Tumbletail Ltd. is the data controller for everything described here. Registered in England & Wales; registered with the Information Commissioner's Office as a small trader.
We do not hold card details. Payment is handled by our payment provider, and what comes back to us is the last four digits and whether it cleared.
Order and personalising records: performance of a contract, then a legal obligation for the tax portion. Enquiries: legitimate interest in answering you. The monthly letter: consent, given by typing your address into the box, withdrawable in one click at the bottom of every letter.
Three processors, all under contract and none permitted to use the data for their own purposes: the payment provider, the courier (name and delivery address only), and the workshop in Bedminster that engraves tags — which receives the wording and an order number, never your contact details. Nothing is sold, rented or shared for advertising.
This site sets no advertising or analytics cookies. There is no tracking pixel, no remarketing tag, and nothing that follows you off the site. If we ever add basic visitor counting, it will be named here first.
Under the UK GDPR you can ask for a copy of what we hold, ask for it to be corrected, ask for it to be deleted where we are not required to keep it, object to processing, or ask for it in a portable format. Write to studio@tumbletail.example and we will answer within one calendar month, usually the same week — there are only three of us and the records are not large.
If you are unhappy with how we handle a request you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so we can fix it.
Nothing here is aimed at children and we do not knowingly hold data about anyone under sixteen.
If this page changes materially, the monthly letter will say so in the first paragraph rather than quietly linking to it.