Privacy and cookies

Who we are. Oak & Almanac is the data controller for the personal data described here. Contact us about privacy at [email protected].

What we collect, and why

• Your order details: what you tell us so we can make the item. Depending on the gift, this can be a place or address, a date of birth or wedding date, a birthplace, the places in a life, a car's details and registration, the address and setting for a Murder at Your House game, a First World War ancestor's name and service details, any family documents or photos you email us, names, a dedication, notes and a gift message. Lawful basis: contract (we need it to make what you ordered).
• Contact and delivery details: your name, email address, phone number and delivery address, collected by Stripe at checkout. We use them to send proofs, PDFs and order updates, and to post physical items. Lawful basis: contract.
• Payment: handled by Stripe. We never see or store your full card number.
• Messages you send us: kept so we can answer and look after your order. Lawful basis: contract, or our legitimate interest in answering questions.
• Order and tax records: kept because the law requires it. Lawful basis: legal obligation.
• Basic technical data: our website host processes IP addresses and similar data to deliver pages and protect the site from abuse. Lawful basis: legitimate interests (running a secure website).

We do not sell your data, and we do not send marketing emails.

Information about other people

Many gifts are about someone else, such as the recipient or a family member. Please give us only what is needed for the gift, and only information you are comfortable sharing on their behalf. We research the history of places, dates and historical records using published and archival sources. We do not research, profile or publish information about living private individuals beyond what you give us.

Who processes data for us

• Stripe (payments and checkout). Stripe is also an independent controller for some payment data; see stripe.com/gb/privacy.
• Our print and delivery partners (for physical items): they receive the print file, the delivery name and address, and a phone number if a courier needs one.
• Cloudflare (website hosting, security and email forwarding).
• Our email provider (sending order confirmations, proofs and PDFs).

Some of these providers may process data outside the UK, for example in the USA or the EU. Where they do, they rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK-US data bridge.

How long we keep it

Order records are kept for 6 years for tax purposes. Book and print files are kept for 12 months so that you can order reprints, unless you ask us to delete them sooner. Emails about an order are kept for up to 2 years after delivery.

Your rights

You can ask for a copy of your data, and ask us to correct it, delete it or restrict how we use it. You can also object to processing based on legitimate interests. Email [email protected]. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Cookies and local storage

This site uses no analytics, tracking or advertising cookies. That is why there is no cookie banner. Your basket is saved in your own browser's local storage. This is strictly necessary for the basket to work, and it is not sent to us until you check out. Our host, Cloudflare, may set a strictly necessary security cookie to block automated abuse. When you pay, you are taken to Stripe's checkout page, which sets its own cookies for payment and fraud prevention; see Stripe's cookie policy.

Last updated: 25 October 2026.