Privacy Policy

Depending on how you use the store, we may collect:

• Identity and contact information, including name, email address, telephone number, billing address and delivery address
• Order and transaction information, including products purchased, payment status, refunds and delivery details
• Personalisation information, including names, text, logos, images, design files, colour choices and font preferences
• Messages and customer-service communications
• Technical information, including IP address, browser, device, cookie identifiers and website activity
• Marketing preferences and consent records

We collect information directly from you when you place an order, submit a form, create an account, email personalisation files, subscribe to marketing or contact customer service.

Some technical information is collected automatically through Shopify, cookies and similar technologies. We may also receive information from payment processors, delivery providers, analytics services and other service providers used to operate the store.

We may use personal information to:

• Process, personalise, produce, deliver and manage orders
• Take payment and prevent fraudulent transactions
• Communicate about proofs, order details, delivery and customer support
• Maintain business, accounting and tax records
• Operate, secure, troubleshoot and improve the website
• Comply with legal obligations and enforce agreements
• Send marketing where permitted and manage marketing preferences

Where the GDPR or similar law applies, processing may rely on:

• Contract: processing necessary to take steps at your request or fulfil an order
• Legal obligation: processing required for tax, accounting, consumer-protection or other legal duties
• Legitimate interests: operating and securing the business, preventing fraud, improving services and handling claims, where those interests are not overridden by your rights
• Consent: where you have freely agreed, including certain marketing or non-essential cookies

Payments are processed by Shopify Payments or another payment provider available at checkout. We do not normally receive complete payment-card details. Payment providers process payment information under their own privacy terms and legal obligations.

Names, logos, photographs, design files and other materials supplied for personalisation are used to communicate with you, prepare proofs, manufacture the order, resolve quality issues and maintain necessary transaction records.

Do not send unnecessary personal information or material that you do not have authority to use.

We may send promotional emails only where permitted by applicable law. You can unsubscribe using the link in a marketing email or by contacting us.

Unsubscribing from marketing does not prevent transactional communications about an order, payment, proof, delivery or customer-service request.

Shopify and other service providers may process information outside your country or the European Economic Area.

Where required, international transfers should use recognised legal safeguards, such as an adequacy decision, standard contractual clauses or another lawful transfer mechanism.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilment, customer service, fraud prevention, accounting, tax, warranty, dispute-resolution and legal requirements.

Before publishing, set practical retention periods for order records, emails, abandoned checkouts, personalisation files, marketing records and analytics data.

We use reasonable organisational and technical measures intended to protect personal information. However, no internet transmission or storage system can be guaranteed completely secure.

Customers should protect account passwords and contact us promptly if they suspect unauthorised activity.

The store is not intended for children who cannot legally enter into a purchase contract. We do not knowingly seek to collect personal information directly from children for marketing purposes.

A parent or guardian should contact us if they believe a child has provided personal information improperly.

Please contact us first if you have a privacy concern so we can investigate it.

You may also have the right to complain to the data-protection authority in the EU or EEA country where you live, work or believe an infringement occurred.

We may update this Privacy Policy when our services, providers, technology or legal obligations change. The current version will be posted on this page with an updated date.