Privacy Policy

1. Who We Are

Custom Products is a UK-based e-commerce business selling personalised sublimation products. When we refer to "we", "us", or "our", we mean Custom Products.

---

2. What Data We Collect

We collect the following personal data when you use our site:

• Account information: Name, email address, and password when you register an account.
• Order information: Shipping address, phone number, and payment details (processed securely by Stripe or PayPal — we do not store your card details).
• Uploaded designs: Images you upload to customise products.
• Technical data: IP address, browser type, and pages visited (collected via server logs).

---

3. How We Use Your Data

We use your personal data to:

• Process and fulfil your orders
• Send order confirmation and shipping update emails
• Manage your account
• Respond to customer service enquiries
• Improve our website and services
• Comply with legal obligations

We will never sell your personal data to third parties.

---

4. Cookies

We use the following types of cookies:

Cookie	Type	Purpose	Duration
sessionid	Essential	Keeps you logged in and maintains your shopping cart	2 hours
csrftoken	Essential	Protects against cross-site request forgery attacks	Session
cookie_consent	Essential	Remembers your cookie preferences	1 year
_ga, _ga_*	Analytics (optional)	Google Analytics — measures how visitors use the site so we can improve it. Set only if you choose "Accept All".	Up to 2 years

Essential cookies are always active because the site cannot function without them. We also use optional analytics cookies (Google Analytics) to understand how the site is used. These are not set unless you choose "Accept All" on our cookie banner — if you choose "Essential Only", no analytics cookies are stored. You can withdraw consent at any time by clearing your cookies. We do not use advertising cookies.

---

5. Payment Security

All payments are processed securely through Stripe or PayPal. Your card details are handled entirely by these payment providers and are never stored on our servers. Both providers are PCI DSS Level 1 certified.

---

6. Data Sharing

We share your data only with the following third parties, solely to fulfil our services:

• Stripe / PayPal: Payment processing
• Shipping carriers: Order delivery (name and address only)
• Amazon Web Services (AWS): Secure file storage for product images and uploaded designs
• Brevo: Transactional email delivery
• Google Analytics: Website usage analytics — only if you consent to optional analytics cookies

---

7. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing of your data
• Data portability — receive your data in a portable format
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, please contact us at the email address below.

---

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Order records are kept for 6 years to comply with UK tax and accounting requirements. You can request deletion of your account and associated data at any time.

---

9. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children under 16.

---

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

---

11. Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us:

• hello@custom-products.shop
• United Kingdom

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).