Home / Privacy policy
Our policies
Privacy policy
What we collect, why we collect it, who sees it and what you control.
Last updated 8 October 2026 · 6 minute read
In 30 seconds
The short version
We never sell your information.
We share only what each partner needs to make and deliver your order.
Stripe handles your card.
Your card number goes straight to Stripe and never reaches us.
Optional cookies wait for your OK.
Essential cookies run the basket and payments. The rest wait for Accept.
You stay in control.
Email us to see, correct or delete your information. We reply within a month.
This page explains what personal information we collect on this website, why we collect it, who sees it and what you control. If anything is unclear, email hello@elyrahouse.co.uk and we will explain.
1. Who we are
Elyra House is the trading name of Fiza Shakoor, a sole trader in the United Kingdom. We decide how your personal information is used, so in data protection law we are the “controller”.
Fiza Shakoor trading as Elyra House
18 Long Elmes, Harrow & Wealdstone, HA3 5JL
hello@elyrahouse.co.uk
In this policy “we” and “us” mean Fiza Shakoor trading as Elyra House.
2. What we collect
When you order
- Your name, email address and delivery address.
- Your phone number, if you give one. We use it only if there is a problem with delivery.
- What you bought, what you paid and any discount code you used.
- Any note you add to your order.
Stripe handles your card. Your full card number goes straight to Stripe and never reaches us. We see the type of card and its last four digits.
When you create an account
Your name, email address and a password. We store your password in a scrambled form, so nobody here is able to read it. Your account also keeps your addresses, your orders and your downloads. If you save a card for next time, Stripe keeps it, not us.
When you order a personalised print
The photos, names, dates and words you send us for your print.
When you write to us
Your name, email address and message, sent through our contact form or by email.
When you join our newsletter
Your email address and nothing else.
When you browse
Our web host keeps short technical records of visits, including IP addresses, to keep the site secure and working. Cookies and similar tools store small amounts of information in your browser. Our Cookie policy lists each one.
3. Why we use it, and the law behind each use
Data protection law asks us to name a lawful basis for each way we use your information. Here they are.
To take, make and deliver your order
We also use it to send you emails about your order and to handle returns and refunds.
Contract
To run your account
Contract
To keep tax and accounting records
Legal obligation
To stop fraud and keep the website secure
Including payment checks by Stripe. You and our shop both need protecting from fraud.
Legitimate interests
To answer your messages
Or our contract with you when the message is about an order.
Legitimate interests
To send our newsletter
Every newsletter has a link to unsubscribe, or email us.
To remember prints you looked at, and to note which website sent you to us
These run only after you press Accept on our cookie banner.
4. Automatic payment checks
Stripe checks every payment for signs of fraud. It looks at details such as the card, the device and the order. If a payment looks risky, Stripe sometimes blocks it without a person checking. If this happens to you, email us and we will look at it ourselves.
5. Who we share it with
We share only what each one needs to do their job. We never sell your information.
- Stripe, who take payments and check them for fraud. If you pay with Klarna or Amazon Pay, they receive the details needed for your payment. Each has its own privacy notice.
- Our print and delivery partners, who make your prints and post them. They receive your name, your delivery address, your phone number if you gave one, and what you ordered.
- Hostinger, who host this website and store its information.
- Our email providers, including Google, who carry our order emails and messages. Google also supplies the fonts on this website, so your browser connects to Google when a page opens.
- Our accountant and HM Revenue & Customs, for tax.
- The police, courts or regulators, only when the law requires it.
6. Information sent outside the UK
Some of these companies, such as Stripe and Google, store information in the United States or the European Union. When your information leaves the UK, UK adequacy rules or contract terms approved under UK law protect it.
7. How long we keep it
- Orders and invoices: at least 5 years after the 31 January tax return deadline for the year of your order, as HMRC requires. Then we delete them.
- Your account: until you ask us to close it. Your order records stay for the tax period above.
- Photos and details for personalised prints: 60 days after delivery, in case a print needs remaking. Then we delete them.
- Messages: 2 years after we last hear from you.
- Newsletter: until you unsubscribe.
- Cookies: see our Cookie policy.
8. Your rights
You have the right to:
- get a copy of the information we hold about you
- ask us to correct it
- ask us to delete it
- ask us to limit how we use it
- object to how we use it
- receive it in a common file format, to move it elsewhere
- withdraw your consent at any time, for the newsletter or for optional cookies
Some of these rights have limits. For example, we keep order records for tax even if you ask us to delete them. To use any of your rights, email hello@elyrahouse.co.uk. It is free, and we reply within one month.
9. Complaints
If you are unhappy with how we use your information, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113.
10. Changes to this policy
We update this page when the way we use information changes. The date below shows the last change.
Last updated: 8 October 2026
Questions about your data?
Email hello@elyrahouse.co.uk and we will answer.