Working draft — complete before publishing: confirm hosting, payment provider, email and backup services, retention periods, analytics, cookies and any overseas data processing.
Who is responsible for your information
Andrew Rosenthal trading as Cry Laughing is responsible for the personal information described in this policy.
Our address is 31 Langdale Way, East Boldon, Tyne & Wear, NE36 0UG, United Kingdom.
Email: support@crylaughing.co.uk.
Information we collect
When you place an order, create an account or contact us, we collect information such as your name, email address, billing and delivery addresses, telephone number where supplied, order details, personalisation and correspondence.
If you create an account, we also keep your account details and order history. Creating an account is optional; you can use guest checkout.
Personalisation may contain information about someone receiving a gift. Please provide only the information needed to produce it. We receive these details from the person placing the order and use them to make and supply the gift.
Our website and payment providers also process technical information, such as IP addresses, browser and device information, to operate the shop, process payments and help prevent fraud.
Why we use your information
We use your information for the following purposes and legal reasons:
- Orders and customer accounts: to take steps you request before a purchase and fulfil our contract with you, including making your gift, taking payment, delivering your order and managing returns.
- Legal obligations: to keep necessary accounting and tax records and respond to lawful requests.
- Legitimate interests: to answer general enquiries, maintain website security, prevent fraud and handle complaints or legal claims, while considering your rights and interests.
For gift-recipient information supplied by another person, our legitimate interest is producing and delivering the gift they ordered.
We need the required checkout details to fulfil your order. Without them, we may be unable to accept or deliver it.
Who receives your information
We share information where necessary with:
- IONOS, which provides website hosting, business email and hosting backups.
- WooPayments and its payment partner Stripe, which process payments, refunds and payment disputes and help detect fraud.
- Royal Mail, which receives the details needed to deliver your order.
- Public authorities or professional advisers where required by law or necessary to deal with legal or accounting matters.
Our website uses FluentSMTP to send emails through our IONOS mailbox and maintain delivery logs.
Full payment-card numbers and security codes are handled by the payment provider rather than stored in our shop’s database. Our order records may contain limited payment information, such as the card’s last four digits and transaction references.
Payment providers also process some information for their own legal and fraud-prevention purposes. Further details are available in the Automattic Privacy Notice and Stripe Privacy Policy.
We do not sell your personal information.
Processing outside the United Kingdom
Some service providers, including our payment providers, operate internationally and may process information outside the UK, including in the United States.
Where required, international transfers must be covered by an appropriate safeguard, such as UK adequacy arrangements or approved contractual safeguards. Stripe explains its safeguards and how to obtain further information in its Privacy Policy. You can also contact us with questions about the safeguards applicable to your information.
How long we keep information
We keep information only for as long as needed for the purposes described above:
- Unpaid pending and failed orders: scheduled for removal after 90 days.
- Inactive customer accounts: scheduled for deletion after two years without a login or order. Necessary order records may remain separately.
- General enquiries: normally deleted within 12 months after resolution, unless they become part of an order, complaint or legal matter.
- Records needed for tax: retained for at least five years after the relevant tax return’s 31 January submission deadline, and reviewed annually for deletion when no longer required.
- Website email delivery logs: automatically deleted after 14 days.
We may keep relevant information longer where needed for an unresolved complaint, dispute, legal claim or legal obligation. We do not need to retain every personalisation detail or piece of correspondence simply because a financial record must be kept.
IONOS creates daily hosting backups and states that these are kept for at least 14 days. Information removed from the live website may remain in recovery copies until those copies are replaced or expire.
We use IONOS SiteAnalytics to understand website usage and improve its technical performance. It collects information such as pages requested, referring websites, browser and device type, operating system and access times.
IONOS states that SiteAnalytics does not use cookies and anonymises visitors’ IP addresses directly after transmission. The resulting statistics do not identify individual visitors.
Where personal information is processed to produce these statistics, we rely on our legitimate interest in understanding and improving our website.
Cookies and website functions
We use cookies to operate your basket, maintain login sessions, remember account settings and support secure payments and fraud prevention.
The cookies used depend on whether you browse, sign in, add products to your basket or use payment services.
Cookie Purpose Typical lifetime
woocommerce_items_in_cart and woocommerce_cart_hash Keep the basket working and identify changes to its contents. Browser session
wp_woocommerce_session_… Connect your browser with your basket information stored by the shop. 2 days
wordpress_logged_in_… and wordpress_sec_… Maintain and secure your login. Browser session, or up to 14 days when “Remember me” is selected
wordpress_test_cookie Check whether your browser accepts cookies for login. Browser session
wp-settings-… and wp-settings-time-… Remember interface preferences for logged-in users, principally website administrators. 1 year
__stripe_mid Help Stripe assess payment fraud risk. 1 year
__stripe_sid Help Stripe assess payment fraud risk during a visit. 30 minutes
Some cookie names contain a unique suffix. Cookies may be renewed when you use the relevant function.
WooCommerce order-attribution tracking is disabled. IONOS SiteAnalytics does not use cookies, as explained above.
You can delete or block cookies through your browser settings. Blocking cookies needed for shopping, login or payment may prevent those functions from working.
Further information about payment cookies is available in Stripe’s cookie information.
Emails from us
We send emails needed to manage orders, accounts and customer enquiries. We do not currently operate a newsletter or marketing-email subscription service.
Your rights
Depending on the circumstances, you can request access to your personal information, correction, deletion, restriction of its use or a portable copy. You may also object to processing based on legitimate interests.
Where processing relies on consent, you can withdraw that consent without affecting processing already carried out.
These rights are subject to legal conditions. For example, we may need to retain certain records for tax purposes even after an account is deleted.
Contact support@crylaughing.co.uk to exercise your rights. We may need to confirm your identity. We normally respond within one month, subject to any extensions permitted by law.
You can also complain to the Information Commissioner’s Office through its complaints service.
Changes to this policy
We will update this policy when our services or information-handling practices change.
Last updated: 19 October 2026.