Privacy Policy

1. Overview & Data Controller

Wild Meadow Studio ("we", "our", "us") is committed to protecting the privacy of our studio clients, guests, and visitors. The business is owned and operated by Polly Griffiths as a Sole Trader under UK law, located in Hernhill, Faversham, East Kent. Polly Griffiths is the designated Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions regarding how we process your personal data, you can reach us directly via email at polly@wildmeadowstudio.co.uk.

2. What Personal Data We Collect

We only collect the minimum amount of personal information required to deliver our artisan products, custom commission projects, and workshop bookings:

• Contact Information: Name, billing address, shipping address, email address, and phone number.
• Commission Specifications: Custom design notes, raw material preferences, sizing details, and personal histories shared during consultation.
• Workshop Registrations: Attendee names, dietary requirements, dates selected, and medical safety considerations (e.g. pacemakers for silversmithing tools).
• Transactional Data: Purchase histories, gift voucher codes, and billing information (processed securely through PCI-DSS compliant third-party payment gateways; we never store your raw credit card details).
• Technical Data: IP address, browser type, and navigation details collected via essential cookies when browsing our site.

3. How & Why We Use Your Information

We process your personal information under the following legal bases recognized by the UK GDPR:

• Contractual Obligation: To process and ship your shop purchases, manage the Remodelling Box transit, or deliver your private masterclass day.
• Legitimate Interests: To respond to your bespoke commission waitlist applications, coordinate scheduling calendars, and send waitlist notifications.
• Consent: With your explicit consent, to notify you when new curated shop collections drop or when Polly publishes diary posts.
• Legal Compliance: To maintain accurate tax and accounts bookkeeping as required by HM Revenue & Customs (HMRC) in the UK.

4. Data Sharing & Security

As a small independent studio, we will never sell, trade, or distribute your personal data to third parties for marketing purposes. We only share information with trusted third-party services that are essential to our operational flow:

• Insured Shipping Carriers: Royal Mail Special Delivery or specialist art-couriers to deliver your physical parcels safely.
• Secure Payment Processors: Stripe or PayPal to handle transactions securely.
• Assay Services: The London Assay Office (only sharing details necessary for legal precious metal hallmarking records).

We protect your data using secure socket layer (SSL) encryption for all web traffic and store database records behind verified administrative firewalls.

5. Your Legal Rights

Under the UK GDPR, you have the following rights regarding the personal data we hold:

• The right to access and receive a copy of the personal information we hold about you.
• The right to request the correction or completion of inaccurate personal data.
• The right to request the erasure of your personal data ("the right to be forgotten").
• The right to withdraw your consent for email drops at any time by clicking "unsubscribe".

If you wish to exercise any of these rights, or if you believe we have handled your data inappropriately, please contact us. You also have the right to lodge a complaint directly with the UK Information Commissioner's Office (ICO).