Privacy Policy

Last updated: 3rd October 2026

At Rumi's Cave, we treat your information the way we treat our guests: with care and respect. This page explains, in plain language, what personal information we collect, why we collect it, and what your rights are.

Who we are

Rumi's Cave is run by Rumi’s Cave LTD based at 120-124 Craven Park Road NW10 8QD. We are the "data controller" for the information described here. You can reach us at info@rumis.org

What we collect

When you subscribe to Letters from the Cave: your email address and your first name if you give it. If you reply to a letter, we'll also keep your reply so we can answer you.

When you buy from us: your name, email, billing and delivery address, phone number (if provided), and order details. We never see or store your full card details. Payments are handled by our payment providers, Stripe / PayPal / Square, as applicable.

When you contact us: anything you send through our contact form, by email, or via social media.

When you book an event (such as a Poetry Night): your name, email, and any needs you tell us about.

When you browse the site: basic technical data such as your IP address, device and browser type, pages visited, and approximate location, collected through cookies and similar technologies (see below).

How and why we use it

  • To fulfil your orders and bookings (legal basis: contract).

  • To send Letters from the Cave (legal basis: your consent, which you can withdraw at any time).

  • To answer your questions (legal basis: legitimate interests).

  • To keep our records, accounts and tax filings in order (legal basis: legal obligation).

  • To understand how our website is used and keep it secure (legal basis: legitimate interests, or consent where cookies require it).

We never sell your personal information, and we never share it for others to market to you.

Who we share it with

We only share information with trusted services that help us run the Cave, and only as needed:

  • Squarespace, which hosts our website, shop and forms

  • Payment providers ([Stripe / PayPal / Square]) to process payments

  • Our email provider ([Squarespace Email Campaigns / Mailchimp / other]) to send our letters

  • Delivery partners ([Royal Mail / DPD / other]) to post your orders

  • Our accountant or bookkeeper, where needed for our records

Some of these providers are based outside the UK, including in the United States. Where that happens, we rely on appropriate safeguards such as the UK's approved data transfer mechanisms.

Cookies

Cookies are small text files that a website saves on your device. We use them to keep the Cave running smoothly and to understand how people find and use it.

Essential cookies are needed for the site to work, so they're always on. They remember what's in your basket, keep checkout secure, protect against fraud, and remember your cookie choices. Without them, the shop wouldn't function.

Analytics cookies help us see which pages are visited, how people arrive, and which parts of the site are useful. This information is combined and anonymised where possible. We only set these if you accept them.

Third-party cookies: some of our service providers, such as Squarespace, [Stripe / PayPal], [Instagram / YouTube embeds, if used], and [Google Analytics] , may set their own cookies when you use features connected to them. Their own policies explain how they use this information.

Your choices: when you first visit, a banner lets you accept or decline non-essential cookies. You can change your mind at any time by [clicking "Cookie settings" in the footer / clearing your cookies in your browser]. Most browsers also let you block or delete cookies, though parts of the shop may not work properly if you block essential ones.

For more detail on how Squarespace uses cookies, see their cookie policy at squarespace.com/cookie-policy.

How long we keep your information

  • Newsletter details: until you unsubscribe

  • Order and accounting records: [6] years, as required for tax purposes

  • Enquiries and correspondence: up to [2] years, unless we need them longer to resolve an issue

Your rights

Under UK data protection law, you have the right to:

  • ask what personal information we hold about you

  • ask us to correct anything that's wrong

  • ask us to delete your information

  • object to or restrict how we use it

  • ask for a copy of your information in a portable format

  • withdraw your consent at any time, such as unsubscribing from our letters with the link at the bottom of every email

To use any of these rights, just email info@rumis.org. We'll respond within one month. If you're unhappy with how we've handled your information, you also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We'd always appreciate the chance to put things right first.

Children

Our website and newsletter are not aimed at children under 13, and we don't knowingly collect their personal information.

Changes to this policy

If we change how we handle your information, we'll update this page and the date at the top. For significant changes, we'll let Cave Keepers know by email.

Contact

Questions about this policy or your information? Write to us at info@rumis.org or Rumi’s Kitchen, 120 Craven Park Road NW10 8QD. A real person will read it.