Privacy
[Registered name to be confirmed], trading as Exoplate, decides how your information is used on this site. This page says what we hold, why, and how to get rid of it. Questions go to support@exoplate.com.
What we hold
- When you order
- Your name, email address, delivery address, what you bought and what you paid. We never see or store your card number — Stripe takes the payment and tells us only the type of card and its last four digits.
- If you make an account
- Your email address and name, so you can sign in and see your orders. Passwords are held by Kinde, not by us.
- If you sell with us
- Your artist profile, the work you send in, and what we pay you.
- When you write to us
- Your message and address, so we can answer and keep track of what was said.
Why we hold it
- To make, pack and send what you bought, and to answer you about it — that is our contract with you.
- To keep records of sales, which tax law requires us to keep for six years.
- To keep the shop working and safe from fraud and abuse, which is our legitimate interest.
We do not sell your information, and we do not send marketing email unless you ask us to. Order emails are part of the service, not marketing, so they are not something to unsubscribe from.
Who else sees it
The companies that run parts of the shop for us, and only for that:
- Stripe — payments and refunds.
- Amazon Web Services — where the shop's data and images live, and what sends our emails. Stored in London (eu-west-2).
- Vercel — serves the website.
- Kinde — sign-in, if you make an account.
- The carrier delivering your parcel — your name and address, so it can reach you.
Some of these are outside the UK. Where they are, the transfer relies on the UK's approved safeguards, such as the International Data Transfer Addendum.
How long we keep it
Order records for six years, because tax law says so. An account's details until you ask us to close it. Emails you send us for up to two years.
Cookies
Only what the shop needs to work: a sign-in cookie if you have an account, and your basket, which is kept in your own browser and never reaches us until you check out. There is no advertising or analytics tracking.
Your browser also keeps the prints you have saved, and the last few you looked at so we can show them to you again. Both stay on your device and are never sent to us. Clearing your browser's site data removes them.
One more, and only if you agree to it: if you arrive through an artist's own link, we ask whether we may remember that for 30 days. Say yes and a cookie records which artist sent you, so that if you buy their work they earn a larger share of the sale. It never changes your price, and it is deleted after 30 days. Say no and we store only that you said no, so we don't ask again.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Write to support@exoplate.com and we'll answer within a month. Some records we must keep — a past order, for tax — and we'll say so if that applies.
If you think we've got something wrong, write to support@exoplate.com and we'll look into it and put it right. You are also entitled to raise it with the Information Commissioner's Office, the UK's data protection regulator, but we'd much rather hear from you first — we can usually fix it the same week.
Last updated 18 October 2026.