Royal Mail across the UK, Guernsey, Jersey and the Isle of Man Order by 2pm on a working day. Usually posted the same day. Any 4 cards for £12

Your basket

Pick another card for the next set
Loading...

Sign in

Checkout as a new customer

Create an account to keep track of orders, save addresses and check out faster.

  • Track order status
  • View order history
  • Check out faster
Create an account
Draft policy. The legal seller name and postal address, production provider list, cookie inventory and retention schedule still need to be confirmed before launch.

Last updated: 29 July 2026

Privacy and cookies

Roast & Roses is the name used for this card shop. The final notice must name the legal business or sole trader that operates it and give a postal address. For privacy questions while this draft is being reviewed, email [email protected].

What this policy covers

This policy explains what personal information we use when you browse the shop, place an order, contact us, choose optional cookies or join the marketing list.

The information we use

  • Your name, email address, phone number and delivery or billing address.
  • The cards, sizes, quantities and optional inside-card message in an order.
  • Payment, order, refund and delivery status information needed to take payment, fulfil an order and answer questions. We do not store full payment-card numbers in Magento.
  • Information you put into the contact form.
  • Your email address and consent record if you join the marketing list.
  • Cookie, device and page-use information when you choose optional analytics cookies.

Why we use it

We use information to take and fulfil orders, print optional messages, take payment, arrange Royal Mail delivery, answer questions, handle returns and refunds, keep records required by law, protect the shop and send marketing only where the required consent or other lawful route is in place.

Order and service messages are not marketing consent. Google Analytics 4 is used only when you choose Analytics cookies. Marketing cookies and Brevo marketing are not active until they have been configured and tested.

Orders, payment and delivery

Magento holds the information needed to process an order. The payment provider shown at checkout receives the payment details needed to authorise and reconcile payment; full card details are not stored in this shop’s Magento database. Royal Mail receives the delivery information needed to post an order. We currently accept delivery addresses in Great Britain, Guernsey, Jersey and the Isle of Man.

Email marketing

Marketing is separate from transactional order messages. If you join the list, we record the address, the source and time of the choice and the policy version shown at sign-up. Marketing will be sent through Brevo only after the account, sender authentication and consent or double-opt-in flow have been configured and tested.

You can unsubscribe from any campaign using its unsubscribe link or by contacting us. We keep a suppression record so that we do not send the same person marketing by mistake.

Cookies and analytics

Essential cookies keep the shop, basket, checkout, security and consent choices working. The Roast cookie manager stores the current choice in roast_cookie_consent. Optional analytics cookies and requests are off until you choose Analytics. You can review or withdraw optional choices using Cookie settings in the footer.

The final production notice must include a checked cookie inventory with each cookie or storage key, provider, purpose, category and retention period. The inventory will be updated when the live stack changes.

Who we share it with

We share only what a recipient needs for its job. Depending on what is active, this may include hosting and infrastructure providers, the payment provider shown at checkout, Royal Mail or an approved fulfilment tool, Brevo for opted-in marketing, Google Analytics 4 when Analytics consent is present, and professional advisers, regulators or law enforcement where the law requires or permits it. We do not sell personal information.

How long we keep it

We keep information only for as long as it is needed for the purpose collected, to meet legal and accounting duties, to resolve a dispute or to protect the shop. The owner must complete the production retention schedule and deletion process before this notice is published as final.

Your rights

Subject to the limits that apply in a particular case, you can ask us for a copy of your information, correction, deletion, restriction, portability or an objection to a use based on legitimate interests. You can withdraw consent where consent is the basis for processing. Email [email protected]. You can also complain to the Information Commissioner’s Office.

Security and changes

We use access controls, secure configuration, patching, backups and monitoring appropriate to the shop and the information we hold. No online service can promise that security incidents will never happen. We may update this notice when the shop, providers or law changes and will show the date of the latest version.

Before launch: insert the legal controller name and postal address, confirm the production providers and transfer locations, finish the cookie inventory and retention schedule, and test access, deletion, withdrawal and breach processes. This draft is not legal advice.