Privacy Policy

1. Who we are

[LEGAL NAME LTD] ("we", "us", "our") operates [WEBSITE]. We are the data controller for the personal data described in this policy.

• Registered address: [LEGAL ADDRESS]
• Company number: [COMPANY NUMBER]
• Contact for privacy matters: [EMAIL]
• ICO registration number (if applicable): [NUMBER]

2. What data we collect

• Identity & contact data: name, billing and delivery address, email, phone number.
• Order & payment data: items ordered, order history and payment confirmation. Card details are handled by our payment provider — we do not store full card numbers.
• Artwork & project files: files you send us for printing, along with any specifications and approvals.
• Technical data: IP address, device and browser type, and cookie data.
• Communications: messages you send us by email, contact form or chat.
• Marketing preferences: whether you have opted in to marketing.

3. Why we use it and our lawful basis

Purpose	Lawful basis (UK GDPR)
Quoting, producing and delivering your order, managing your account	Performance of a contract
Responding to enquiries and providing support	Legitimate interests / contract
Sending marketing emails	Consent (or soft opt-in for existing customers)
Fraud prevention and site security	Legitimate interests
Analytics to improve the website	Consent (via cookies)
Meeting legal and tax obligations	Legal obligation

4. Who we share it with

We share data only with parties who help us run the business, including:

• Payment processors: [e.g. Stripe / PayPal]
• Delivery and courier partners: [e.g. Royal Mail / DPD]
• Website and hosting platform: [e.g. Shopify / WooCommerce]
• Email and marketing tools: [e.g. Mailchimp / Klaviyo]
• Analytics: [e.g. Google Analytics]
• Print finishing or fulfilment subcontractors where a job requires them

We may also disclose data where legally required, for example under a court order or a request from a tax authority. We do not sell your personal data.

5. International transfers

Where a provider stores data outside the UK, we make sure it is protected by an adequacy decision or by appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the Addendum to the EU Standard Contractual Clauses.

6. How long we keep it

• Order and transaction records: [6 years], to meet UK tax and accounting rules.
• Artwork and production files: [X years], so that repeat runs match the original.
• Account data: while your account is active, then [X months] after closure.
• Marketing data: until you unsubscribe.
• Support messages: [X months/years].

7. Your rights

Under UK GDPR you have the right to access your data, correct it, erase it, restrict or object to processing, ask for data portability, and withdraw consent at any time.

To exercise any right, contact us at [EMAIL]. We will respond within one month. We may ask you to verify your identity first.

8. Complaints

If you are unhappy with how we handle your data, you can complain to us directly at [EMAIL] and we will investigate. You also have the right to complain to the Information Commissioner's Office (ICO) — ico.org.uk, or 0303 123 1113.

9. Cookies

Our website uses cookies. Non-essential cookies, such as analytics and advertising, are only set with your consent via our cookie banner. See our separate Cookie Policy for details and how to change your preferences.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date shows the latest version. Material changes will be notified [on this page / by email].