Privacy Policy
Last updated: 29 May 2026
1. Who we are
WaxMark ("we", "us", "our") provides custom sticker labels for vinyl records via waxmark.co.uk. We are the data controller responsible for your personal data.
Contact address: 5 Stornoway Road, Castle Vale, Birmingham, West Midlands B35 6PA, United Kingdom
Email: hello@waxmark.co.uk — we aim to respond within 1-5 working days
ICO registration number: ZC209096 (application submitted 29.07.2026 — registration in progress)
This policy explains what personal data we collect, why, how we use it, who we share it with, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
2. The data we collect
Information you give us
| Data | When | Why |
|---|---|---|
| Email and username | When you create an account | To identify your account and contact you |
| Password | When you create an account | Stored securely as a hash by our authentication provider — we never see or store it in plain text |
| Label designs | When you design and save a label | To save your work and fulfil your orders |
| Delivery name and address | At checkout | To post your order |
| Order details | When you order | To process and fulfil the order, and for your order history |
Information collected automatically
- Guest designs are saved temporarily in your browser's local storage so you don't lose your work. They are transferred to your account if you sign up, and otherwise remain only on your device.
- Essential cookies are used to keep you signed in and to operate the Site securely (see Section 8).
What we do not collect
- Card details. Payments are handled entirely by Stripe. Your full card number never reaches our servers.
- Audio. Our BPM and key auto-detection runs entirely in your browser. No audio is recorded, uploaded or sent to us or any third party — all processing happens on your own device.
3. Community contributions
When you add a record, a BPM or key value, or a preview link to our community database, that information is stored and made available to other users to help them identify the same record. Community contributions are held as aggregate data only — for example, how many users have confirmed a value. We do not publish them against your name or identity, and there is no public record of which user submitted or confirmed a particular value.
4. Why we use your data and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Processing and fulfilling your orders | Performance of a contract |
| Sending order confirmations and dispatch updates | Performance of a contract |
| Responding to your enquiries | Legitimate interests (helping customers) |
| Keeping records for tax and accounting | Legal obligation |
| Protecting the Site against fraud and abuse | Legitimate interests (security) |
| Sending marketing emails (if any) | Consent — you can opt out at any time |
We will only send you marketing communications if you have opted in, and you can unsubscribe at any time using the link in the email or by contacting us.
5. Who we share your data with
We use trusted third-party service providers ("processors") to run WaxMark. They process data only on our instructions:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database and account authentication | Account details, designs, order records |
| Vercel | Website hosting | Technical/site data |
| Stripe | Payment processing | Payment details, name, billing/shipping address |
| Resend | Order and account emails | Email address, order details |
| Royal Mail (Click & Drop) | Postage and delivery | Delivery name and address |
Some of these providers may process data outside the UK. Where they do, appropriate safeguards (such as UK-approved transfer mechanisms) are in place.
We may also disclose data where required by law, or to protect our rights, property or safety. We do not sell your personal data.
6. How long we keep your data
We keep your data only as long as needed for the purposes above:
- Account and design data — for as long as your account is active, then deleted on request or after a period of inactivity.
- Order records — retained for 6 years to meet tax and accounting obligations.
- Guest designs in local storage — held on your device until you clear them or sign up.
When you close your account, associated designs, basket items and order line data are deleted (subject to records we must keep by law).
7. Your rights
Under UK data protection law you have the right to access the personal data we hold about you; correct inaccurate or incomplete data; erase your data ("right to be forgotten"), subject to legal retention requirements; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time where we rely on it.
To exercise any of these, email hello@waxmark.co.uk. We aim to respond within 1-5 working days, and will always respond within one month as required by law. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we handle your data, though we'd appreciate the chance to put things right first.
8. Cookies
We use only essential cookies needed to keep you signed in and to operate the Site securely. These do not require consent under UK law. If in future we add analytics or other non-essential cookies, we will ask for your consent first and update this policy.
9. Data security
We take reasonable technical and organisational measures to protect your data, including secure hosting, encrypted connections (HTTPS), hashed passwords, and access controls. No system is completely secure, but we work to protect your information and to respond promptly to any issue.
10. Children
The Service is not intended for children under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Third-party links
The Site may link to external sites (for example YouTube or SoundCloud track previews). These previews are hosted on those third-party platforms, not by us — we only store the link, and clicking it takes you to their site. We are not responsible for the privacy practices of those sites, so please review their own policies. Community-submitted preview links can be removed at any time using the "Report copyright" control shown alongside each link, which takes the link down immediately.
12. Discogs
This application uses Discogs data but is not affiliated with, sponsored or endorsed by Discogs. Discogs catalogue data does not include any of your personal information.
13. Changes to this policy
We may update this policy from time to time. The current version is always published on the Site, with the "last updated" date shown above. Significant changes will be notified where reasonable.
14. Contact
For any privacy questions or requests:
WaxMark5 Stornoway Road, Castle Vale
Birmingham, West Midlands B35 6PA
United Kingdom
Email: hello@waxmark.co.uk — we aim to respond within 1-5 working days
WaxMark Privacy Policy — 29 May 2026.