Privacy

Last updated 1 October 2026

This policy explains what personal data Soul Archive (“we”, “us”) collects when you visit this site or place an order, why we use it, who we share it with, and the rights you have. We are based in the United Kingdom and are the controller of your personal data under the UK GDPR, the Data Protection Act 2018 and, for customers in the EU, the EU GDPR.

Contact

For any privacy question or request, email support@soulsociety.fit.

What we collect

• Order details: your name, email address, phone number, shipping and billing address, the items you bought and what you paid. You give us these at checkout.
• Payment details: handled entirely by Stripe. We never see or store your full card number. Stripe shares with us only limited information such as the card brand, the last four digits and whether the payment succeeded.
• Messages: anything you send us by email, for example about a return.
• Usage data: anonymous, aggregated page-view statistics from Vercel Web Analytics, which uses no cookies and does not identify you. Our hosting provider also keeps short-lived technical logs (such as IP address and browser type) to run and secure the site.
• Your cart: stored in your own browser’s local storage so it’s still there when you come back. It never leaves your device until you check out.

Why we use it, and our legal basis

• To make, ship and support your order, including delivery updates and returns. Basis: performing our contract with you.
• To keep records for accounting and tax. Basis: legal obligation.
• To prevent fraud and keep the site secure and working. Basis: our legitimate interests.
• To understand how the site is used, in aggregate, so we can improve it. Basis: our legitimate interests.

We do not send marketing emails, we do not sell your data, and we do not use it for advertising profiles.

Who we share it with

Only the service providers we need to run the store, each bound to protect it:

• Stripe: payment processing and fraud prevention.
• Printify and its print partners: to print your order, and to ship it to your address, including your name, address, email and phone number for delivery and tracking.
• Delivery carriers: your name, address and contact details, passed on by our print partners to deliver the parcel.
• Vercel: website hosting and anonymous analytics.

We may also disclose data where the law requires it, for example to tax authorities.

International transfers

Some of these providers process data outside the UK and EU, including in the United States. Where they do, the transfer is protected by approved safeguards such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or by an adequacy decision.

How long we keep it

We keep order and payment records for six years after the end of the financial year they relate to, as UK tax law requires. Emails about an order are kept for as long as needed to resolve it, and no longer than that six-year period. Analytics data is aggregated and contains no personal data.

Your rights

You have the right to:

• access the personal data we hold about you;
• have it corrected if it’s wrong;
• have it deleted, unless we must keep it by law;
• restrict or object to how we use it;
• receive it in a portable format.

Email support@soulsociety.fit to use any of these rights. We’ll reply within one month. If you’re unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority in the EU, but please contact us first so we can try to fix it.

Cookies

We use Google Analytics cookies, only if you accept them in the cookie bar, to understand how visitors use the site: which pages are viewed, what is added to the cart, and when an order is completed. Google Analytics is provided by Google, which processes this data on our behalf, with IP addresses shortened. We don’t use it for advertising. You can change your choice at any time with the “Cookies” link at the bottom of every page.

Our other analytics (Vercel Web Analytics) are cookie-free. We set no advertising cookies. When you go to checkout, Stripe’s payment page uses its own cookies for security and fraud prevention, covered by Stripe’s privacy policy.

Children

This store is not aimed at children under 16, and we don’t knowingly collect their data.

Changes

If we change this policy, we’ll update it on this page with a new date.