What personal information do we collect?

The information we collect depends on how you interact with us.

It may include:

• your name, email address, telephone number, billing address and delivery address;
• account and order information, including products purchased, order history and customer-service records;
• information you provide when requesting a custom quotation, including artwork, project details, specifications and correspondence;
• information you send to us through email, contact forms, social media or other communications;
• technical information such as IP address, browser, device information and website activity;
• marketing preferences and information about how you interact with our emails or website; and
• other information you choose to provide to us.

Payment information is processed through the payment services made available at checkout. We do not need to receive your full payment-card details in order to process an online order.

How do we use your information?

We may use personal information to:

• process and fulfil orders;
• provide quotations and manage custom patch projects;
• arrange delivery, collection, returns and refunds;
• respond to questions, complaints and customer-service requests;
• administer customer accounts;
• maintain business, accounting and transaction records;
• protect our website, customers and business from fraud, misuse and security threats;
• understand and improve our website, services and customer experience;
• send marketing communications where we are permitted to do so; and
• comply with legal and regulatory obligations.

Our legal bases for using personal information

UK data protection law requires us to have a lawful basis for processing personal information.

Who might we share information with?

We only share personal information where there is a business or legal reason to do so.

Depending on the service involved, this may include:

• ecommerce and website service providers;
• payment processors and payment-service providers;
• couriers, postal services and fulfilment providers;
• IT, hosting, security and cloud-service providers;
• email, marketing, analytics and advertising-service providers;
• professional advisers such as accountants or legal advisers;
• regulators, law-enforcement agencies or public authorities where required or permitted by law; and
• another organisation in connection with a sale, restructuring or transfer of all or part of our business.

Some service providers may process information outside the UK. Where international transfers take place, we use appropriate arrangements required by applicable data protection law.

How long do we keep personal information?

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

Different information may therefore be retained for different periods. When information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.

Your data protection rights

Depending on the circumstances, UK data protection law gives you rights relating to your personal information.

Where processing is based on consent, you can withdraw that consent at any time. This does not affect processing that took place before consent was withdrawn.

To exercise a right, email team@patchesrus.co.uk . We may need to verify your identity before acting on a request.

Marketing communications

We may send you marketing communications where you have consented or where another lawful marketing rule permits us to do so.

You can unsubscribe at any time using the unsubscribe link included in marketing communications or by contacting us.

We may retain limited information needed to record and respect an unsubscribe request.

Cookies, analytics & advertising

Our website uses cookies and similar technologies for purposes such as operating the site, remembering preferences, understanding website usage and, where permitted, measuring or personalising advertising.

Where consent is required for non-essential cookies or similar technologies, you can choose whether to allow them through the privacy controls presented on our website.

Children

Our website and services are not intended to knowingly collect personal information from children where doing so would be unlawful.

If you believe personal information relating to a child has been provided to us inappropriately, please contact us.

Keeping information secure

We use appropriate organisational and technical measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

No internet-based system can be guaranteed to be completely secure, but we take reasonable steps to protect the information entrusted to us.

Questions or complaints about your data

If you have a concern about how we have handled your personal information, please contact us first so that we can investigate.

Email: team@patchesrus.co.uk

You also have the right to raise a data protection complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or legal requirements.

The date at the top of this policy shows when it was last updated.