Introduction

ThePandaPrint.co.uk is committed to protecting the privacy of our customers and website visitors. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you use our website and services. As a UK-based company, we are a “data controller” under the UK’s data protection laws, including the UK General Data Protection Regulation (UK GDPR).

1. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity and Contact Data: This includes your name, billing address, delivery address, email address, and telephone number. We collect this data when you create an account, place an order, or contact us with an enquiry.

• Transaction and Financial Data: We collect information related to your orders, purchases, and payments. Please note that while we collect transaction details, your payment card information (e.g., credit/debit card numbers) is not stored or processed by us; it is handled securely by our third-party payment processors.

• Profile and Usage Data: We collect information about how you use our website, your preferences, and your browsing activity. This may include your IP address, browser type, operating system, and a record of the pages you visit. We use cookies and similar technologies to collect this data (see our separate Cookie Policy for more details).

• Content Data: When you upload designs or content for a printing order, we collect and store that data to fulfil your request. This data is handled with strict confidentiality.

2. How We Use Your Personal Data

We use your personal data for the following purposes and on the following legal bases:

• To Fulfil Your Order: We use your Identity, Contact, and Transaction data to process your orders, manage your account, and deliver your products. This is necessary to perform our contract with you.

• For Customer Service: We use your data to respond to your queries, resolve issues, and provide support. This is a legitimate interest to ensure we can provide an effective service.

• For Marketing and Communications: With your explicit consent, we may use your Contact data to send you marketing communications about our products, services, and special offers. You can opt out of these communications at any time.

• To Improve Our Services: We use Usage Data and other analytical information to monitor and improve our website, products, and services, and to personalise your experience. This is based on our legitimate interest in growing our business and offering a better service.

• For Legal Compliance: We may process your data to comply with our legal obligations, such as for tax and accounting purposes.

• To Prevent Fraud and Enhance Security: We use your data to protect against fraud, abuse, and other security risks, which is in our legitimate interest.

3. Sharing Your Personal Data

We will only share your personal data with third parties when it is necessary for the purposes outlined in this policy. This may include:

• Service Providers: We may share your data with trusted third-party providers who perform functions on our behalf, such as payment processors, delivery companies (e.g., for shipping your order), and IT support.

• Legal and Regulatory Authorities: We may disclose your data if required by law or to protect our rights, property, or safety, or that of our customers.

• Business Transfers: In the event of a merger, acquisition, or sale of our business, your personal data may be transferred to the new owner, but they will be required to protect your data under a similar privacy policy.

We will never sell your personal data to third parties.

4. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, use, or disclosure. We use SSL encryption to secure data transmitted through our website. However, no internet transmission is entirely secure, and we cannot guarantee the security of data sent to our site; any transmission is at your own risk.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for satisfying any legal, accounting, or reporting requirements. This typically includes a period after the end of our contractual relationship with you to meet legal obligations.

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right to Be Informed: You have the right to be informed about how we collect and use your personal data. This policy serves that purpose.

• Right of Access: You can request a copy of the personal data we hold about you.

• Right to Rectification: You can ask us to correct any inaccurate or incomplete data we hold about you.

• Right to Erasure (Right to be Forgotten): You can request that we delete your personal data in certain circumstances.

• Right to Object: You have the right to object to the processing of your personal data where we are relying on a legitimate interest.

• Right to Restriction of Processing: You can ask us to suspend the processing of your personal data in certain situations.

• Right to Data Portability: You can request to receive your personal data in a structured, machine-readable format.

• Right to Withdraw Consent: Where we rely on your consent to process your data, you can withdraw that consent at any time.

To exercise any of these rights, please contact us using the details below. We will respond to all legitimate requests within one month.

7. Changes to This Privacy Policy

We may update this policy from time to time. Any changes will be posted on this page, and we may notify you via email if the changes are significant.

8. Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer at:

• Email: [info@thepandaprint.co.uk]

This Privacy Policy was last updated on [9/11/25].