Privacy policy
Last updated: 9 October 2026
This policy explains how Tidyfront ("we", "us") uses your personal data when you visit tidyfront sites, sign up for a free kit or buy a template pack. Tidyfront's pages include Graft Desk, Glow & Own It, Tills & Tables, Made & Posted and Setting Sorted.
Who we are
The data controller is the owner of Tidyfront. Contact: [email protected]. Postal address: available on request at [email protected].
What we collect and why
- Email sign-ups: your email address, your first name if you give it, which kit you asked for, and basic email engagement data (opens and clicks). We use this to send you the kit, the welcome emails and our weekly newsletter. Lawful basis: your consent. You can withdraw it at any time with the unsubscribe link in every email.
- Purchases: when you buy a pack through Payhip, Payhip processes your name, email, payment and location (for VAT). We receive your name, email and order details so we can deliver and support your purchase. Lawful basis: contract, and legal obligation for tax records.
- Messages you send us: to reply to you. Lawful basis: legitimate interests.
- Website logs: our host, Cloudflare, processes technical data such as your IP address to deliver and secure the site. Lawful basis: legitimate interests. If we turn on Cloudflare Web Analytics, it's cookieless and doesn't track you across sites.
Who processes data for us
- Our email platform (Kit or systeme.io), which stores subscribers and sends emails.
- Payhip, for sales and VAT.
- Cloudflare, for website hosting and security.
Some of these providers process data outside the UK (for example in the USA or the EU). Where they do, they rely on legal safeguards approved under UK law, such as the UK International Data Transfer Addendum, standard contractual clauses or the UK–US data bridge.
We never sell your data and we don't share it with advertisers.
Affiliate links
When you click a labelled affiliate link, the company you visit may set its own cookies to record that you came from us. That's covered by their privacy policy, not ours. See our affiliate disclosure.
How long we keep it
- Subscribers: until you unsubscribe, then removed or suppressed (kept only as a "do not email" record) within 30 days. We also remove people who haven't opened anything for 12 months.
- Purchase records: 6 years, for tax.
Your rights
You can ask to access, correct or delete your data, object to or restrict how we use it, or ask for a copy to take elsewhere. Email [email protected]. We'll reply within one month. If you're unhappy, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.
Cookies
This site doesn't use advertising or tracking cookies, and we don't use Google Analytics or Meta pixels. The sign-up form is supplied by our email platform and may set a cookie that's strictly necessary to submit the form and prevent spam. If we ever add non-essential cookies, we'll ask your permission first with a clear accept/reject choice.
Children
Our content is for businesses and adults. We don't knowingly collect data from anyone under 18. Setting Sorted is for the adults who run early years settings: please don't send us any personal information about the children or families in your care. Our templates are designed to be filled in and kept by you, not by us.
Changes
We'll update this page if anything changes and show the date at the top.