Draft for review before the club opens.

The short version

• We collect a grown-up's email address and a record of the order - and, for a gift, the other family's email address and the name and message for the gift card; for the free sample, an email address and what you agreed to. That's all.
• We never ask for, or knowingly collect, anything about children.
• This website uses no cookies and no tracking, and loads nothing from other companies.
• We never sell your details or pass them to anyone for their own marketing.

Who we are

Stoneledger Limited, trading as Friday Mystery Club, decides how your information is used (the "controller"). We're registered in England and Wales, number 17481774, at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Email [email protected] about anything on this page.

What we collect and why

• Your email address - to send your packs, your receipt and messages about your order. We need it to do what you paid for (the law calls this "contract").
• Your order record - the date, the amount, Stripe's payment reference, the two things you agreed to when you joined (Week 1 sent straight away; the Terms of sale) with the time you agreed, and whether you said no to news. We keep it to deliver your packs, to show we followed consumer law, and because tax law requires it ("contract" and "legal obligation").
• Your choice about news - if you didn't tick "don't send me news", we may email you about new Friday Mystery Club collections. This is allowed for existing customers under the "soft opt-in" rule, and every email lets you stop with one click ("legitimate interests").
• Messages you send us - so we can reply ("legitimate interests").
• Whether our emails were delivered - so we know your packs arrived ("legitimate interests"). We don't track whether you open our emails or click their links.

Gifts

• If you buy the club as a gift - we also collect the email address of the family you're giving it to, the start date, and the name and message for the gift card. We use them to deliver the gift and to send you your receipt and the gift card ("contract").
• If you've been given the club - someone gave us your email address so we could send you the packs as a present, and we tell you who it's from. We use your address only to send the 12 packs and messages about them - never for news or marketing - and you can ask us to stop at any time ("legitimate interests": delivering a gift someone bought for you). Once all 12 have been sent, we delete your address and keep only a note that the order was a gift.

Free sample sign-ups

• If you sign up for the free pages - we collect your email address and a record of what you agreed to (the words of the box you ticked, and when). We use it to send you the free pages, then two short emails about the club over the next week, then news now and then - never more than one a week ("consent").
• Every email has an unsubscribe link, and you can withdraw your consent at any time. We then keep just your address on a "do not email" list, so we never email you again.
• If you never open our emails for a year, we delete your address.

Children

The packs are for children, but this website and our emails are for grown-ups. We don't ask for any information about children, and the certificate's name is written on paper, never given to us. Please don't send us children's names or photos.

Who helps us

A few companies handle information for us, only on our instructions:

• Stripe - takes your payment. Stripe sees your card details; we never do. For its own legal duties (such as preventing fraud) Stripe also acts under its own privacy notice.
• Resend - sends our emails.
• DigitalOcean - hosts this website and our order records, in London.
• Cloudflare - runs our web address and protects the website from attacks.

Some of these companies are based in the United States. Where information leaves the UK, it is protected by the UK's data bridge with the US or by the UK's approved contract terms.

How long we keep it

• Order records: six years after the end of the financial year of your order, because tax law requires it.
• Your email address for sending packs: until all 12 have been sent, then only with your order record.
• A gift's recipient email address: until all 12 packs have been sent, then deleted.
• A free sample sign-up: until you unsubscribe (then only on the "do not email" list), or until a year passes without you opening one of our emails.
• News emails: until you unsubscribe. We then keep just your address on a "do not email" list, so we never email you news again.

Cookies

This website doesn't use cookies or any kind of tracking.

Your rights

You can ask us for a copy of your information, to correct it, to delete it, to limit how we use it, or to send it to you in a common format, and you can object to how we use it - including, at any time, to news emails. Email us and we'll reply within one month.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.

Changes

If we change this notice, we'll update this page and the date at the top.