Privacy Policy

1. Who We Are

Irononpatches.UK is responsible for handling your personal data (also known as the "data controller").

2. Information We Collect

We may collect and process the following types of personal data:

A. Information You Provide Directly

• Full name
• Email address
• Phone number
• Billing and shipping address
• Order details (including custom patch designs)
• Account login details (if you create an account)
• Messages, inquiries, or support requests

B. Payment Information

We do not store your full payment details. Payments are processed securely by trusted providers such as Stripe or PayPal.

C. Automatically Collected Data

• IP address
• Browser type and version
• Device type and operating system
• Referring URLs
• Pages you visit and how long you stay
• Date and time of your visit

D. Cookies and Tracking Data

We use cookies and similar technologies to improve your experience and understand how visitors use our website (see Section 8).

3. How We Use Your Data

We use your personal data to:

• Process and deliver your orders
• Handle payments and refunds
• Communicate with you about orders or inquiries
• Provide customer support
• Personalise your experience on our website
• Improve our products, services, and website performance
• Send marketing emails (only if you have given consent)
• Meet legal and regulatory requirements
• Prevent fraud and protect our business

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal grounds:

• Contractual necessity – to process and deliver your orders
• Legal obligation – to comply with tax and legal requirements
• Legitimate interests – to improve services, ensure security, and prevent fraud
• Consent – for marketing communications and non-essential cookies

5. How We Share Your Data

We may share your personal data with trusted third parties, including:

• Payment providers (e.g., Stripe, PayPal)
• Delivery and courier companies
• Website hosting providers
• Analytics services (e.g., Google Analytics)
• Marketing platforms (if you opt in)

These parties only use your data to provide their services and are required to keep it secure.

6. International Data Transfers

Some of our service providers may process your data outside the UK. When this happens, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations
• Standard Contractual Clauses (SCCs)

7. Data Retention

We only keep your data for as long as necessary:

• Order information: up to 6 years (for legal and tax purposes)
• Marketing data: until you withdraw consent
• Account data: until you request deletion

8. Cookies

We use cookies to:

• Make the website work properly
• Understand how visitors use the site
• Remember your preferences
• Show relevant advertisements

Types of cookies we use:

• Essential cookies – required for basic functionality
• Analytics cookies – help us improve the website
• Marketing cookies – used for advertising

You can control or turn off cookies in your browser settings or via our cookie banner.

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent at any time
• Request a copy of your data (data portability)

You also have the right to file a complaint with the UK Information Commissioner's Office (ICO): https://www.ico.org.uk

10. Data Security

We take reasonable steps to protect your data, including:

• Secure servers
• SSL encryption
• Restricted access to information

However, no method of transmitting data online is completely secure.

11. Third-Party Links

Our website may contain links to other websites. We are not responsible for their content or how they handle your data.

12. Children's Privacy

Our website is not intended for children under 13, and we do not knowingly collect their personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a new effective date.