Last updated: 21 September 2026
Who controls your information
The data controller is CathyCat, based at Sunderland, United Kingdom. Contact cathycat3d@gmail.com with privacy questions or requests.
Information we collect
Depending on what you do, this may include your name, email, delivery and billing address, order details, personalisation instructions, project files, messages and technical information needed to keep the website secure.
Why we use it
- to answer enquiries and review custom project requests;
- to take payment, make and deliver orders, and handle returns;
- to keep business, tax and fraud-prevention records;
- to improve security and understand basic website performance where permitted.
We rely on different lawful bases, including performance of a contract, steps requested before a contract, legal obligations and legitimate interests. We will ask for consent where consent is required, such as for non-essential marketing.
Who receives it
We share only what is needed with service providers such as Stripe for payments, hosting and database providers, email providers and delivery or label providers. We do not sell customer data.
Retention and security
We keep information only as long as needed for the purpose collected, legal records and dispute handling. We use access controls and appropriate technical measures, but no online system can be guaranteed completely secure.
Your rights
Subject to legal limits, you can request access, correction, deletion, restriction, portability or object to certain processing. Use our data request page or contact us. You can also complain to the UK Information Commissioner’s Office.
Updates
We will update this notice when our processing changes. The date at the top of this page shows the current version.