Privacy notice

Last updated 20 October 2026

This notice explains what personal information we collect when you use this website or buy from us, what we do with it, and the rights you have over it.

Who we are

Ervins Cippa, trading as Dodo Postcards, is the controller of your personal information under UK data protection law. For anything about your information, write to [email protected].

Trading name

Dodo Postcards

Run by

Ervins Cippa (sole trader)

Address

50 Tower Place Warlingham CR6 9PW United Kingdom

Email

[email protected]

VAT no.

GB 461210143

What we collect

• When you order: your name, email address and delivery address, the cards you buy, and your order and payment status. Card payments go straight to our payment provider, Stripe; we never see or store your full card number.
• If you create an account: your name, email address, password (stored only in a scrambled form that can’t be read back), the addresses you save and your order history.
• When you contact us: your name, email address and what you write.
• When you tell us about a card (“Know something about this card?”): what you write, which card it was sent from and, only if you choose to give one, your email address. You don’t need an account.
• When you visit the site: technical information such as your IP address and browser type, which our hosting and security services record to keep the site running and protect it from abuse.
• When you search: what you searched for, how many cards it found, and which card you opened or added to your basket afterwards, to improve the catalogue and the search. We tie this to a random code made from your IP address and browser that changes every day; we do not store your IP address with it, and the code cannot be used to follow you from one day to the next. If you are signed in, the search is linked to your account.
• Your recent searches: so you can repeat a search, your browser remembers your last 20 searches (the words, sort order and price range) on your own device; they are not sent to us. If you are signed in, we also save the list on your account so it follows you to your other devices. You can remove any search, or clear the whole list, from the search box or the browse page; that clears both copies. This is separate from the search records above, which deleting your list does not change.
• Your wishlist: the cards you save with the heart are remembered by your browser on your own device; they are not sent to us. If you are signed in, we also save the list on your account so it follows you to your other devices. Removing a card removes it from both copies, and signing out clears the copy on that browser.
• Card alerts: if you ask us to email you when new postcards match your words, we keep your email address, the words, how often you want the emails, when you confirmed the alert and when we last checked it. We only start once you have clicked the link in the email we send you, or at once if you are signed in. When you click a link in an alert email we note the click against a scrambled code, not your email address, so we can see whether alerts are useful and whether they lead to orders.
• If you accept analytics cookies: how you use our pages (clicks, scrolling and mouse movement, and recordings of your visit, with anything you type hidden), collected by Microsoft Clarity.

Why we use it, and our lawful basis

We email you about your orders and your account. After you buy from us we may also email you a thank-you discount code for your next order. We do that because you are an existing customer (the “soft opt-in” under the Privacy and Electronic Communications Regulations). You can refuse when you check out (“Don’t email me offers”), and every such email has an unsubscribe link that works in one click. We keep your address on a do-not-email list so a later order never brings the offers back. We don’t sell your information, and we don’t use it for automated decisions about you.

Who we share it with

We use these service providers, who handle your information for us and only on our instructions:

• DigitalOcean: hosts the website and our database, on servers in London.
• Cloudflare: protects the site from attacks and delivers it quickly, and stores our catalogue images.
• Stripe: processes card payments. Stripe also uses payment information for its own fraud prevention and legal duties, as an independent controller; see Stripe’s privacy policy.
• Our email delivery provider: sends our order and account emails.
• Fastmail (Fastmail Pty Ltd, Australia, with its servers in the United States): hosts our shop mailbox, so it holds the messages you send us, by email or through the contact form, and our replies.
• Sentry (Functional Software, Inc., United States): tells us when something on the site breaks. It receives the technical details of an error (the page, the browser type and the error message) with email addresses masked, and not your name, address, IP address or what you typed.
• Microsoft: provides Clarity analytics, only if you accept analytics cookies; see Microsoft’s privacy statement.

The postal service sees your name and address on the parcel. We may also share information where the law requires it, for example with HMRC or the police.

International transfers

These providers are based in the United States (Fastmail in Australia), so your information may be accessed from or stored outside the UK. Where that happens it is protected as UK law requires: by the UK’s adequacy regulations for the US (the “UK-US data bridge”) where the provider is certified under it, or otherwise by the UK’s approved international data transfer agreement or addendum.

How long we keep it

• Orders and sales records: six years after the end of the financial year of the order, as tax law requires.
• Your account: until you ask us to close it. Your past orders are then kept as above.
• Messages to us: as long as we need them to deal with your enquiry.
• Notes about a card: until we have used them to improve the card’s details, then we delete them.
• Security and technical logs: only for as long as needed to keep the site secure and fix problems.
• Search records: 13 months; after that only anonymous daily totals (for example how often a word was searched) are kept.
• Recent searches: the 20 newest, each for up to 12 months, or until you remove it or clear your list.
• Card alerts: until you stop them (every alert email has a stop link), when we delete them at once. An alert you don’t confirm is deleted after 7 days. We send alert emails only to people who asked for them, and never offers.
• Analytics: for the limited periods Microsoft keeps Clarity data.

Your rights

You have the right to:

• get a copy of the personal information we hold about you;
• have it corrected if it’s wrong, or deleted where we no longer need it;
• restrict or object to how we use it, including anything we do on the basis of legitimate interests;
• receive the information you gave us in a portable format;
• withdraw your consent at any time, where we rely on it (for analytics, use “Cookie settings” at the foot of any page).

To use any of these rights, email [email protected]. We’ll reply within one month.

If you’re unhappy with how we handle your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.

Cookies

Our Cookie policy lists the cookies and similar storage we use, and how to change your choice.

Changes to this notice

We’ll update this page if what we do with your information changes. The date at the top shows the latest version.