Privacy Policy

The data controller is GAUGHAN LTD ("Fettle", "we", "us"), registered at 8 Grange Road, Ampthill, Bedford, Bedfordshire, United Kingdom, MK45 2PA. For any privacy question, email support@goaughanuk.shop or call +44 7715601685.

• Order and delivery data: name, email, phone (optional), shipping address (street, city, postal code and country) and the order fulfilment record of what you bought.
• Account and membership data: membership tier, billing interval and subscription status.
• Payment data: processed by Stripe. We receive confirmation, the last four digits, card brand and billing country — never your full card number or security code.
• Support and enquiry data: the contents of the contact, project help and bulk order enquiry forms (including organisation, buyer type and volume), and messages you send us.
• Technical data: IP address, device and browser type, and essential cookie identifiers needed to run the cart and checkout.

We do not collect government identity documents, and we do not store full card numbers in plain text.

We use the following collection sources:

• Directly from you: when you shop, add to cart, check out, subscribe to a membership, or submit the contact, project help or bulk order enquiry forms.
• From our payment processor: Stripe, when a payment or subscription is created, updated, refunded or disputed.
• From our delivery carriers: tracking, delivery confirmation and failed-delivery updates relating to your parcel.
• Automatically from your device: IP address, browser and device type, and essential cookie identifiers needed to run the cart and checkout.

We do not buy personal data from data brokers or third-party marketing lists.

• To fulfil your order and deliver products — performance of a contract.
• To take payment and manage memberships — performance of a contract.
• To provide support, handle returns and respond to enquiries — performance of a contract and our legitimate interests.
• To prevent fraud and keep the store secure — legitimate interests and legal obligation.
• To meet accounting and tax duties — legal obligation.
• To send marketing — only with your consent, which you can withdraw at any time.

Card payments are handled by Stripe, a PCI-DSS Level 1 provider. When you pay, your card details are sent directly to Stripe and are never stored on our servers. Stripe processes your data as an independent controller for fraud prevention and as our processor for taking payment. See Stripe's own privacy notice for details.

Shipping address. We collect your shipping address (street, city, postal code and country) solely to deliver the physical kit you ordered. Your shipping address is passed to the delivery carrier handling your parcel and is not used for advertising or sold to anyone.

Order fulfilment. Order fulfilment data — the items ordered, quantities, order number, shipping address, contact email and phone — is processed so we can pick, pack, dispatch and track your parcel. Our logistics carriers act as processors and receive only the delivery data needed to complete delivery.

Returns and exchange support. If you start a return, refund or exchange, we process your order number, the reason for return, any photos you send and your return tracking details in order to authorise the return, inspect the item and issue the refund through Stripe.

Payment and billing data. Stripe processes your card and billing details; we receive only the payment outcome, billing country, card brand and last four digits for reconciliation, refunds and dispute handling.

Order history is retained to support returns, refunds, faulty-item resolutions and our legal record-keeping duties.

• Payment: Stripe (payments, subscriptions, refunds, disputes).
• Hosting and delivery of the website: Vercel.
• Database, authentication and lead storage: Supabase.
• Shipping and logistics carriers: to deliver physical orders.
• Email/support tooling: to send order and support messages.

We do not sell your personal data. We share it only with processors that support the service, under contract.

Some processors operate outside the UK/EEA. Where data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses (and the UK Addendum) so your data keeps an equivalent level of protection.

• Order and transaction records: up to 6 years to meet accounting and tax duties.
• Support and enquiry messages: up to 24 months.
• Marketing consent records: until you withdraw consent, then a suppression record only.

We use HTTPS, access controls, encrypted secret storage and reputable processors. No method of transmission is completely secure, but we take reasonable technical and organisational measures to protect your data.

You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. To exercise any right, email support@goaughanuk.shop. You can also complain to the UK Information Commissioner's Office (ICO) or the EU supervisory authority in your country.

If you are a California resident, you have the right to know, delete and correct personal information, and to opt out of "sale" or "sharing". Fettle does not sell or share personal information as defined by the CCPA. To make a request, email support@goaughanuk.shop. We will not discriminate against you for exercising your rights.

We use essential cookies to run the cart, checkout and security. Any non-essential analytics are only set with your consent. See our Cookie Policy for the full list and controls.

We do not make solely automated decisions that produce legal effects about you. Our store is not directed at children: it is not for use by anyone under 13, and 13–17 year olds must have a parent or guardian's consent. We do not knowingly collect data from children under 13.

To exercise a right, ask a question or complain, contact GAUGHAN LTD at support@goaughanuk.shop, +44 7715601685, or 8 Grange Road, Ampthill, Bedford, Bedfordshire, United Kingdom, MK45 2PA. You may also contact the ICO at ico.org.uk.