Last updated: 2 November 2026

This policy explains what personal information 20thCenturyStuff collects, why, and what your rights are. The data controller is Jennifer Donald, trading as 20thCenturyStuff, 15a Heol-y-Parc, Efail Isaf, Pontypridd, Rhondda Cynon Taf, CF38 1AN, United Kingdom. Email: jenny@20thcenturystuff.com.

What we collect

• When you order: your name, billing and delivery address, email address, phone number (if given), what you bought and how much you paid.
• If you create an account: your login details and order history.
• If you contact us: your message and contact details.
• When you browse: basic technical information such as pages visited, browser type and approximate location, collected through cookies and site statistics.

Why we use it (and our lawful basis)

• To process, pack and deliver your order and handle any returns: to perform our contract with you.
• To keep financial records for tax purposes: legal obligation.
• To prevent fraud and keep the website secure, and to understand how the site is used so we can improve it: our legitimate interests.
• To send you news about new stock, only if you have asked us to by confirming your newsletter signup or ticking the box at checkout: consent, which you can withdraw at any time using the unsubscribe link in every email.

Who we share it with

We never sell your information. We share only what is needed with:

• Payment providers: Stripe (through WooPayments), which processes your payment. We never see your full card details.
• Delivery companies: Royal Mail, InPost, DPD or Evri, which receive your name, address and sometimes your email or phone number to deliver your parcel.
• Website services: our web host, WooCommerce and Jetpack (Automattic), which help run the shop and provide anonymous visitor statistics.
• Google: Google Analytics, which tells us how visitors find and use the site (only if you accept cookies), and Google Search Console and Google Merchant Center, which help our pages and products appear in Google search.
• Email services: Brevo, which sends our order and shipping emails and, if you sign up, our occasional newsletter; and Google Workspace, which hosts our email inbox.

Some of these providers may process data outside the UK; where they do, they use legally approved safeguards.

How long we keep it

We keep order records for 6 years after the end of the tax year they relate to, as required for tax purposes. Account information is kept until you ask us to delete your account. Marketing preferences are kept until you unsubscribe.

Cookies

Our website uses cookies that are essential for the basket, checkout and your account to work. With your consent, we also use Google Analytics cookies to understand how visitors use the site, and, where shown, cookies that connect with services such as Pinterest. If you click Decline on the cookie banner, Google Analytics does not set any cookies. You can change your cookie choice at any time.

Your rights

You can ask to see the information we hold about you, have it corrected or deleted, object to or restrict how we use it, or receive a copy of it. Email jenny@20thcenturystuff.com and we will respond within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.