Looking after your details
Privacy
Year of Gold is a Post Nautical shop. We sell wall calendars and greeting cards, print them after you pay, and ship them in the United States. This page is the record of what we do with personal data. Questions go to info@postnautical.com.
Who is responsible
Post Nautical is the controller for this website. You can write to us at info@postnautical.com. The shop is Post Nautical.
What we collect
We only collect what we need to run the shop:
- Name, email, phone, and US shipping address, collected at Stripe Checkout when you buy.
- What you ordered, how many, and what you paid.
- A cart cookie on this site, so your basket is still there if you leave and come back.
- A note in your browser after you dismiss the privacy bar, so we don’t keep asking.
- Server logs that a host typically keeps for a short time (IP address, pages requested, time).
Payment cards are entered on Stripe’s pages. We do not see or store full card numbers. Stripe may also collect what it needs to prevent fraud and to take the payment.
Why we use it
- To take your order, print it, and deliver it (contract: you asked us to sell you something).
- To send a receipt, answer questions, and put right a damaged or wrong order (that same contract).
- To keep records for taxes and the law (legal obligation).
- To keep the site working — cart, security, and a short privacy notice (legitimate interests in running a shop that functions).
We do not sell your information. We do not use it for advertising. We do not run analytics or marketing pixels.
Who we share it with
We pass on only what each partner needs to do its job:
- Stripe takes payment and collects checkout details. See Stripe’s privacy policy.
- Gelato prints the order and ships it. They receive the artwork we send and the shipping address. See Gelato’s privacy policy.
- Our website host stores the site and, when an order is placed, the records we need to fulfill it.
- Google Fonts serves the typefaces on this site. Your browser requests those files from Google. See Google’s privacy policy.
Stripe, Gelato, Google, and our host may process data in the United States or other countries. Where that is a transfer out of the EEA or UK, those companies rely on their own safeguards (such as standard contractual clauses).
Cookies
This site uses two small, necessary stores in your browser. Nothing for ads or tracking:
- yog_cart — a cookie, kept for 30 days. It remembers what you put in the cart. The shop cannot take an order without it.
- yog_privacy_ok — saved in local storage when you tap OK on the bar. It only remembers that you saw this notice.
You can delete cookies and site data in your browser. Clearing them empties the cart and brings the privacy bar back.
How long we keep it
Cart contents stay in the cookie for 30 days, or until you check out or clear them. Order records (who bought what, and where it went) are kept as long as we need them to fulfill the order, handle a return, and meet tax and accounting rules. We then delete or anonymize them. Stripe and Gelato keep their own copies under their policies.
Your rights
If the GDPR or UK GDPR applies to you, you can ask to see the data we hold, correct it, delete it, restrict how we use it, take a copy, or object to processing that relies on legitimate interests. You can also complain to your local data-protection authority. We still only ship in the United States, but we will answer a request from anywhere.
Write to info@postnautical.com with the email you used to order. We may need to confirm it is you before we change or delete a record. Some records we have to keep for the law even if you ask us to delete the rest.
Children
This shop is not aimed at children. We do not knowingly take orders from anyone under 16.
Changes
If this page changes in a material way, we will update it here. Last updated 10 September 2026.