Privacy Policy
Last updated: 5th August 2026
Cartacanta ("we", "us") is committed to protecting your privacy. This policy explains what personal data we collect when you visit or buy from cartacanta.co.uk and how we use it.
1. Who we are Cartacanta, Fabiola Massa, operating from the UK. Contact: hello@cartacanta.co.uk
2. What we collect When you browse or buy from our site, we may collect:
Name and email address
Billing/contact details provided at checkout
Order history
Payment information (processed directly by our payment provider — we do not store full card details)
Technical data such as IP address and browser type, via standard website analytics
3. How we use your data We use your data to:
Process and deliver your orders
Respond to customer service queries
Send order confirmations and, where you've opted in, occasional updates about new resources
Improve our website and product range
4. Legal basis for processing We process your data under the following legal bases (UK GDPR): performance of a contract (fulfilling your order), consent (marketing emails), and legitimate interest (site analytics, fraud prevention).
5. Who we share it with We share data only where necessary with:
Our payment processor (Squarespace Payments) to complete transactions
Our website host, Squarespace, which processes data on our behalf
Email service providers, if you've subscribed to updates
We do not sell your personal data to third parties.
6. Cookies Our site uses cookies for essential site functionality and analytics, as set out in Squarespace's standard cookie usage. You can control cookies via your browser settings.
7. How long we keep your data We keep order and account data for as long as needed to fulfil legal, accounting, and customer service obligations, and delete it when no longer required.
8. Your rights Under UK GDPR, you have the right to access, correct, or request deletion of your personal data, and to withdraw marketing consent at any time. To exercise these rights, contact hello@cartacanta.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.
9. Changes to this policy We may update this policy occasionally; the current version will always be available on this page.