Privacy Policy

Last updated: 14 May 2026

Loaded Sponges is a small family-run business in East Ardsley, West Yorkshire. This policy explains what personal information we collect from you, why we collect it, how we keep it safe, and what your rights are. We're committed to keeping things simple and only ever using your information to send you the sponges you ordered (and to answer your questions if you get in touch).

Who we are

The "data controller" is Loaded Sponges, East Ardsley, Wakefield. You can reach us at hello@loadedsponges.co.uk for any privacy-related questions.

What data we collect

When you place an order, we collect:

• Your full name
• Email address
• Delivery address (and billing address if different)
• Phone number (optional, for delivery updates)
• Order details (which sponges, quantities, any notes you add)

When you contact us by email or via the contact form, we collect your name, email address and the contents of your message.

We do not see or store your card details. All payments are processed securely by Stripe.

Why we collect it

• To fulfil your order (name + address to deliver the sponges, email for the receipt and updates).
• To respond to you if you contact us with a question.
• To meet our legal obligations (we keep order records for tax purposes, as required by HMRC).

Lawful basis (UK GDPR)

• Order fulfilment - contract (we need your details to send your order).
• Order records for HMRC - legal obligation.
• Marketing emails (only if you've opted in) - consent, which you can withdraw at any time.

Who we share your data with

We don't sell your data, ever. We share the minimum needed with the trusted services below so we can run the shop:

• Stripe - processes your card payment. Stripe sees your name, email, address and card data. Stripe Privacy Policy
• Royal Mail - to deliver your parcel.
• Cloudflare - hosts the checkout function that talks to Stripe. Cloudflare Privacy Policy
• Zapier - relays order notifications to our inbox. Zapier Privacy Policy
• WordPress / our hosting provider - hosts loadedsponges.co.uk.

How long we keep your data

• Order records: 7 years (HMRC requirement).
• Email enquiries: up to 2 years after our last contact, then deleted.
• Marketing list (if you opted in): until you unsubscribe.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct anything that's wrong.
• Ask us to delete your data (where we don't have a legal obligation to keep it).
• Object to or restrict how we use your data.
• Receive a copy of your data in a portable format.
• Complain to the Information Commissioner's Office (ICO).

To exercise any of these, email hello@loadedsponges.co.uk and we'll respond within one month.

Cookies

See our Cookie Policy for full details on the cookies we use.

How we keep your data safe

All payment data is handled by Stripe (PCI DSS certified). Our checkout is served over HTTPS. We use unique, securely stored passwords on every account that touches your data, and we limit access to the family members running the business.

Changes to this policy

If we change this policy we'll update the date at the top. For significant changes we'll let you know by email if you have an active order with us.