Privacy Policy

We collect information you provide directly and information generated automatically when you use our services:

• Account information — name, email address, password (hashed, never stored in plain text), and phone number.
• Order & design data — wall dimensions, template choices, customisation preferences, and order history.
• Delivery information — shipping address, recipient name, and delivery instructions.
• Communications — messages you send to our support team, feedback, and survey responses.
• Usage data — pages visited, features used, device type, browser, and IP address collected via server logs and cookies.

• Process and fulfil your order, including coordinating production and shipping.
• Send transactional emails — order confirmations, shipping updates, and invoice receipts.
• Provide customer support and respond to your questions.
• Personalise your design experience and save your customisations between sessions.
• Detect and prevent abuse, fraud, and security incidents.
• Improve our platform through anonymised, aggregated analysis.
• Send promotional communications only with your explicit consent, which you may withdraw at any time.

We use the following categories of cookies:

• Production partners — your design files and dimensions are shared only as needed to manufacture your order.
• Shipping carriers (UPS, FedEx, and Royal Mail) — the delivery details needed to deliver your package.
• Payment processor (Stripe) — card details are processed externally by Stripe. We never see your full card number.
• Cloud infrastructure providers — encrypted data is hosted on secure servers used to operate the service.
• Legal obligations — information may be disclosed only when required by law or to protect our rights and customers.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

• Account data is kept for the lifetime of your account, plus a limited period after deletion.
• Order records and invoices are retained for tax and compliance requirements.
• Design files are stored for 12 months after your last order to make re-ordering easier.
• Analytics data is anonymised after 90 days.

Under GDPR and applicable data protection laws, you have the right to:

• Access — request a copy of all personal data we hold about you.
• Rectification — request inaccurate or incomplete data to be corrected.
• Erasure — request deletion of your account and associated data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — opt out of direct marketing communications at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@sukkahwall.com. We respond within 30 days.

• All data in transit is encrypted using TLS 1.3.
• Passwords are hashed using bcrypt with a work factor of 12.
• Firewalls and access controls are regularly audited.
• Access to production data is restricted to authorised personnel with a valid business need.

Our services are not directed to children under 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us immediately.

Material changes will be communicated by email and a prominent notice on our site at least 14 days before taking effect. Continued use of our services after the updated policy is published means you accept the changes.