Privacy & cookies
Last updated 7 October 2026
Alex Bassett trading as Mememugs is the data controller for the personal data you give us. This notice explains what we collect and why, under UK data protection law (UK GDPR and the Data Protection Act 2018).
What we collect
- Your name, email and delivery address when you order.
- What you ordered and when.
- Your email and a securely hashed password if you create an account.
- Anything you send us, such as a meme submission or an email.
We don't collect or store your card details. Stripe handles payment.
Why we use it
- To make, deliver and support your order (to perform our contract with you).
- To keep the records the law requires, such as for tax (legal obligation).
- To run your account, if you have one (contract).
We don't send marketing emails, and we don't sell your data.
Who we share it with
- Stripe, to take payment.
- Prodigi, our print partner, who prints and posts your mugs. They get your name, email and delivery address.
- DigitalOcean, who host this website on servers in London.
Some of these companies are based outside the UK. Where data leaves the UK, it is protected by UK-approved safeguards such as the International Data Transfer Agreement.
How long we keep it
Order records are kept for 6 years, for tax. Account details are kept until you ask us to delete your account.
Cookies
We only use cookies the site needs to work: they keep your cart, keep you logged in (and remember you, if you tick "keep me logged in"), and protect forms from forgery. We don't use analytics or advertising cookies, and the site loads nothing from other companies. Stripe's payment page sets its own cookies to prevent fraud.
Your rights
You can ask for a copy of your data, or ask us to correct or delete it, or to stop using it. Contact us using the details on the contact page. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.