Who we are

Bollington Printshop Ltd (“we,” “us,” or “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. We trade from The Old Stables, Queen Street, Bollington SK10 5PS.

Our website address is: https://bollingtonprintshop.co.uk/

What personal data we collect and why we collect it

Information You Give Us

• Name and contact details (email address, phone number, postal address)
• Billing information
• Project specifications and requirements
• Communication preferences
• Order history

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

How We Use Your Information

We process your personal data for the following purposes:

Contractual Necessity

• To provide our design and print services
• To process your payments
• To deliver your orders
• To communicate about your projects

Legitimate Interests

• To send you information about similar products and services we offer
• To improve our services
• To maintain our business records
• To prevent fraud

With Your Consent

• To send you marketing communications about our products and services
• To analyse your preferences and personalise our communications
• To retain your contact information for future service offers

Opt-in

When you provide your email address, we will ask for your explicit consent to send marketing communications. This consent can be given by:

• Ticking a checkbox during checkout
• Signing up for our newsletter
• Requesting information about our services

Opt-out

You can withdraw your consent at any time by:

• Clicking the ‘unsubscribe’ link in our emails
• Contacting us directly

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Data Retention

We will retain your personal data for:

• Active customers: Duration of the business relationship plus 6 years
• Marketing purposes: Until consent is withdrawn
• Financial records: 7 years (as required by law)
• Project files: 6 years from project completion

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of digital data
• Secure physical storage
• Staff training on data protection
• Regular security assessments
• Access controls and authentication

Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (‘right to be forgotten’)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent
• Lodge a complaint with the ICO

Data Sharing

We may share your data with:

• Payment processors
• Delivery services
• Cloud storage providers
• IT service providers

All third-party processors are GDPR-compliant and bound by data processing agreements.

 This policy was updated on 30th December 2024.