← back to the beach

Privacy

Last updated: 29 July 2026

Surfscrews sells grub screws, not your data. This page explains what little we collect, why, and what we never do with it.

What we collect

When you place an order we receive your name, delivery address, and email address from our payment provider, Stripe. That's the lot — there are no accounts, no marketing lists, and our own site sets no tracking cookies.

Payments

Payments are handled entirely by Stripe on their secure checkout pages. Your card details go to Stripe, never to us — we couldn't see them if we wanted to. Stripe's own privacy policy is at stripe.com/privacy.

What we do with it

We use your details to pack your order, print your invoice and shipping label (on a dot-matrix printer, gloriously), post your parcel via Royal Mail Tracked 24, and answer any questions about your order. Royal Mail receives your name and address for delivery — that's what makes the tracking work.

Where it lives

Order records are stored in Google Cloud (Firestore) in Europe, and in Stripe. We keep order records for six years because His Majesty's Revenue & Customs insists.

What we never do

No selling your data. No sharing it beyond Stripe, Google Cloud, and Royal Mail. No marketing emails unless you've explicitly asked for them. No third-party ad trackers.

Your rights

Under UK GDPR you can ask what we hold about you, ask us to correct it, or ask us to delete it (once we're past any legal retention). Email hello@surfscrews.co.ukand a human will sort it. If we get it wrong, you can complain to the Information Commissioner's Office at ico.org.uk.