Privacy
What we collect, and what we do not
Last reviewed 7 August 2026.
Draft — not yet reviewed by a solicitor
This describes what the site genuinely does today, but it has not been reviewed by a solicitor. Have it checked before launch, particularly the lawful-basis and retention sections.
Who we are
Regal Knots Ltd, 112 Marylebone High Street, London W1U 4SD, registered in England & Wales. We are the data controller for personal data described here. For anything about your data, email enquiries@regalknots.co.uk.
What we collect
Only what you type into the commission form. That is the single place this website collects personal data:
- Your name and email address
- The dimensions, room, material and pattern you specify
- The brief you write
We do not ask for a postal address, telephone number or date of birth. We do not collect payment details on this website — no part of it takes payment.
What we do not do
- No advertising or analytics cookies. The site sets no tracking cookies and there is no cookie banner because there is nothing to consent to.
- No third-party trackers. No Google Analytics, no advertising pixels, no social embeds.
- No profiling and no automated decision-making.
- We never sell or rent your data, and we do not add you to a mailing list. Sending a brief subscribes you to nothing.
Your browser stores your light or dark theme preference on your own device. It never reaches us and is not personal data.
Why we are allowed to hold it
Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): you asked us a question and we need your details to answer it. Where a commission proceeds, the basis becomes performance of a contract (Article 6(1)(b)).
Where it is kept
Commission briefs are stored in a Postgres database hosted by Neon in London (eu-west-2). The website runs on Vercel, also in London. Your data is not routinely transferred outside the UK.
Neon and Vercel are processors acting on our instructions. Both may access data only as needed to run the service.
How long we keep it
- Enquiries that do not become orders — 24 months, then deleted. People often come back a year or two later, and it is useful to remember the conversation.
- Enquiries that become orders — 7 years, as required for tax and accounting.
Ask us to delete yours sooner and we will, unless tax law requires otherwise.
Your rights
Under UK GDPR you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our using it. You can also ask for it in a portable format.
Email enquiries@regalknots.co.uk. We will respond within one month, free of charge.
If you are unhappy with how we have handled it, you can complain to the Information Commissioner’s Office at ico.org.uk (opens in a new tab) or on 0303 123 1113. We would rather you told us first.
Changes
If we change what we collect, this page changes with it and the date at the top is updated. See also our terms and conditions.