Privacy Policy
Last updated: 28 July 2026
This website is run on behalf of Grace Petrie. We take your privacy seriously and collect as little personal information as we can get away with. This policy explains what we collect, why, and what rights you have over it under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
This site is operated on behalf of Grace Petrie. For questions about this website or your data, contact [email protected]. For questions about store orders, contact [email protected].
What we collect and why
Accounts and the community
If you create an account, we store the details you give us: your username, email address, and anything you choose to add to your profile (name, pronouns, bio, website, profile picture). We use these to run your account, and your public profile details appear next to your comments and forum posts. You can edit or remove them at any time from your profile page.
Comments and forum posts
When you post a comment or write in the forum, we store what you wrote along with your account details and the IP address the post came from (which helps us deal with spam and abuse).
Store orders
When you buy something, we collect what’s needed to fulfil your order: your name, billing and shipping addresses, email address, phone number if you give one, and details of what you bought. Payment details are handled by our payment providers – we never see or store your full card number. We keep order records for as long as required for tax and accounting purposes (normally six years).
Newsletter
If you sign up to the mailing list, we store your email address and use it to send you news about Grace. Every email includes an unsubscribe link, and unsubscribing takes effect immediately.
Cookies
The site uses a small number of cookies that are necessary for it to function: keeping you logged in, remembering what’s in your basket, and remembering cookie choices. We don’t run advertising or cross-site tracking cookies.
Embedded content
Some pages embed content from other services – for example tour dates from Bandsintown, or videos from YouTube. When you view a page with embedded content, that service may collect data about your visit as if you had visited their site directly. Their own privacy policies apply to that data.
Who we share it with
We don’t sell your data to anyone, ever. We share it only with the services needed to run the site: our hosting provider, payment processors (for purchases), delivery services (to post your order), and our email provider (for the newsletter). Where these providers process data outside the UK, they do so under appropriate safeguards.
How long we keep it
Account and community content stays until you delete it or ask us to. Order records are kept for six years for tax purposes. Newsletter subscriptions last until you unsubscribe.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted (the “right to be forgotten”);
- object to or restrict how we use your data;
- receive your data in a portable format.
To exercise any of these, email [email protected]. If you’re not happy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
If we change this policy we’ll update this page and the date at the top. Significant changes will be flagged on the site.