as reasonably necessary. Consent records remain until replaced or expired.
Your rights
Depending on the lawful basis, you may ask for access, correction, erasure, restriction, portability or object to processing. You can withdraw consent at any time through Cookie settings or by contacting us. We will make reasonable and proportionate searches when responding.
Complaints
Contact us first so we can investigate. We will acknowledge a data-protection complaint within 30 days and respond without undue delay. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Children
The store is intended for adults making purchases. We do not knowingly use children’s information for marketing or profiling. A parent or guardian should make enquiries and purchases for a child.
Last reviewed
1 July 2026. We review this notice when our products, providers or legal duties change.