1. Introduction
District Print ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our website and services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
District Print is the data controller responsible for your personal data. If you have questions about this policy, contact us at: privacy@districtprint.co.uk
3. Information We Collect
We may collect the following categories of personal data:
- Identity Data: name, username, title
- Contact Data: email address, telephone number, billing and delivery addresses
- Transaction Data: details of products you have purchased from us, payment details
- Technical Data: IP address, browser type, device information, cookies
- Usage Data: how you use our website, products, and services
- Design Data: files, images and designs you upload to our platform
4. How We Use Your Data
We process your personal data for the following purposes:
- To fulfil and deliver your orders
- To manage your account and provide customer support
- To process payments securely
- To send service-related communications
- To improve our website and services
- To comply with legal obligations
5. Legal Basis for Processing
We rely on the following lawful bases under UK GDPR Article 6:
- Contract: Processing necessary for the performance of a contract with you
- Legitimate Interests: Where processing is in our legitimate business interests
- Consent: Where you have given specific consent (e.g. marketing emails)
- Legal Obligation: Where we need to comply with a legal requirement
6. Data Sharing
We may share your data with trusted third parties including payment processors, delivery partners, and cloud hosting providers. We do not sell your personal data.
7. Data Retention
We retain your personal data only for as long as necessary for the purposes it was collected, or as required by law. Order data is typically retained for 6 years for tax and legal purposes.
8. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data (Subject Access Request)
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise these rights, contact us at privacy@districtprint.co.uk. We will respond within one month.
9. International Transfers
If we transfer data outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR.
10. Complaints
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
11. Updates
We may update this policy from time to time. The latest version will always be available on our website.
Last updated: [Date]