Information we collect
When you send a custom-work request, we collect the name and email address you provide, your request details, and any optional reference photo you upload.
When you place an online order, we collect your name, email address, shipping address, and the items and total you ordered. Staff may also record customer details for an in-person sale when needed for a receipt or follow-up.
Staff may add quote details, private notes, and an order record if you accept a custom quote.
How we use it
We use this information to review and respond to requests, prepare quotes, manage orders and sales, ship your order, contact you about it, and protect and operate the website.
Payments
Online payments are processed by Stripe, a payment provider. When you pay, you enter your card details on Stripe's own payment page. GrannyCoded never receives, sees, or stores your full card number or the security code on the card.
We receive confirmation that a payment succeeded, the amount, and a reference we use to match that payment to your order. Refunds are sent back to your card through Stripe. Stripe's own privacy policy explains how it handles payment information.
Reference photos and private records
Customer reference photos are stored privately and are available only to authorized GrannyCoded staff. They are not published as product or editorial images. If an inquiry is deleted, its reference images are marked for deletion with a 30-day recovery period before storage cleanup.
Inquiry and order records do not currently expire automatically. Staff retain them for as long as they are useful for reviewing requests, managing work, customer service, and necessary business records. You may contact us to request deletion; we may need to keep some information for an active order or another record-keeping obligation.
Service providers and email
We use service providers to host the website and database, store uploaded files, process payments, and deliver email. They process information as needed to provide those services. Order confirmations and new-order notifications pass through our email provider. We do not sell personal information or use it for targeted advertising.
Cookies and site operation
The site uses necessary session and security cookies to support features such as the shopping basket and form protection.
We also use Google Analytics, loaded through Google Tag Manager, to see which pages and products people visit and which do not get looked at. That information is aggregated for us; it is not used for advertising, and we do not sell it. Analytics scripts are not loaded on the basket, checkout, or staff pages.
Analytics records the pages you view, the site or search that referred you, your approximate location, and your device and browser type. If you type an email address or phone number into a form on the site, Google may receive a hashed copy so a visit can be tied to a request; we do not use it to contact you or for advertising.
You can block analytics with a browser setting or an extension such as an ad blocker; the shop will keep working.
Your choices and questions
You may contact us to ask about, correct, or request deletion of information you submitted. Rights and exceptions depend on applicable law; we may keep information needed to fulfill an order or meet record-keeping obligations.
Last updated November 12, 2026.