Privacy & cookies
Last updated 17 October 2026
Stubborn Carpenter is Tim’s workshop website, run by Tim Williams. Tim is responsible for any personal details you give us here (in data protection terms, he is the “controller”). This page explains, in plain English, what details we collect when you use the site, why, how long we keep them, and what you can ask us to do about it.
For anything about your data, email tim@stubborncarpenter.com.
What we collect and why
Tim’s Kitchen meal cards
When you pick a meal card we ask for your email address. We keep it with the meal you chose, the type, cuisine and calorie filters you used, and whether you chose to sponsor the meal. That tells Tim who’s cooking his food and lets us send you to the right card.
We only email you about new meals if you tick the box. That’s your consent, and you can take it back any time by replying to one of our emails or writing to us.
Our legal basis is legitimate interests for running the meal cards, and your consent for any news emails.
Sponsoring a meal
Payments go through Stripe. Your card details go straight to Stripe and we never see them. We keep your email, the meal, the amount and whether the payment went through, so we can match it up and keep proper accounts.
Our legal basis is carrying out the payment you asked for, and our legal duty to keep financial records.
Work with Tim enquiries
If you get in touch through the Work with Tim form, we keep your name, email, organisation, website, the type of enquiry, any budget you mention and your message, so we can reply. We only send you workshop news if you tick the box.
Our legal basis is legitimate interests in answering you (or taking steps towards working together), and your consent for any news emails.
Keeping the site safe
When you send a form we also store a scrambled (hashed) version of your internet address and your browser type. We use these only to stop spam and abuse, such as someone sending hundreds of requests. The Work with Tim form uses Cloudflare Turnstile for the same reason.
Who else handles it
We never sell your details or pass them to anyone for their own marketing. A few trusted companies run parts of the site for us and only handle your data on our instructions:
- Cloudflare hosts the website and protects it from attacks and spam.
- Supabase runs our database, stored in London.
- Stripe takes sponsorship payments.
- Google Fonts supplies the lettering on the site, so your browser contacts Google to load it.
- Our email provider handles any emails between us.
Some of these companies may handle data outside the UK. Where they do, they use safeguards approved under UK data protection law.
How long we keep it
- Meal card emails: until you ask us to delete them, or two years after you last picked a card.
- Work with Tim enquiries: two years after we last heard from you.
- Sponsorship records: six years, because the tax rules require it.
- Scrambled internet addresses: kept with the record above, and used only for spam checks.
Cookies and storage
We don’t use advertising or tracking cookies, and we don’t use analytics that follow you around. That’s why there’s no cookie banner. The site only stores what it needs to work:
| Name | What it does | How long |
sc_card | Unlocks the meal card you picked, so you can open it again. | 30 days |
sc_meal_email | Remembers your email on your own device, so you don’t have to type it again for your next card. It is stored in your browser, not sent to us. | Until you clear it |
| Cloudflare security cookies | Set by Cloudflare and Turnstile to tell real visitors from bots. | Up to a day |
| Upload sign-in | Only used by Tim when he signs in to upload his videos. | Session |
You can clear all of these in your browser settings at any time. The site will just ask for your email again next time.
Your rights
You can ask us to:
- tell you what we hold about you and give you a copy
- correct anything that’s wrong
- delete your details
- stop using your details, or stop sending news emails
- give your details to you in a form you can take elsewhere
Email tim@stubborncarpenter.com and we’ll reply within a month. It’s free.
If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put it right first.
Children
The site isn’t aimed at children. If you’re under 13, please ask a parent or carer before giving us your email.
Changes
If we change how we use your details, we’ll update this page and the date at the top.
← Back to Stubborn Carpenter