GDPR Privacy Notice

Introduction

This GDPR Privacy Notice explains how EverFold Ltd ('we', 'us', or 'our') collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

EverFold Ltd is the data controller for the personal data we process about you.

Our Contact Details

Data Controller:
EverFold Ltd
PO Box 9723
Bristol
BS34 9NT
United Kingdom

Email: hello@everfold.co.uk

Company Number: 16498912

What Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, username
• Contact Data: Email address, billing address, delivery address, phone number
• Financial Data: Payment information (processed securely by Stripe; we do not store full card details)
• Transaction Data: Details about payments, orders, and purchases
• Technical Data: IP address, browser type, device information, cookies
• Usage Data: Information about how you use our website and services
• Marketing Data: Your preferences in receiving marketing communications
• Image Data: Photos you upload to create colouring books

How We Collect Your Data

We collect personal data through:

• Direct interactions (when you fill in forms, place orders, or contact us)
• Automated technologies (cookies, server logs, analytics)
• Third parties (payment processors like Stripe, analytics providers)

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary to fulfil our contract with you (order processing, delivery)
• Legal Obligation: Processing necessary to comply with the law (tax records, consumer protection)
• Legitimate Interests: Processing for our legitimate business interests (fraud prevention, website improvement), provided your rights don't override these interests
• Consent: Where you have given explicit consent (marketing emails)

How We Use Your Data

We use your personal data for the following purposes:

• To process and deliver your orders
• To manage payments and prevent fraud
• To communicate with you about your orders
• To provide customer support
• To send marketing communications (with your consent)
• To improve our website and services
• To comply with legal obligations
• To process images for creating your colouring books

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

• Order and transaction data: 6 years (for tax and accounting purposes)
• Marketing data: Until you withdraw consent or unsubscribe
• Uploaded images: Deleted after order completion (unless you save a draft)
• Account data: While your account remains active, plus 2 years

Your Data Protection Rights

Under UK GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure ('Right to be Forgotten'): Request deletion of your data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at hello@everfold.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO Contact:
Website: www.ico.org.uk
Phone: 0303 123 1113

Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• SSL/TLS encryption for data in transit
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Secure payment processing via PCI DSS compliant providers

Data Transfers

We primarily process data within the United Kingdom and European Economic Area (EEA). If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Cookies

For information about cookies and similar technologies we use, please see our Cookie Policy.

Changes to This Notice

We may update this privacy notice from time to time. We will notify you of any significant changes by posting the new notice on this page with an updated date.

Contact Us

If you have any questions about this GDPR Privacy Notice or our data protection practices, please contact us:

Email: hello@everfold.co.uk

Address:
EverFold Ltd
PO Box 9723
Bristol
BS34 9NT
United Kingdom