Privacy

— PRIVACY POLICY —

Last updated: 1 November 2026

This explains what personal information we collect when you use whatismygeneration.com, why we need it, who we share it with, and what your rights are. We only collect what we need.

WHO IS RESPONSIBLE FOR YOUR DATA

Vulcaire Ltd, a company registered in England and Wales, company number 17323909, is the "controller" of your personal information. What Is My Generation is a trading name of Vulcaire Ltd.

• Registered office: Suite A, James Carter Road, Mildenhall, Bury St Edmunds, England, IP28 7DE
• Email: hello@whatismygeneration.com

WHAT WE COLLECT

What: Order details: your name, delivery address, email address, phone number (if you give one), what you ordered
When: When you place an order
Why we use it: To take payment, make and deliver your order, send order and delivery emails, and handle returns and refunds
Our lawful basis (UK GDPR): Contract (to fulfil your order)

What: Payment details
When: At checkout
Why we use it: Stripe processes your payment. We don't see or store your full card number. We receive confirmation of payment and limited details (for example, the last four digits)
Our lawful basis (UK GDPR): Contract

What: Messages you send us (contact form, emails)
When: When you get in touch
Why we use it: To reply to you and keep a record of what we said
Our lawful basis (UK GDPR): Legitimate interests (answering enquiries)

What: Newsletter sign-up: your email address, the date you signed up and the wording you agreed to
When: Only if you tick the box or sign up
Why we use it: To send you news and offers, and for nothing else. We don't share your email address with anyone else for their own marketing. You can unsubscribe at any time
Our lawful basis (UK GDPR): Consent

What: Order and accounting records
When: Ongoing
Why we use it: To keep our accounts and meet legal duties
Our lawful basis (UK GDPR): Legal obligation

What: Fraud and security information (such as IP address in server logs and information from Stripe)
When: When you use the site
Why we use it: To keep the site and payments safe and prevent fraud
Our lawful basis (UK GDPR): Legitimate interests

What: Your shopping bag, kept in your browser
When: When you add things to your bag
Why we use it: So the bag works. It stays on your device
Our lawful basis (UK GDPR): Strictly necessary (see our Cookie Notice)

We don't use your information for automated decision-making or profiling. We don't use analytics or advertising trackers.

WHO WE SHARE IT WITH

We only share what's needed, with organisations that help us run the shop. They act on our instructions or have their own legal duties:

• Stripe: payment processing and fraud prevention. Stripe also acts as an independent controller for its own legal and fraud-prevention purposes. See stripe.com/privacy.
• Gelato (our print and fulfilment partner): receives your name, delivery address, phone number and email (needed by carriers) and the details of what you ordered, so they can print and deliver it. See gelato.com/privacy-policy.
• Delivery carriers, through Gelato, who deliver your parcel.
• Our email provider sends our order confirmation and delivery emails, using your email address and your order details, and lets us send and receive emails.
• Our hosting provider hosts this website, keeps its technical logs and stores our orders and mailing list sign-ups.
• Our font provider: our pages load their fonts from a third-party font service, so your browser contacts that service and shares your IP address with it when you visit.
• Professional advisers and authorities (accountants, lawyers, HMRC, police) where we're legally required or need advice.
• If we ever sold or restructured the business, your information might be passed to the new owner, who would have to respect this policy.

We never sell your personal information.

SENDING INFORMATION ABROAD

We deliver only in the UK, but some of the organisations we use may process your information outside the UK, including Stripe and Gelato and its carriers, and our email provider processes emails in the United States. When that happens, we make sure there are appropriate protections, such as the UK's adequacy regulations for certain countries or standard contractual clauses (the UK International Data Transfer Addendum). You can ask us for more details.

HOW LONG WE KEEP IT

• Order and payment records: 6 years from the end of the financial year they relate to, as required for tax and company records.
• Emails with us: up to 2 years after we've finished helping you, unless they form part of an order record.
• Mailing list: until you unsubscribe.
• Server logs: a short time only, normally no more than 90 days.

We'll delete or anonymise information once we no longer need it.

YOUR RIGHTS

Under UK data protection law you can ask us to:

• tell you what we hold about you and give you a copy;
• correct anything that's wrong;
• erase your information (where we don't have to keep it for legal reasons);
• restrict or object to some of our uses of it;
• give you your information in a portable format; and
• withdraw consent at any time, for example by using the unsubscribe link in any email.

To use any of these, email hello@whatismygeneration.com. We'll reply within one month. There's no charge normally.

If you're not happy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

CHILDREN

Our shop is for adults to buy from. Some of our items are for children, but they're bought by parents or carers. We don't knowingly collect information from children under 13. If you think a child has given us personal information, please email us and we'll delete it.

COOKIES

See our Cookie Notice. In short, we don't use analytics or advertising cookies.

SECURITY

Payments are handled by Stripe over encrypted connections. Our site uses HTTPS, and we limit who can see order information. No system is perfectly secure, but we take sensible steps to protect your information, and we'll tell you and the ICO if we ever have a breach that must be reported.

CHANGES

We'll update this policy if we change how we use your information. The date at the top shows when it was last changed.

— COOKIE NOTICE —

Last updated: 1 November 2026

THE SHORT VERSION

We keep this simple. We don't use analytics, advertising or tracking cookies. We don't set any cookies when you browse our shop.

WHAT WE DO STORE ON YOUR DEVICE

What: Your shopping bag, saved in your browser's local storage (not a cookie)
Name: vulcaire-bag
Why: So your bag is still there if you refresh the page or come back later
How long: Until you check out, clear it, or clear your browser data

This is "strictly necessary" for the shop to work, so it doesn't need your consent under UK rules (PECR). It stays on your device and isn't used to track you.

OTHER COMPANIES

• Stripe (payments): when you go to our secure checkout, Stripe may set its own cookies or use similar technology to process your payment securely and to prevent fraud. These are essential to taking your payment. Stripe's own policy explains how it uses them (stripe.com/cookies-policy/legal).
• Google Fonts: our pages load fonts from Google's servers. This means your IP address is sent to Google when a page loads. We don't use Google Fonts to track you, but we mention it for openness.

CONTROLLING COOKIES

You can block or delete cookies in your browser settings. Blocking Stripe's cookies might stop checkout working. Clearing your browser's site data will empty your bag.

IF THIS CHANGES

If we add analytics or marketing tools in future, we'll update this notice and ask for your consent before anything non-essential is set.

QUESTIONS

Vulcaire Ltd (company number 17323909), registered office: Suite A, James Carter Road, Mildenhall, Bury St Edmunds, England, IP28 7DE. Email hello@whatismygeneration.com. See also our Privacy Policy.