Privacy policy

PRIVACY POLICY (PAPADEN / PAPADEN LTD)

Last updated: 15 July 2026

This Privacy Policy explains how we collect, use, share and protect personal data when you use our store or buy our products. It is written to meet the UK GDPR and the Data Protection Act 2018.

1. Who we are (data controller)

Controller: PAPADEN LTD (trading as "Papaden")

Company number: 15673833

Registered office: 21 West View, Wesham, Preston, England, PR4 3DA

Contact: info@papaden.com

If you have any question about this policy or about your data, email info@papaden.com.

2. Personal data we collect

Identity and contact data: name, email address, billing address, delivery address (for Goods), telephone number if provided.

Order and transaction data: order details, items purchased, timestamps, payment status. Payment card details are handled by our payment processors — we never receive full card numbers.

Personalisation data: names, dates and messages you ask us to put on the artwork; photos or images you upload or send us; optional preferences such as requested facts or events.

Technical data: IP address, device information, browser information, cookies and similar technologies.

Communications: emails and messages to and from customer support, proof approvals and change requests.

3. How we use your data, and our lawful bases

To perform our contract with you — creating and supplying your personalised Digital Content and/or Goods, providing proofs, order updates and customer service. Lawful basis: contract.

To meet legal obligations — accounting, tax and statutory record-keeping. Lawful basis: legal obligation.

To run and secure our business — preventing fraud, securing the store, managing disputes and chargebacks. Lawful basis: legitimate interests.

Marketing — sending marketing emails where you have opted in, or where we are otherwise permitted to do so under the Privacy and Electronic Communications Regulations. Lawful basis: consent, or legitimate interests for existing customers about similar products. You can opt out at any time, in any message or by emailing info@papaden.com.

4. Who we share data with

  • Shopify — e-commerce platform hosting and order management
  • Payment providers — to process payments
  • Email and communications providers — to send order emails and digital delivery links
  • Delivery carriers — to deliver Goods
  • Professional advisers (accountants, legal advisers) — where necessary
  • Fraud prevention and dispute/chargeback services — where required

We share only what is necessary for the relevant purpose. We do not sell your personal data.

5. International transfers

Some service providers may process data outside the UK. Where that happens we rely on safeguards recognised under the UK GDPR, such as the International Data Transfer Agreement or the UK Addendum, or on adequacy regulations where they apply.

6. How long we keep data

  • Order and invoice records: up to 6 years, for UK accounting and tax purposes.
  • Personalisation files and photos: up to 90 days after fulfilment, so we can handle queries and replacements — unless a longer period is needed for an ongoing dispute or legal claim, or you ask us to delete them earlier where we are able to.
  • Customer support communications: up to 24 months, unless needed longer for a dispute or legal reason.

7. Your rights

Subject to legal limits, you have the right to:

  • access your personal data
  • have inaccurate data corrected
  • request deletion, where applicable
  • restrict or object to processing, in certain situations
  • data portability, in certain situations
  • withdraw consent, where processing is based on consent

To exercise any of these, email info@papaden.com. We respond within one month.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator — ico.org.uk, or 0303 123 1113. We would appreciate the chance to address your concern first.

8. Cookies

Cookies help the store function, remember your preferences, measure performance, and support analytics and advertising features where those are enabled. Essential cookies are needed for the store to work — for example to keep items in your basket and to process checkout. Non-essential cookies (analytics, advertising) are only set where you have given consent, and you can change your choice at any time through the cookie settings on the site.

9. Security

We use appropriate technical and organisational measures to protect personal data. No system is completely secure, so please protect your account credentials and contact us at info@papaden.com if you suspect unauthorised access.

10. Children

The store is not intended for children, and we do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was most recently changed.

PAPADEN LTD · Company number 15673833 · 21 West View, Wesham, Preston, England, PR4 3DA · info@papaden.com