Privacy policy

Privacy Policy – DiskCrafters

1. Data Controller

DiskCrafters is the data controller responsible for your personal data under UK data protection law.

2. Introduction

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our Shopify store or use our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. Information We Collect

We may collect and process the following personal data:

Name
Email address
Phone number
Billing and shipping address
Payment information (processed securely via third-party payment providers)
Order history and transaction details
IP address, browser type, and device information
Communications you send to us

We do not store full card payment details on our systems.

4. How We Use Your Information

We use your personal data for the following purposes:

Processing and fulfilling orders
Managing payments and refunds
Providing customer support
Communicating order updates
Improving our services and website functionality
Preventing fraud and misuse
Sending marketing communications (only where permitted)

5. Legal Basis for Processing

We process your personal data under the following lawful bases:

Contract: to process and deliver your orders
Legal obligation: for tax, accounting, and regulatory compliance
Legitimate interests: to operate, improve, and secure our business
Consent: for marketing communications where required

6. Marketing Communications

We may send marketing emails where:

You have opted in, or
You are an existing customer and have not opted out (soft opt-in)

You may opt out at any time by clicking “unsubscribe” in emails or contacting us directly.

7. Sharing Your Information

We do not sell or rent your personal data.

We may share your data with trusted third parties, including:

Payment processors
Shipping and courier companies
IT and hosting providers
Shopify and integrated service providers

We may also disclose data if required by law or legal process.

8. File Uploads and Customer Content

When using our services, you may upload artwork, audio files, or other materials (“Customer Content”).

We process Customer Content solely for the purpose of fulfilling your order.

We do not review Customer Content for legal compliance, copyright ownership, or licensing status.

You are solely responsible for ensuring that all uploaded content is lawful and does not infringe any third-party rights.

Where third-party file-sharing services are used (such as Google Drive, WeTransfer, Dropbox, or similar), you are responsible for understanding and managing the access permissions of those platforms.

We are not responsible for any unauthorised access resulting from third-party file-sharing systems.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, or alteration.

However, no system of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy.

Order and transaction data is typically retained for up to 6 years to comply with tax, accounting, and legal obligations.

11. Your Rights

Under UK data protection law, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data (where legally applicable)
Restrict or object to processing
Request data portability
Withdraw consent at any time (where applicable)

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk

12. Customer Uploaded Content Disclaimer

We process all uploaded files strictly for the purpose of fulfilling your order.

We do not provide legal review, copyright clearance, or verification of uploaded materials.

Responsibility for ensuring lawful use of all submitted content rests entirely with the customer.

13. Images and Marketing Use of Products

By placing an order, you grant us permission to use images or recordings of finished physical products for marketing purposes, including on our website and social media platforms.

You may opt out of this at any time by contacting us before production begins.