Privacy Policy

Who we are

Cespedes Media Enterprises (“we”, “us”) operates cespedes.co.uk. We are the data controller for the personal information described below. You can reach us at contact@cespedes.co.uk or via our contact page.

What we collect, and why

• Orders. When you buy merchandise or a music download, our payment processor (Stripe) collects your name, email address, and — for physical items — a shipping address, to process payment and fulfil the order. We store the order details and the shipping address you provide; we never see or store your card details, which go directly to Stripe.
• Merchandise fulfilment. For physical items, we share your name, shipping address, and order contents with our print-on-demand partner, Printify, solely so they can print and ship your order.
• Digital downloads. If you buy a music download, we email you a secure, time-limited download link. That email address is used only to deliver your purchase and any related order updates (for example, shipping tracking for a mixed order).
• Contact form. If you contact us, we store the name, email, and message you submit so we can respond.
• Cart and theme preference. Your shopping cart and light/dark theme choice are stored locally in your browser (in localStorage) — not on our servers, and not shared with anyone.

Cookies and tracking

We do not use advertising or analytics cookies, and we do not track you across other websites. The only cookies set on this site are functional ones needed to keep you signed in to the admin area, which does not apply to ordinary visitors.

Legal basis for processing

We process order and shipping information under UK GDPR Article 6(1)(b) — it is necessary to perform the contract when you buy something. We process contact form submissions under our legitimate interest in responding to enquiries (Article 6(1)(f)).

Who we share data with

Stripe (payment processing), Printify (order fulfilment for physical merchandise), and Resend (transactional email delivery) each process personal data on our behalf strictly to provide the order or communication you requested. We do not sell your data, and we do not share it for marketing purposes.

How long we keep data

We keep order records for as long as needed for accounting, tax, and consumer protection purposes. Digital download links expire automatically a short time after purchase (currently 7 days) and stop working after a limited number of uses, but the underlying order record is retained.

Your rights

Under UK GDPR you have the right to access, correct, or request deletion of your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at the address above. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.