Last updated: 19 July 2026
This policy explains what personal information Card Slap (“we”, “us”, “our”) collects when you visit cardslap.co.uk or order a personalised musical card, how we use it, and the rights you have over it. We are the “data controller” for this information under UK data protection law (UK GDPR and the Data Protection Act 2018).
Who we are
Card Slap is a small business based in Belfast, United Kingdom, selling personalised musical greetings cards. If you have any question about this policy or your data, contact us at info@cardslap.co.uk.
The information we collect
- Order details — your name, email address, billing and delivery address, and the items you order.
- Card personalisation details — the recipient’s name, the occasion, and the facts you give us so we can write their song. Please only share details you’re happy for us to use to create the card.
- Payment information — handled entirely by our payment providers (see below). We never see or store your full card number.
- Birthday & anniversary reminders — if you choose to use our reminder service, the dates and email address you give us, so we can remind you before each occasion.
- Messages you send us — anything you include when you contact us by email or through the site.
- Technical & usage data — basic information your browser sends (such as IP address) and cookies, used to keep the site secure and working (see “Cookies” below).
How and why we use it
- To make and deliver your order and send you order confirmations and updates — this is necessary to perform our contract with you.
- To send birthday/anniversary reminders — only if you opt in, and only until you unsubscribe. Every reminder email has an unsubscribe link.
- To answer your questions and provide customer support.
- To meet our legal obligations — for example keeping records of sales for tax purposes.
- To keep the site secure and prevent fraud and abuse — our legitimate interest in running a safe shop.
We do not sell your personal information, and we don’t use your order details for advertising.
Who we share it with
We only share your information with the trusted providers that help us run the shop:
- Payment providers — Stripe and PayPal, who process your payment securely. They handle your card details under their own privacy policies.
- Hosting & email — IONOS, who host the website and deliver our emails.
- Delivery partners — the postal/courier service that delivers your card, using your name and delivery address only.
- Authorities — where we are legally required to (for example HMRC).
Some of these providers (such as Stripe and PayPal) may process data outside the UK. Where they do, they are required to protect it to UK-equivalent standards.
How long we keep it
- Orders — kept for as long as needed to fulfil the order and then for up to 6 years to meet UK tax and accounting rules.
- Reminder subscriptions — kept until you unsubscribe, after which they are removed.
- Support emails — kept only as long as needed to deal with your query.
Cookies
Cookies are small files stored on your device. We use two kinds:
- Essential cookies (always on) — these make the basket and checkout work and remember your cookie choice. The site can’t function without them, so they don’t need consent.
- Analytics cookies (only with your consent) — if we use them, they help us understand how people find and use the site. They stay switched off unless you choose “Accept all” on our cookie banner.
When you first visit, our banner lets you “Accept all” or choose “Essential only”. You can change your choice at any time by clearing the cs_consent cookie in your browser, which brings the banner back.
Your rights
Under UK data protection law you have the right to ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; or provide it in a portable format. Where we rely on your consent (such as reminder emails), you can withdraw it at any time. To exercise any of these, email info@cardslap.co.uk and we’ll respond within one month.
If you’re unhappy with how we’ve handled your data, you can complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113 — though we’d appreciate the chance to put things right first.
Changes to this policy
We may update this policy from time to time. When we do, we’ll change the “last updated” date at the top of this page.