Privacy policy
Last updated: 10 May 2026
1. About Us This Privacy Policy describes how KM Designs & Printing ("we", "us", "our") collects, uses, and protects your personal data when you visit kmdesignsandprinting.com and place an order with us. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller KM Designs & Printing is the data controller for personal data collected through this website. You can contact us at kmdesigns206@gmail.com with any data-related queries.
3. What Data We Collect We may collect and process the following personal data:
- Contact details — name, email address, phone number
- Delivery information — shipping address
- Payment information — processed securely via Shopify Payments; we do not store card details
- Personalisation data — names, dates, photos, custom text, and other content you provide for personalised orders
- Order history — details of products purchased
- Technical data — IP address, browser type, device information, and cookies
- Marketing preferences — if you opt in to marketing communications
4. How We Use Your Data We use your personal data to:
- Process and fulfil your orders, including personalised items
- Communicate with you about your order status
- Respond to enquiries and customer service requests
- Send marketing emails where you have given consent
- Improve our website and customer experience
- Comply with legal obligations
5. Personalisation Data When you place an order for a personalised product, you may provide us with personal information relating to yourself or a third party (e.g. a gift recipient's name). By submitting this information, you confirm you have the right to share it with us for the purpose of fulfilling your order. This data is used solely to produce your personalised item and is not shared with third parties beyond what is necessary for fulfilment.
6. Legal Basis for Processing We process your data on the following legal bases:
- Contract — to fulfil your order
- Legitimate interests — to improve our services and prevent fraud
- Consent — for marketing communications (you can withdraw consent at any time)
- Legal obligation — where required by law
7. Sharing Your Data We do not sell your personal data. We may share it with trusted third parties only where necessary, including:
- Shopify — our e-commerce platform (see Shopify's Privacy Policy)
- Payment processors — to handle secure payments
- Delivery carriers — to fulfil and ship your order
- Email marketing platforms — where you have opted in to communications
8. Cookies Our website uses cookies to improve your browsing experience, analyse traffic, and support marketing. You can manage your cookie preferences via the cookie banner on our website. For more detail, please refer to our Cookie Policy.
9. Data Retention We retain your personal data for as long as necessary to fulfil your order and comply with legal obligations. Order records are typically retained for 7 years in line with HMRC requirements.
10. Your Rights Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing of your data
- Withdraw consent for marketing at any time
To exercise any of these rights, contact us at kmdesigns206@gmail.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
11. Data Security We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. All payment data is processed securely via Shopify's encrypted platform.
12. Changes to This Policy We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically.
13. Contact For any privacy-related queries, please contact us at kmdesigns206@gmail.com.