Privacy

Who is responsible

Fathi Hassan and Ali Shami, trading together as The Railway Dispatch, 17 Central Avenue, Rowley Regis, B65 8BA. Email hello@therailwaydispatch.com.

What we collect and why

Your name, email address and delivery address, so that we can post your parcels and run your account. Payment details are handled by Stripe; we never see your card number. What you tell us you would like to see in future parcels, which we use to plan. For a shop order, the name, email and address it is posted to, and any gift message. For our mailing list, your email, your first name if you give it, and the wording you agreed to. For the route poll on the shop page, your email, which route you chose and any route you typed, so that each address counts once; only the totals per route appear on the site.

Emails

We send service emails about your membership and your orders. We send news only to people who ticked the box to ask for it, and every one of those emails has a link to stop them.

Who we share it with

Stripe (card payments and subscriptions), Resend (sending our emails, EU region), Cloudflare (hosting the website), Supabase (our database, stored in London), and Royal Mail (the address on your parcel). Nobody else.

How long we keep it

While you are a member and for twelve months after, then deleted, except invoice records we must keep for tax law. Shop orders are kept for the same reason. On the mailing list, until you unsubscribe; after that we keep only a note that you did, so you are not added again by mistake. Poll votes are kept until the route they are for is made or dropped from the list, and deleted on request at any time.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email hello@therailwaydispatch.com. You can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

Only what the site needs to work: one cookie to keep you signed in, and one for the admin area. No advertising cookies, and nothing that follows you to other sites.

Counting visits

We count how many people look at each page and which site they came from, so we know what is worth making more of. It uses no cookie, and we do not keep your address: the count is made from a scrambled version of it that changes every day, so one person is one visitor for a day and nothing links two days together. The counts are kept for 90 days. Cloudflare, which serves the site, counts page loads in the same way for the same purpose (its Web Analytics), without cookies.