Privacy Policy
At Stuff By Rox, I like to keep things simple (so even I can understand them!) This page sets out the information I’m legally required to share with you about how your data is collected, used, and protected when you interact with my website. It’s the practical side of running an online shop - all that grown-up legal stuff.
Who Are We?
Usually I’d consider that a philosophical question, but in this legalese context, it means that this website is owned and operated by Stuff By Rox, and we’re based in Nottinghamshire, England, UK.
Our website address is www.stuffbyrox.co.uk but you already know that, because you’re already here!
How We Process Your Comments
When you leave a comment on this site, I collect the information you type into the form, along with your IP address and browser details. This helps me spot and block spam.
Well, I say “I collect the information”, but it’s the software that does that, checks for spam and all of that sort of thing while I hammer and set fire to bits of metal.
If you use Gravatar, an anonymised version of your email address may be sent to their service to check if you have a profile. You can read their privacy policy here: https://automattic.com/privacy/ Once your comment is approved, your profile picture (if you have one) may appear publicly next to it.
Media Formats
If you upload images to this website (with a review or in a comment, for example), you may not realise that photos can contain all sorts of hidden information included in the EXIF (Exchangeable Image File Format) data.
EXIF data can include:
Camera settings
Device information
Date and Time
GPS Location Data
In theory, visitors or ne’er do wells could download those images and extract the location information. You don’t want weirdos or random jewellers turning up on your doorstep. Stay safe!
Cookies. Annoying nagging Cookies.
Ugh. Cookies are the bane of my life. If they aren’t adding girth to my waistline, every website nags me about them. And I’m really sorry that my website nags you too – but that’s because we have to make sure you can give informed consent for us to process your data.
On the internet, Cookies are small text files your browser stores on whatever device you use to visit the site. They help the site remember things and keep everything running smoothly.
Here’s how they show up here:
If you leave a comment, you can choose to save your name, email, and website in a cookie so you don’t have to re‑type them next time. These last for about a year.
Visiting the login page sets a temporary cookie to check if your browser accepts cookies. It contains no personal data and disappears when you close your browser.
Logging in sets cookies to save your login details and screen preferences. Login cookies last two days; screen settings last a year. If you tick “Remember Me,” your login stays for two weeks. Logging out clears these cookies.
Editing or publishing an article sets a cookie with the post ID of the article you just worked on. It doesn’t store personal data and expires after one day.
So, nothing sinister — just the usual background helpers that keep the site functional.
However, after all that, we both deserve a biscuit, so you crack out the Bourbons and Custard Creams, I’ll put the kettle on.
Embedded Content
Sometimes, pages on this site may include embedded content — things like YouTube videos, social media feeds (such as Facebook or Instagram) maps, or images from other websites. This often happens if I use an outside source for hosting resource-heavy media like videos.
When that happens, the 3rd party site will treat you as though you’ve visited their website directly. Those sites may collect data about you, use cookies, or track how you interact with the embedded content (especially if you’re logged into their service at the same time).
Who We Share Your Data With
I don’t sell personal information and I never will. I always think it sounds a bit like a spiv on a street corner selling black-market contraband from their voluminous coat. However, one of the disadvantages of the internet is that a website can’t exist in isolation, and some data has to get shared with other services to keep all our websites running smoothly.
For example:
Spam Detection Software Services
These help to keep comments sections clean from nonsense.
Payment Processing Services
If you buy something, they handle the secure bits – we never see your payment details.
Analytics Tools
Services like Google Site Kit, that help is to understand how the site is being used and how we can improve it.
Each of these services has its own privacy policy, and they only get the minimum information needed to do their job.
We only share what we absolutely have to. None of these services require your name or contact details.
Stuff By Rox Newsletter
If you’ve signed up to the Stuff By Rox newsletter, your email address is stored and used only to send you updates about new pieces, events, and the occasional behind-the-scenes glimpse. You can unsubscribe any time — there’s always a link at the bottom of every email.
In practice, this just means your data occasionally takes a quick trip to trusted services like spam filters, payment processors, or analytics tools, and definitely no trips to seedy street corners for black-market goods.
How Long We Retain Your Data
Rather like a weird smell you can’t quite place, different types of information hang around for different lengths of time.
Comments
If you leave a comment, the comment itself and its metadata are kept indefinitely. That’s so the system can recognise and approve follow‑up comments automatically instead of holding them in a moderation queue.
Registered Accounts
For users who register on the website, the personal information provided in their profile is stored as long as the account exists. You can see, edit, or delete your personal information at any time (except you can’t change your username). Website administrators can also see and edit that information.
Orders and Transactions
If you make a purchase, order records (including billing details) are kept for as long as legally required for Tax and Accounting purposes.
The data we use on the website and to process your orders is only kept for as long as it’s useful or legally necessary.
I’m not hoarding it like some strange Information Goblin – I can’t even remember my own details most of the time these days…
Your Information Rights
You know when you ring a big company to try and swap to another company, and it feels like you’re being held to ransom?
It’s like you’re in a cop drama, and your custom and personal details have been kidnapped and you’ll never see them again unless you resubscribe to their new super offer!
What nonsense!! It stands to reason that if you share your information, you also have rights over that information.
If you’ve left comments, created an account, or placed an order, you can:
Request a copy of the personal data I hold about you. Broadly speaking, this is only the information you already know you’ve given me that’s required to complete a purchase, such as name, address, email and a phone number if you’ve provided it.
Ask for corrections if something’s wrong or out of date.
Request deletion of your personal data
(except where I’m obliged to keep it for legal, administrative, or security reasons).
Withdraw consent for optional things like marketing emails, if you’ve ever given it.
If you have an account, you can log in and manage most of your details yourself.
For anything else, just get in touch and I’ll sort it.
You’ve trusted me with your data, and you can see it, change it, or ask me to delete it – no kidnappings, no hostages, no dramas.
How We Protect Your Data
I take the security of your information seriously – but without the need for laser grids, retina scanners or a guard dog called Fluffykins.
Here’s what actually happens:
Secure Connections
The site uses HTTPS, so data between your browser and the site is encrypted. You can see this for yourself if you look at the website address in your browser – you’ll see a ‘lock’ icon, or even the start of the address will be https://
Most modern web browsers will warn you if there are any issues with a website you’re visiting.
Limited Access
Only trusted administrators can get near the systems that hold personal data.
Regular Updates
The software that runs the site is called WordPress. It powers a huge percentage of websites, and is kept up to date with new versions of the software and plugins all the time.
Minimal Storage
I only keep the data that’s necessary, and only for as long as it’s needed.
This website is protected by all sorts of up to date software, internet protocols and all manner of updates, patches and systems I can’t even begin to understand.
Which is great, as it gives me more time to make beautiful jewellery for you!
Thank You For Reading
If you’ve made it this far – thank you. Reading Privacy Policies aren’t usually anyone’s idea of a good time – and writing them isn’t much fun either! – but I hope this one has been clear and maybe even raised a giggle or two.
Your trust means a lot. I’ll always treat your information with care, respect, and a healthy dose of common sense.
For any small business, visitors are the heartbeat. You may not buy anything, but you might tell someone else what you saw or share my work and pieces with someone you think will enjoy it. And for that, I’m really grateful.
Now that the serious bit is out of the way, I can get back to what I really love doing: making jewellery that feels special, meaningful, and a little bit magical.
Contact Us
If you have any questions or queries, don’t hesitate to reach out. I’ll be there.