UNDERFOUND®
Privacy & Cookies
This page explains what personal data UNDERFOUND collects, why we hold it, who processes it on our behalf and what you can ask us to do with it. If anything here is unclear, email info@theunderfound.com.
Who we are
UNDERFOUND, 11 Oxford Road, Altrincham, Greater Manchester, WA14 2DY. Phone +44 (0)161 698 1650. Email info@theunderfound.com. We are the data controller for the information described below.
What we collect and why
Bookings. Your name, email, phone number, the service and team member you chose, the appointment time and your payment status. We need this to hold the appointment, send confirmations and reminders, and handle changes, cancellations and refunds.
Orders. Your name, email, delivery address, order contents and payment status. We need this to take payment, ship your order and deal with returns.
Accounts and Disciples membership. Your login email, profile details you choose to add, saved preferences, order and booking history, and loyalty points.
Marketing email. Your email address and your consent choices, so we can send occasional news about new arrivals, events and the Journal.
Enquiries and applications. Anything you send us through the contact, product enquiry, careers or partnerships forms.
Website usage. Anonymous or pseudonymous analytics data about how pages are used, so we can fix problems and improve the site.
Our lawful bases
Contract: bookings, orders, refunds and account management.
Consent: marketing email, birthday offers and non-essential cookies. You can withdraw consent at any time.
Legitimate interests: keeping the site secure and working, preventing fraud and abuse, and answering enquiries.
Legal obligation: keeping transaction records for tax and accounting.
Who processes data for us
Stripe takes card payments for bookings and orders. We never see or store your full card number.
Shopify holds our product catalogue and retail order records.
Resend delivers our transactional and marketing email.
Supabase hosts our database, accounts and server functions.
Google Analytics reports anonymised website usage.
YouTube and Instagram serve embedded video and imagery on some pages, and may set their own cookies when that content loads.
We do not sell your personal data. Some of these providers process data outside the UK, protected by the safeguards their own terms set out.
Cookies
Essential cookies and local storage keep you signed in, remember your basket and protect checkout. The site does not work without them.
Analytics cookies from Google Analytics tell us which pages are used and where people drop out. They do not identify you by name.
Third party cookies may be set by embedded video and social content when you load a page that contains it.
You can block or delete cookies in your browser settings. Blocking essential cookies will break sign in, the basket and checkout.
How long we keep it
Booking and order records are kept for six years to meet UK tax and accounting rules. Account data is kept while your account is open. Marketing contacts are kept until you unsubscribe, after which we keep your email on a suppression list so we do not contact you again by mistake. Enquiries and applications are kept for up to two years.
Your rights
Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email info@theunderfound.com and we will respond within one month. Every marketing email carries a one click unsubscribe link. If you are not happy with our response you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Accounts and marketing sign up are for over 16s. Younger clients are welcome in the studio when booked by a parent or guardian.
Changes to this page
If we change how we handle personal data we will update this page. Please check back occasionally.