Skip to content

My Privacy Policy

Long, confusing privacy policies SUCK.
Which is why I’ve tried to make this one as easy to understand as possible! :))

If you have ANY questions, though, please contact me, and I’ll do my best to help!

Who are you?

Catgirl Labs is a trading name of Layla Stokes (hello!), based in Cardiff, Wales.
I’m just a person like you, and I’m absolutely not evil! (well, as far as I know!)

What data does this site use?

This site is built to collect as little data as possible, as I’m a big advocate for privacy!

However, I do need some to make the site work!
This includes IP addresses, plus your name, address, email, and payment method used when you place an order.
Don’t worry though, I can’t see your payment info, and all data is kept safely encrypted, using military-grade AES-256 encryption, on an offline database wherever possible.

(basically, your orders only stay on this server for 24h, after which they’re encrypted and sent to my local order processing server, where they’re deleted 30 days after your order is completed!)

I also only use this data to process your order, and to contact you about it, nothing more!
No evil business here!

Cookies

This website places small files on your device, known as Cookies.
These help this website to work properly for you!

I try to use as few as possible, and respect your privacy by using no advertising or tracking cookies!
The few I use include cookies to save the contents of your basket, and for the security of the Stripe payment gateway.

These cookies contain no personal info, but simply a unique ID so this site can remember who you are.
They also expire after 10 days, and you can easily opt-out using the Cookie Consent banner.

Content from other websites

This site does use some content from other websites.

This includes Stripe, who process your payments!
They may place their own cookies on your device, and their privacy policy can be found at this page.

Who do I share your data with?

I only ever share data with Stripe, my payment processor, and the only data shared is your order details, for legally-required bookkeeping purposes.

How long do I retain your data?

Your data is held for only as long as we legally need, and is only used for processing your order.
This period is six months, as mandated by the UK/EU General Data Protection Regulations 2018.

What rights you have over your data

You may request a full copy of any data I store about you, at any time, as stated in the GDPR Article 15.
You can also request that I delete your data, by contacting me here.