These pages describe how this shop actually works. A registered company name, company number, and registered office are not stored in the application. Add them before treating this as a final legal notice. A solicitor should review it.

Privacy policy

Who this describes

This policy describes the personal information this application stores. The legal controller’s registered name and ICO registration number are not recorded in the software. Use the contact form for privacy requests until those details are published.

What we collect

Account name, email, and password hash. Order email, phone, and delivery address. Payment status from the card provider; we do not store full card numbers. Photos and design files you upload, including print exports. Gift card purchaser and recipient emails. Referral codes and the fact that one account was introduced by another. Contact, bulk-quote, and club-application messages. A daily-use cookie for the basket and login, and a referral cookie if you open a referral link.

Why

Contract: to make, deliver, and support an order, and to run an account you asked for. Legitimate interests: to prevent fraud, duplicate referrals, and self-referrals, and to keep failed payments for support. Consent: marketing email only if you join the newsletter. Legal obligation: tax and accounting records for paid orders.

How long

Uploaded photos are marked to expire after 30 days unless they are attached to an order, in which case we keep the print file for the order and any reprint. Account data stays until you ask for deletion, except records we must keep for tax. Contact and quote messages stay until the enquiry is closed and no longer needed.

Who else sees it

Payment providers (Stripe, and GoCardless if a Direct Debit is set up), the carrier named on the shipment, and email delivery used by the server’s mail settings. Staff can see orders, designs, and enquiries in the admin panel. We do not sell personal information.

Security and your rights

Passwords are hashed. Tracking a parcel needs the order number and the email on the order, and the page does not show the delivery address. You can ask for a copy of your account data, a correction, or deletion, using the contact form. You can complain to the ICO. If a processor stores data outside the UK, that transfer is only as described by that provider’s terms; this application does not add its own overseas transfer.