Privacy policy

This policy explains how Daylight Daily (“we”, “us”), looks after your personal data when you use daylightdaily.netlify.app. We are the data controller. Contact us at hello@daylightdaily.com.

What we collect and why

• Orders. Name, email, delivery address, phone (if you give it) and order details, so we can take payment, deliver your order, handle returns and meet our legal and tax duties. Legal basis: contract and legal obligation.
• Payments. Payments are handled by Stripe. We never see or store your full card details. Stripe acts as a controller for its own fraud and compliance purposes. See Stripe’s privacy policy.
• Email sign-ups. If you tick the box on our offer pop-up, we store your email so we can send you your discount code, offers and news. Legal basis: consent, which you can withdraw at any time using the unsubscribe link in any email.
• Abandoned checkout emails. If you started a checkout, gave us your email and agreed to hear from us, we may email you a link to finish your order. Legal basis: consent.
• Customer service. Messages you send us, so we can reply. Legal basis: legitimate interests and contract.
• Website analytics and advertising. We use Google Analytics and Google Ads to understand visits and measure our advertising. They run with cookies switched off, so no analytics or advertising cookies are set on your device. See our cookies page.

Cookies and local storage

• Analytics and advertising cookies (Google), only after you accept.
• Small preference items in your browser that remember your cookie choice, that you’ve seen our offer pop-up, your discount code, and that you’ve completed an order (so we don’t show you the pop-up again). They stay on your device and are not used to track you.

Who we share data with

We share data only with service providers who help us run the business: Stripe (payments), MailerLite (email), Netlify (website hosting), Google (analytics and advertising, with your consent), and our couriers and fulfilment partners (to deliver your order). They process data on our instructions or under their own legal duties. Some are based outside the UK; where that happens, transfers are protected by an approved safeguard such as the UK International Data Transfer Addendum or an adequacy decision.

How long we keep it

Order and accounting records: 6 years. Marketing emails: until you unsubscribe. Customer service messages: up to 2 years. Analytics data: according to Google’s retention settings (we use the shortest practical period).

Your rights

You can ask us to access, correct, delete or restrict your data, object to how we use it, or ask for a copy to move elsewhere. You can withdraw consent at any time. Email hello@daylightdaily.com and we’ll respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

Changes

We may update this policy. The date at the top shows when it last changed.