Privacy Policy

Who we are

Myrtle's Purple Turtle ("MYPT", "we", "us") operates this store and the Creator Tool design editor. This policy explains what personal data we collect through them, why, and what rights you have over it under UK/EU data protection law (GDPR).

What we collect

• Account details — your email address, and either a password (stored as a one-way hash we can never read back) or a Google account link, depending on how you sign in.
• Order & delivery information — items purchased, delivery address, payment method and status, and (for Creator Tool purchases) the design itself.
• Your saved country — used to show you the right currency and, if applicable, an in-region price.
• Designs you create in the Creator Tool, whether or not you go on to buy them.

We never see or store your full card number - card payments are handled entirely by Stripe, our payment processor, and only a payment reference is passed back to us.

Why we use it

• To create and secure your account, and let you sign in.
• To take, fulfil, and deliver your orders, and to let you check their status.
• To process payments (via Stripe) and, for cash-on-delivery or InstaPay orders, to confirm payment.
• To keep the financial/business records UK law requires us to keep (see Retention, below).
• To respond if you contact us for support.

We don't use your data for advertising, and we don't sell it to anyone.

Who we share it with

• Stripe — to process card payments. See Stripe's privacy policy.
• Google — only if you choose to sign in with a Google account.
• Printing/delivery partners, where needed to produce and ship a physical order.

Mailing list

If you sign up to our mailing list - either through the form in the site footer, or by ticking the box when creating an account - we collect your name (optional) and email address to send you occasional news and offers. This is entirely opt-in and separate from the transactional emails about your orders, which you can't opt out of while you have an account.

Every mailing list email includes an unsubscribe link, and if you have an account you can also toggle it off any time from your account. When you unsubscribe, we keep a minimal record (your email address, marked unsubscribed) so that a later signup with the same address can't silently re-add you.

Cookies

We use two strictly-necessary cookies: one keeps you signed in, the other protects your account from cross-site request forgery. Both are essential to the site working and aren't used for tracking or advertising. We don't run any advertising cookies or scripts on this site — see Analytics below for the one script we do run, which doesn't use cookies either.

Analytics

We use Umami, a self-hosted, privacy-focused analytics tool, to understand how visitors use this site - which pages are popular, roughly where visitors come from, and how people move through our Store checkout. Umami doesn't use cookies, and doesn't collect or store anything that identifies you individually: no names, email addresses, or account details. What it records - page visited, approximate location derived from your IP address (which it doesn't store), device/browser type, and referring site - is aggregated and can't be traced back to you.

We don't use this data for advertising, and we don't share it with anyone outside MYPT. Analytics events from the Store never include order numbers, prices, or totals - your actual order history is only ever held in our own order records (see "Order & delivery information" above).

How long we keep it

• Your account, addresses, and Creator Tool drafts are kept for as long as your account is active.
• When you delete your account, your addresses and unpurchased drafts are deleted straight away, and your account details are anonymized so they can no longer be linked to you.
• Order records are kept for 6 years after that, in line with UK HMRC record-keeping requirements for business/financial records - but with your identifying details already removed.

Your rights

Under UK/EU GDPR, you have the right to:

• Access & export your data — use "Download my data" in your account for an instant copy, any time.
• Erase your account — use "Delete my account" in your account. This isn't available while you have an order still being processed - please wait until it's delivered/collected, or contact us.
• Correct inaccurate data, or object to/restrict how we use it — contact us below.

Contact us

Questions about this policy or your data: privacy@mypt.me. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data.