Privacy Policy

Below is a concise, UK‑style privacy notice you can use as a base for your small ecommerce site. Edit the parts in [square brackets] to match your details.

Privacy Notice

1. Who we are

[Project Original] (“we”, “us”) is a small online store based in the UK selling printed‑to‑order T‑shirts and merchandise. You can contact us at: [email address] and [postal address].

2. What data we collect

We collect:

• Contact details (name, email, postal address, phone number)

• Order details (products, sizes, pricing, dates)

• Payment information (processed securely by our payment providers – we do not store full card details)

• Website usage data such as IP address, browser type and pages visited via cookies/analytics.

3. How we use your data

We use your personal data to:

• Process and deliver your orders

• Handle payments, refunds and customer service

• Send important order updates and service messages

• With your consent, send marketing emails you can unsubscribe from at any time

• Maintain business records and meet legal or tax obligations.

4. Legal bases for processing

We process your data because it is:

• Necessary to perform a contract with you (fulfilling your order)

• Necessary for our legitimate interests (running and improving our business)

• Required to comply with legal obligations (tax, accounting)

• Based on your consent for optional marketing.

5. Sharing your data

We share personal data only with trusted third parties who help us run the shop, including:

• Payment providers (for taking secure payments)

• Print‑on‑demand and fulfilment partners (to produce and ship your order)

• Delivery and postal services

• IT, hosting and analytics providers.
  They only receive the data they need and must keep it secure.

6. Data storage and retention

Your data is stored securely in the UK or EEA (or countries with adequate protection or appropriate safeguards). We keep personal data only for as long as needed for orders, records and legal requirements, then delete or anonymise it.

7. Your rights

Under UK GDPR you have the right to:

• Access a copy of your personal data

• Correct inaccurate data

• Request deletion of your data (where applicable)

• Object to or restrict certain processing

• Withdraw consent for marketing at any time

• Lodge a complaint with the ICO (www.ico.org.uk).[4]​

To exercise your rights, contact us at [email address].​

8. Changes to this notice

We may update this notice from time to time. The latest version will always be available on this page, with the date of the most recent revision.