Privacy Policy

1. Who We Are

BizBranding ("we", "us", "our") is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered address is Unit 3, 2 Square St, Bradford BD4 7NP, United Kingdom. You can contact us about privacy matters at info@bizbranding.co.uk.

2. What Data We Collect

We collect and process the following categories of personal data:

• Identity data: name, company name, job title.
• Contact data: billing address, delivery address, email address, phone number.
• Account data: username, password (hashed), order history, preferences.
• Transaction data: payment method, items purchased, order value. Card details are processed directly by our payment provider — we never see or store full card numbers.
• Technical data: IP address, browser type and version, device information, time zone, operating system.
• Usage data: pages visited, products viewed, time on site, referring URL.
• Marketing data: your communication preferences and consent history.
• Design data: any logos, artwork or files you upload for custom printing.

3. How We Collect Your Data

• Directly when you create an account, place an order, request a quote or contact us.
• Automatically through cookies and similar technologies when you browse our site.
• From third parties such as our payment processor (Stripe) and delivery partners (Royal Mail, DPD).

4. Why We Use Your Data & Legal Basis

Under UK GDPR we must have a lawful basis for processing your personal data. The bases we rely on are:

• Contract: to process your order, deliver products, manage your account and handle returns.
• Legal obligation: to keep tax, VAT and accounting records (typically for 6 years), and to comply with consumer protection law.
• Legitimate interests: to prevent fraud, secure our website, improve our products, and respond to enquiries — balanced against your rights.
• Consent: for marketing emails, non-essential cookies and any optional communications. You can withdraw consent at any time.

5. Who We Share Your Data With

We never sell your personal data. We share data only with trusted processors who help us run our business:

• Payment provider (Stripe) to process transactions securely.
• Delivery couriers (e.g. Royal Mail, DPD) to fulfil your order.
• IT & hosting providers for website hosting, email services and analytics.
• Professional advisors such as accountants, auditors and legal counsel where required.
• Government bodies and law enforcement where we are legally required to do so.

All processors are bound by written contracts requiring them to keep your data secure and to use it only for the purposes we specify, in line with Article 28 of the UK GDPR.

6. International Transfers

Your data is primarily stored within the UK and European Economic Area. Where any of our service providers process data outside the UK/EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or transfers to countries deemed adequate by the UK government.

7. How Long We Keep Your Data

• Order and transaction records: 6 years (HMRC requirement).
• Account data: until you ask us to close your account, plus 12 months.
• Marketing data: until you unsubscribe or withdraw consent.
• Uploaded design files: 24 months from your last order, then deleted unless you ask us to keep them on file.
• Website analytics: anonymised after 14 months.

8. Your Rights Under UK GDPR

You have the following rights, free of charge, in relation to your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — ask us to delete your data where there's no good reason for us to keep it.
• Right to restrict processing — ask us to suspend processing in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making — we do not carry out automated decision-making that produces legal effects.
• Right to withdraw consent — at any time, where we rely on consent.

To exercise any of these rights, email info@bizbranding.co.uk. We will respond within one calendar month, as required by law.

9. Cookies

We use cookies and similar technologies to make our site work, remember your preferences, analyse traffic and (with your consent) deliver relevant advertising. The first time you visit our site you'll see a cookie banner where you can accept, reject or customise non-essential cookies. Strictly necessary cookies (e.g. shopping basket, login session) cannot be disabled because the site won't work without them.

10. Marketing Communications

We will only send you marketing emails if you have opted in. You can unsubscribe at any time by clicking the link at the bottom of any marketing email, or by emailing us. Opting out of marketing won't affect service emails about your orders.

11. Data Security

We use appropriate technical and organisational measures to protect your data, including TLS encryption, hashed passwords, restricted access controls and regular security reviews. In the unlikely event of a data breach affecting your rights, we will notify the Information Commissioner's Office (ICO) within 72 hours and contact affected individuals where required.

12. Children

Our website is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have done so, please contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Material changes will be communicated by email or via a banner on the website.

14. How to Complain

If you're unhappy with how we've handled your data, please contact us first so we can try to resolve it. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office:

Information Commissioner's OfficeWycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk