Privacy Policy

Last updated: 24/09/2025

Aisling Glass is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your data when you visit our website hosted on Squarespace at aislingglass.co.uk

We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Who We Are

We are Aisling Glass, a small business based in Bath, Somerset, specialising in handmade stained glass creations.
Our website is built and hosted using Squarespace, which provides tools for site building, analytics, forms, and ecommerce.

Contact Information:

  • Business Name: Aisling Glass

  • Email: aislingglass@outlook.com

  • Website: aislingglass.co.uk

2. What Personal Data We Collect

We collect and process the following data when you interact with our website:

a) Information You Provide

  • Contact Forms: name, email address, message content

  • Order Checkout: name, billing/shipping address, email, phone number, payment details (processed securely via Stripe or PayPal)

  • Newsletter Sign-Up: name and email address (if you opt in)

b) Automatically Collected Data

Via Squarespace and integrated tools, we may collect:

  • IP address, browser type, device information

  • Usage data such as pages visited, time on site, referral sources

  • Cookies and similar tracking technologies (see section 8)

3. How We Use Your Data

We use your data to:

  • Process and fulfill orders

  • Communicate with you about your order or enquiry

  • Send you updates or marketing emails (only if you consent)

  • Improve our website and user experience

  • Monitor site traffic and performance via Squarespace Analytics

4. Legal Bases for Processing

Under the GDPR, we rely on the following legal bases:

  • Contractual necessity – to fulfill orders or respond to enquiries

  • Consent – for marketing communications or optional cookies

  • Legitimate interest – to improve services and ensure security

  • Legal obligation – where required by law (e.g. tax reporting)

5. How and Where Your Data Is Stored

Our website is hosted on Squarespace, whose servers are based in the United States and other jurisdictions. Your data may be transferred and stored outside the UK/EU, but Squarespace and its subprocessors follow data protection safeguards such as Standard Contractual Clauses to remain GDPR-compliant.

6. Who We Share Your Data With

We do not sell your personal data. We may share your data with trusted third parties necessary to operate our website and fulfill orders.

Each provider has their own GDPR-compliant privacy policy and only accesses data required to perform their services.

7. Data Retention

We keep your data only as long as needed:

  • Orders and transaction records: 6 years (legal/accounting requirement)

  • Contact form submissions: up to 12 months, unless needed longer

  • Email subscribers: until you unsubscribe

  • Analytics data: anonymised and aggregated where possible

8. Cookies and Tracking

Squarespace uses cookies and similar technologies to:

  • Analyze site traffic

  • Enable site functionality (e.g. remembering cart items)

  • Allow embedded content (e.g. social media)

Some cookies are essential, while others are optional. You can manage or block cookies via your browser settings.

If you’re in the EU or UK, our site includes a cookie banner that asks for consent where required.

9. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Correct any inaccuracies

  • Request deletion of your data

  • Object to processing or request restrictions

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority (e.g. ICO in the UK)

To exercise these rights, contact us at: aislingglass@outlook.com

10. Security

We take data protection seriously and follow industry-standard practices to secure your personal information. Squarespace also uses SSL encryption, secure servers, and access controls to safeguard your data.

11. Children's Privacy

Our website and services are not intended for children under 16. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy occasionally. The latest version will always be posted on this page with the updated date.