Privacy policy
Privacy Policy
Last updated: 17.8.26
Doa ("we", "us", "our") is a sole trader business run by Katrina Robertson-Macleod, trading as Doa. This policy explains what personal data we collect, why, and how it's handled, in line with UK GDPR and the Data Protection Act 2018.
Data controller: Macleod, trading as Doa, 12 Southgate Grove, London, N1 5BP, United Kingdom Contact: katie@studiodoa.com
What we collect
When you browse our site, place an order, or sign up to our mailing list, we may collect:
- Contact details — name, email, postal address, phone number
- Order information — items purchased, order value, payment confirmation (we do not store your full card details — these are handled securely by our payment processor)
- Account information — if you create an account with us
- Communications — emails or messages you send us, including for custom commissions
- Technical data — IP address, browser type, and browsing behaviour on our site, via cookies
How we use it
We use your data to:
- Process and fulfil your orders, including shipping and customer service
- Communicate with you about your order, repairs, or exchanges
- Send you marketing emails, if you've opted in — you can unsubscribe at any time
- Improve our website and product range
- Meet our legal and accounting obligations
Legal basis for processing
We rely on:
- Contract — to process and deliver your order
- Consent — for marketing emails, which you can withdraw at any time
- Legal obligation — for tax and accounting records
- Legitimate interests — to run and improve our business, prevent fraud, and respond to enquiries
Who we share it with
We use trusted third-party services to run our business, including:
- Shopify — our e-commerce platform, which processes and stores order and customer data on our behalf
- Payment processors integrated with Shopify (e.g. Shopify Payments, PayPal) — to process payments securely
- Our email marketing provider — to send newsletters and marketing emails to those who've opted in
- Delivery couriers — to ship your order
We do not sell your personal data to third parties.
International transfers
Some of our service providers (such as Shopify) may store or process data outside the UK. Where this happens, we rely on their compliance with UK GDPR safeguards, such as standard contractual clauses.
How long we keep it
We keep order data for as long as needed to meet our legal and tax obligations (typically 6 years), and marketing data until you unsubscribe or ask us to delete it.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict how we use your data
- Withdraw consent to marketing at any time
- Data portability, where applicable
To exercise any of these rights, email katie@studiodoa.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we handle your data.
Cookies
Our site uses cookies (via Shopify) to remember your cart, preferences, and to understand how visitors use our site. You can control cookies through your browser settings.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page.
Contact us
Questions about this policy or your data? Email katie@studiodoa.com.
