Privacy policy

schoolelf.co.uk is run by Jason Nicklin, trading as christmastrees.co.uk, of 3 Kinloch Court, Station Road, Harpenden AL5 4UE. We are the data controller. Email elf@schoolelf.co.uk.

We comply with UK data protection law, including UK GDPR and the Data Protection Act 2018.

What we collect

• Your name and email address, when you order.
• Your mobile number, so we can reach you on collection day.
• Your child's name, if you give it. It labels your tree for collection. Nothing more.
• Your address, only if you choose home delivery.
• Payment details. Stripe collects these. We never see your card number.

Why we use it

• To take payment and confirm your order.
• To label your tree and run collection day.
• To contact you about your order if something changes.

The legal basis is the contract we have with you when you order. We do not send marketing. We do not sell your data.

Who sees it

• Your school's PTA sees its own order list: names, mobile numbers, children's names and tree sizes. It needs the list to hand out trees.
• Stripe processes payments. Supabase hosts our database. Vercel hosts the site. Each acts under contract as our processor.

Nobody else. We share data with authorities only where the law requires it.

How long we keep it

Order records stay for six years to meet tax and accounting law. We delete children's names and mobile numbers after the season.

Your rights

You can ask for a copy of your data, ask us to correct it or ask us to delete it. Email elf@schoolelf.co.uk. If you are unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

We post any change to this policy on this page.