Last updated: 10 October 2026.
Who we are
The controller of your personal data is Emmanuel Cezzanne, 24 Wingrove Road, London, SE6 1QE. Our website is emmanuelcezzanne.co.uk. For anything in this notice, contact us at Customer Care. We are exempt from the ICO data protection fee.
What we collect, why, and our lawful basis
| What | Why | Lawful basis |
|---|---|---|
| Name, delivery and billing address, email, phone number (if given), order contents and payment status | To take, pay for, deliver and refund your order, and to tell you about it | Contract |
| Account details, if you create an account | To let you log in and see your orders | Contract |
| Messages you send us (email, enquiries) | To answer you and handle returns, faults and complaints | Contract, or our legitimate interest in running customer care |
| Technical data (IP address, browser, pages requested) and security checks | To keep the site working and secure, and to prevent fraud and spam | Our legitimate interests |
| Order and payment records | To keep accounts and meet tax duties | Legal obligation |
| Marketing emails | To send you news and offers, only if you ask us to | Consent, which you can withdraw at any time |
You are not required to give us your data, but we cannot deliver an order without your name, address and email. We do not make decisions about you by automated means that have legal or similarly significant effects, apart from automated fraud checks by the payment providers listed below.
Who we share it with
We use these providers (processors or independent controllers) to run the shop. We share only what each needs:
- WooPayments / Stripe: card and wallet payments, and fraud prevention.
- PayPal: PayPal and other PayPal-processed payment methods.
- Vimeo: the videos on our home page. When a video loads, Vimeo receives your IP address and browser information.
- QUIC.cloud / LiteSpeed: hosting and caching, for performance.
- Our carriers: your name, address and phone number, to deliver your order.
- Google reCAPTCHA: spam and fraud protection at checkout. Google receives technical data such as your IP address and device information.
We do not sell your data. We may disclose it if the law requires, or to protect our legal rights.
Transfers outside the UK
Some of the providers above (for example Stripe, PayPal, Google and Vimeo) may process data outside the UK. Where they do, they rely on a lawful transfer route such as the UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Order and payment records: 6 years from the end of the tax year of the order, to meet tax and accounting law.
- Customer-care emails: 2 years after the last message, or 6 years if they relate to an order.
- Accounts: until you ask us to delete them, subject to the records above.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on consent you can withdraw it at any time. To use any of these rights, contact us at Customer Care. We aim to reply within one month.
How to complain about our use of your data
- Tell us first. Email Customer Care or write to Emmanuel Cezzanne, 24 Wingrove Road, London, SE6 1QE. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.
- You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. You can complain to the ICO at any time, whether or not you have complained to us first.
Cookies and similar technologies
We only use cookies and similar storage that are strictly necessary to run the shop, keep your basket and take payment securely. We do not use advertising or analytics cookies, so we do not show a cookie banner. If that changes, we will ask for your consent first.
| Name | Set by | Purpose | Lasts | Notes |
|---|---|---|---|---|
| wp_woocommerce_session_… | This site | Remembers your basket and checkout details | 2 days | Strictly necessary. Observed on the basket page. |
| woocommerce_items_in_cart, woocommerce_cart_hash | This site | Tell the site your basket is not empty | Browser session | Strictly necessary. Set only once you add an item. |
| storeApiCartHash, storeApiNonce, storeApiCartData (browser storage) | This site | Keep the basket and checkout working | Until cleared | Strictly necessary. Observed on the basket page. |
| wordpress_logged_in_…, wordpress_sec_…, wordpress_test_cookie | This site | Log you in to your account | Session, or up to 2 weeks if you tick Remember me | Strictly necessary. Set only when you log in. |
| __stripe_mid, __stripe_sid | Stripe | Fraud prevention and payment | 1 year, 30 minutes | Needed for secure payment and fraud prevention. Set when Stripe’s payment form loads. |
| PayPal cookies | PayPal | Payment and fraud prevention | Set by PayPal; the length varies by cookie | Needed for payment and fraud prevention. Set only when PayPal buttons load. |
| _GRECAPTCHA and related | Spam and fraud protection (reCAPTCHA) | 6 months | Needed for spam and fraud protection. Set only on pages where reCAPTCHA loads. | |
| Vimeo player cookies | Vimeo | Play the home-page video | Set by Vimeo; the length varies by cookie | Set only when the home-page video loads. |
Changes to this notice
We will post any change here and update the date at the top.