Privacy and cookies
Last updated 15 October 2026
This explains what personal information we collect when you buy from us or use a tribute page, why we need it, and your rights. We keep it to what we need, and we never sell it.
Who we are
Robin & Rose is a trading name of Alex Rose, 37 Wood Sage Road, Stourport-on-Severn, DY13 8EG. We are the “controller” of your information under UK data protection law. For anything about your information, email hello@robinrose.co.uk.
What we collect and why
| Information | Why we use it | Lawful basis |
|---|---|---|
| Your name, email, phone number and delivery address | To take payment, make and deliver your order, send order and tracking emails, and help if something goes wrong | Contract |
| What you ask us to engrave: name, years and message | To make your slate exactly as you approved it | Contract |
| Gift notes | To print in the box when you send a candle as a gift | Contract |
| Order records | To keep accounts and meet tax rules | Legal obligation |
| A follow-up email a few days after delivery, with your tribute page link | To help you get started with the page you bought | Legitimate interests |
| Tribute page content: photos, video links, words about them, memories, and names left when lighting a candle | To show the tribute page to people with its link | Contract (for the person who ordered) and legitimate interests (for visitors who add to it) |
| Anniversary and birthday reminder emails: your email and the dates you give | To send the reminders you asked for | Consent, which you can withdraw at any time |
| Technical details when you visit (such as IP address and browser type), kept by our hosting provider | To run the website securely and stop misuse | Legitimate interests |
We don’t use your information for advertising, and we don’t send marketing emails. If we ever start a newsletter, we’ll only send it if you sign up.
Tribute pages can include information about someone who has died. UK data protection law doesn’t cover people who have died, but we treat their memory with the same care: pages aren’t listed on search engines, and only people with the link or the slate can see them.
Who we share it with
We only share what’s needed, with companies that help us run the shop. They can only use it to provide their service to us.
- Stripe takes payments. Your card details go straight to Stripe, never to us. Stripe also uses payment information to prevent fraud.
- Supabase stores our orders and tribute pages, on servers in London.
- Vercel hosts the website.
- Resend sends our emails.
- Royal Mail (and any delivery service we use) receives your name and delivery address to deliver your parcel.
- YouTube and Vimeo, only if a video has been added to a tribute page. The video plays from their site, and their own privacy policies apply.
Some of these companies are based in, or use servers in, the United States. When information goes outside the UK, it’s protected by the safeguards UK law requires, such as the UK–US data bridge or approved contract terms.
We may also share information if the law requires it, or to protect our rights or someone’s safety.
How long we keep it
- Orders, including what was engraved: 6 years after the order, to meet tax and accounting rules.
- Tribute pages, with their photos and memories: for as long as Robin & Rose is trading, unless the person who ordered asks us to delete it sooner. We delete it within 30 days of being asked.
- Reminder email details: until you turn reminders off or the tribute page is deleted.
- Hosting logs: deleted automatically after a short time by our hosting provider.
- Unpaid checkouts (a basket you didn’t finish paying for): deleted within 90 days.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- ask us to correct anything that’s wrong
- ask us to delete your information (we may need to keep order records for tax reasons)
- object to, or ask us to limit, how we use it
- ask for your information in a format you can take elsewhere
- withdraw your consent to reminder emails at any time, using the link in any reminder or on your private page
Email hello@robinrose.co.uk to use any of these rights. We’ll reply within one month. If you’re unhappy with how we’ve handled your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Cookies and similar technology
We don’t use advertising or tracking cookies, and we don’t use analytics that follow you around the web. Our website only stores a few small things in your own browser so it works:
- Your basket, so it’s still there if you leave and come back (stored in your browser until you check out or clear it).
- The code for the slate you’re designing, so your QR code doesn’t change if you refresh the page (cleared when you close the tab).
- Whether you’ve lit a candle on a tribute page, so the page remembers.
These are strictly necessary for features you ask for, so we don’t need to ask permission first. When you pay, Stripe’s checkout page uses its own cookies for security and fraud prevention. You can clear stored information at any time in your browser settings.
Children
Our shop is for adults. We don’t knowingly take orders from anyone under 18.
Changes
If we change this policy, we’ll update it here and change the date at the top. If a change is important, we’ll tell people affected by email. See also tribute pages and privacy and our terms and conditions.