Schedule 2
Privacy notice
What is collected
Your first name, your email address, the short description of the matter you submit, the category and preferred handling style you select, and — for a transfer made for a friend — their first name and your message to them. Card details are handled entirely by Stripe and are never seen or stored by The Worry Office.
Why it is held
To register your order, generate your certificate, deliver the email you have paid for, handle refunds and keep proper accounting records. Marketing consent is optional and separate, and you may withdraw it at any time. Nothing is sold, no advertising profiles are built from worry submissions, and the text of your concern is never sent to analytics.
How long it is kept
The information needed to create and deliver your personalised certificate, including the concern description, gift message and generated PDF, is retained for up to 30 days for delivery support, refunds and payment queries. It is then deleted or irreversibly anonymised. Basic transaction records may be retained where required for accounting, fraud prevention or legal compliance.
Your rights
You may request a copy of your case record, correction of it, or its deletion. Write to the Office using the contact form selecting "Data or privacy request", quoting your case reference.
Third parties
Records are held in the Office's hosted database, payments are processed by Stripe, and correspondence is delivered by the Office's email provider. Nothing is sold, and no advertising profiles are built.