SpunWithLove Create Yours Free

Privacy Policy

Last updated: 30 March 2026

This privacy policy explains how SpunWithLove ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website at spunwithlove.com.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Ian Crocker

Contact: [email protected]

Location: United Kingdom

1. What Data We Collect and Why

SpunWithLove does not require user accounts. We collect only what is needed to deliver, manage, and moderate the service.

DataPurposeRequired?
Creator email addressEmail verification, sending share/manage links, content moderation accountabilityYes
Recipient namePersonalising the spinner giftYes
Sender nameDisplaying who the gift is fromYes
Text messages (up to 10)Content displayed on the spinner wheelYes
Video recordingsVideo messages attached to spinner segments (Keepsake tier only)No
PhotosSecret reveal images (Keepsake tier)No
Recipient email addressScheduled delivery of the spinner linkNo
Payment informationProcessing payments for paid tiers (handled entirely by Stripe - we never see or store your card details)For paid tiers
Usage dataView counts, spin counts, and first-viewed timestamps for spinner analyticsAutomatic

We do not collect your real name (beyond what you choose to enter as a sender name), postal address, phone number, date of birth, or any other personal data beyond what is listed above.

2. Legal Basis for Processing

Contract performance (Article 6(1)(b))

When you create a spinner, you are requesting us to provide a service. We process your email, names, messages, videos, and photos to deliver that service.

Legitimate interest (Article 6(1)(f))

We store creator email addresses to support content moderation and maintain the integrity of the service. This allows us to contact creators about reported content and to take action against misuse.

Consent

We do not currently use your data for marketing. If we introduce marketing emails in the future, we will only send them with your explicit opt-in consent, and you will be able to withdraw that consent at any time.

3. How We Use Your Data

  • Creating and hosting your spinner - storing your messages, videos, and photos so they can be displayed to recipients
  • Email verification - sending a verification email before free tier spinners go live
  • Sharing and management - sending you the share link and manage link for your spinner
  • Scheduled delivery - delivering the spinner link to a recipient at a date and time you choose
  • Payment processing - facilitating payments for paid tiers through Stripe
  • Content moderation - reviewing reported spinners and contacting creators where necessary

4. Data Retention

Data typeRetention period
Video recordingsAutomatically deleted 7 days after the spinner is first viewed. Videos on unviewed spinners are kept until the spinner is opened. Keepsake tier downloads embed the video permanently.
Uploaded photosStored for the lifetime of the spinner. Deleted when the spinner is deleted.
Spinners (text messages, names, settings)Stored indefinitely until the creator requests deletion or we remove it following a content moderation decision.
Creator email addressRetained for as long as the spinner exists, plus a reasonable period afterwards for moderation records.
Payment recordsRetained as required by UK financial regulations (typically 6 years).

5. Third-Party Processors

ProviderPurposeData sharedLocation
Bunny.netVideo hosting and streamingVideo recordings onlyEU
StripePayment processingEmail and payment info (card details handled by Stripe directly)US (with UK GDPR safeguards)
BrevoTransactional email deliveryEmail addresses, email contentEU (France)
IONOSWeb hosting and databaseAll spinner dataEU (Germany)
Google AnalyticsWebsite analyticsAnonymised usage data (pages visited, device type, referral source)US (with UK GDPR safeguards)

We do not sell, rent, or trade your personal data to any third party.

6. Cookies

SpunWithLove uses no advertising or tracking cookies. We use Google Analytics (GA4) to understand how visitors use the site - this uses first-party cookies and does not track you across other websites. We may also use strictly necessary cookies for payment sessions via Stripe. These are exempt from consent requirements under UK law.

7. Children

SpunWithLove is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.

8. Your Rights Under UK GDPR

  • Right of access - request a copy of your personal data
  • Right to rectification - ask us to correct inaccurate data
  • Right to erasure - ask us to delete your data (or delete your spinner via the manage link)
  • Right to restrict processing - limit how we use your data
  • Right to data portability - request your data in a machine-readable format
  • Right to object - object to processing based on legitimate interest

To exercise any of these rights, email [email protected]. We will respond within one month.

Information Commissioner's Office

Website: ico.org.uk

Helpline: 0303 123 1113

9. Data Security

  • HTTPS encryption on all connections
  • Stripe PCI DSS Level 1 for payment security
  • Unique unguessable URLs for spinner access
  • Rate limiting to prevent abuse
  • Automatic video deletion after 7 days
  • Input sanitisation to prevent injection attacks

10. Changes to This Policy

We may update this policy from time to time. When we make changes, we will update the "Last updated" date at the top.

11. Contact Us

Email: [email protected]

Data Controller: Ian Crocker

Location: United Kingdom

SpunWithLove - Terms of Service ยท Privacy Policy