This site sets no cookies, runs no analytics and makes no third-party requests. The only personal data we hold about you is what you send us when you get in touch, and what our hosting necessarily records to serve the page.
Who we are
Weavery is a product of Nauni Limited. Nauni Limited is the controller for the personal data described in this notice.
- Registered name
- Nauni Limited
- Registration
- Registered in England and Wales, company number 12121976
- Registered office
- 124 City Road, London, EC1V 2NX, United Kingdom
- Contact
- hello@weavery.co.uk
This notice covers weavery.co.uk and enquiries you send us about Weavery. Three other situations are covered elsewhere:
- You sign in to the Weavery platform. The privacy notice you were given with your account applies to what you do there; the short version is in If you use the Weavery platform below.
- You ordered a personalised product from a shop that runs on Weavery. That shop is the controller of your order. Contact the shop, and they will involve us if they need to.
- You are dealing with Nauni about something other than Weavery. The nauni.co.uk privacy notice applies.
What this website collects
Nothing, in the sense most sites mean it:
- No cookies are set, and nothing is written to local storage.
- No analytics, tag manager, session recording or advertising pixel.
- Fonts, images, stylesheets and scripts are all served from this domain. Loading a page here does not tell Google, a CDN or a social network anything about you.
Because there is no non-essential storage and no tracking, there is no cookie banner: there is nothing to ask you to consent to.
Hosting and server logs
The site is a set of static files held in Amazon Web Services in London and served through Amazon CloudFront, a content delivery network. To deliver a page, the hosting necessarily processes your IP address, the file requested, the time of the request and your browser's user-agent string.
- Purpose. Serving the site, and keeping it available and secure.
- Lawful basis. Our legitimate interests in running a website securely (UK GDPR Art. 6(1)(f)).
- Retention. Request logging is switched off, so these records are not kept at all. If we turn it on, they will be kept for no more than 30 days and then deleted.
We do not use these records to profile you, and we do not combine them with anything else.
If you contact us
The contact form on this site opens your own email client; nothing is submitted to us until you send that email. When you write to us we hold your name, your email address, and whatever you choose to tell us about your business and your print operation.
- Purpose. To answer you, and, if it goes further, to set up early access, run the onboarding and invoice for the service.
- Lawful basis. Our legitimate interests in responding to an enquiry (Art. 6(1)(f)); performance of a contract once you use Weavery (Art. 6(1)(b)); and our legal obligation to keep accounting records (Art. 6(1)(c)).
- Retention. Enquiries that do not lead to an account are deleted after 12 months. Correspondence with customers is kept for the life of the account and for six years afterwards, which is the period we must keep accounting records for.
We will not add you to a mailing list, and we do not send marketing unless you ask us to.
If you use the Weavery platform
Accounts on the platform belong to an organisation, a shop or a fulfiller, that has an agreement with Nauni Limited. For the orders, products and production data that organisation puts into Weavery, the organisation is the controller and we are its processor, acting on its written instructions. For the account itself (your name, work email address, role and sign-in records) we are the controller, and we use that data only to run the service, keep it secure and support you.
Platform data is held in Amazon Web Services in the United Kingdom. The full platform notice is available inside the product and on request.
Who we share it with
We do not sell personal data and we do not share it for anyone else's marketing. The categories of recipient are:
- Amazon Web Services, which stores and serves this site and hosts the platform.
- Google Workspace, which carries the email you send us.
- Our accountants, where an enquiry becomes a paid service.
- Anyone the law requires us to disclose to.
Each supplier is engaged under written terms that meet UK GDPR Art. 28, and is only given the data its purpose needs.
Transfers outside the UK
Two of these involve processing outside the United Kingdom. The content delivery network serves pages from locations across Europe and North America, which means your IP address is handled at whichever one is nearest to you; and Google Workspace is a United States provider. Both transfers rely on an appropriate safeguard, the UK Addendum to the EU Standard Contractual Clauses in each provider's data processing agreement, together with a transfer risk assessment. A summary is available on request.
Your rights
You can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, object to our use of it, or send it to you in a portable format. You can also object to processing we carry out under legitimate interests.
Email hello@weavery.co.uk. We reply within one month, and will tell you if a request is complex enough that we need to extend that by up to two further months. Making a request is free.
Some information cannot be deleted on request. Accounting records, for instance, we are legally required to keep. If that applies to your request we will tell you which parts and why.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Security
The site is served over HTTPS. Internally, access to enquiry correspondence is limited to the people who need it, on managed devices with disk encryption and multi-factor authentication. How we protect the platform itself is described on the Security page; our wider information security and data protection policies are available on request.
Changes to this notice
We publish changes on this page and update the date at the top. This notice was last updated on 17 September 2026.