Privacy Policy
Last updated: July 2026
Who we are
Polyplaces Ltd (“Polyplaces”, “we”, “us”) operates polyplaces.co.uk. We are committed to protecting your personal data and complying with the UK GDPR and Data Protection Act 2018.
Questions about this policy can be sent via our contact form.
What data we collect
When you place an order we collect:
- Name and delivery address
- Email address
- Payment details (processed securely by Stripe — we never see your card number)
- The map area and label you selected for your sculpture
How we use your data
- To fulfil and deliver your order
- To send you proof approval and order status emails
- To respond to enquiries
- To comply with legal obligations
We do not sell your data to third parties or use it for marketing. No "without your consent". No "for the benefit of a third party". Never. This is a hardline stance that we will not change at any time. We take great care to minimise the data that we collect and process. Simply put, the less data we see, the less there is to go wrong.
Data retention
Order data is retained for 7 years as required by UK law. You may request deletion of data not subject to a legal retention requirement at any time.
Your rights
Under UK GDPR you have the right to access, correct, or erase your personal data, object to processing, and lodge a complaint with the ICO. To exercise any of these rights, contact us.
Cookies and analytics
We use Google Analytics to understand how visitors use our site so we can improve it. Google Analytics sets cookies and processes usage data such as pages viewed, approximate location, and device type.
These analytics cookies are only set after you give consent by clicking “Accept” on our cookie banner. If you decline, no analytics cookies are set. Essential cookies required for the site to function (for example, remembering your cart and cookie choice) are always used. You can withdraw consent at any time by clearing your browser’s cookies for this site.
Third-party services
We use Stripe for payment processing, OpenStreetMap / Nominatim for map data, and Google Analytics for site analytics. Each service operates under its own privacy policy.