Information
Privacy Policy
We take the privacy of our clients and visitors seriously. This policy explains what personal information we collect, how we use it, and your rights in relation to it. If you have any questions, please contact us at studio@copaandglas.com.
01
Who We Are
Copa + Glas Studio is a maker of handcrafted glass mirrors and lighting, based in East London, England. We operate under the trading name Copa + Glas and are the data controller responsible for your personal information.
You can contact us at any time regarding this policy or your personal data by writing to us at studio@copaandglas.com.
02
Information We Collect
We collect personal information only when it is necessary to do so. The information we may collect includes:
- Contact details: your name, email address, phone number, and postal address when you place an order, make a bespoke enquiry, or get in touch with us
- Order information: the details of what you have commissioned, your delivery address, and correspondence relating to your order
- Payment information: we do not store card details directly; payments are processed securely by our payment provider
- Newsletter subscription: your email address if you choose to subscribe to our newsletter
- Trade enquiry details: your business name, role, and contact details if you apply for a trade account
- Communications: the content of any emails, messages, or enquiries you send us
03
How We Use Your Information
We use your personal information for the following purposes:
- To fulfil your order and manage the production and delivery of your commission
- To communicate with you about your order, answer enquiries, and provide aftercare
- To send our newsletter to subscribers who have opted in
- To manage trade account applications and maintain trade relationships
- To comply with our legal and accounting obligations
- To improve our website and understand how visitors use it
04
Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases to process your personal data:
- Contract: to fulfil orders and manage the commission process
- Consent: to send our newsletter — you may withdraw this at any time
- Legitimate interests: to respond to enquiries, manage trade relationships, and improve our services
- Legal obligation: to maintain records required by law, including for accounting and tax purposes
05
Third Parties
We do not sell or rent your personal data to third parties. We may share limited information with trusted third-party services where necessary to operate our business:
- Payment processors: to handle transactions securely
- Delivery and logistics partners: to arrange shipping and installation
- Email service providers: to send transactional and newsletter emails
- Accountants and legal advisors: where required by law or professional obligation
All third parties we work with are required to handle your data in accordance with applicable data protection law. We do not transfer your data outside the UK or EEA without appropriate safeguards in place.
06
Data Retention
We retain your personal information only for as long as necessary. Order records and related correspondence are kept for seven years in line with our accounting obligations. Newsletter subscriptions are maintained until you unsubscribe. Enquiries and trade applications that do not result in a commission are held for up to two years, after which they are deleted.
You may request deletion of your data at any time, subject to any legal obligations we are required to meet.
07
Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- The right to access the personal data we hold about you
- The right to correct inaccurate or incomplete information
- The right to request deletion of your data, where we have no legal obligation to retain it
- The right to restrict or object to how we process your data
- The right to data portability in certain circumstances
- The right to withdraw consent at any time, where processing is based on consent
To exercise any of these rights, please contact us at studio@copaandglas.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
09
Website & Security
Our website is hosted securely and all data transmitted between your browser and our site is encrypted. We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or disclosure.
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.
10
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date. We encourage you to review this page periodically. This policy was last updated May 2026.