Privacy Policy

1. Overview

We use personal information to run an online shop. This includes taking orders, producing custom printed items, managing customer accounts, operating InkyPoints, processing payments, arranging delivery, answering questions, handling returns and support, sending newsletter emails where you have signed up, protecting our website, and keeping business records.

This Privacy Policy is designed to explain what information we collect, why we collect it, what lawful basis we rely on, who we share it with, how long we keep it, and what rights you have.

We do not sell your personal information.

2. Who we are

InkyCustoms is an independent UK-based business that prints custom slipcovers, replacement insert covers, replica-style covers, and related printed cover products for collectors and personal display use.

In this Privacy Policy, “InkyCustoms”, “Inky”, “IC”, “we”, “us”, and “our” mean InkyCustoms, operated by a UK-based sole trader.

For data protection purposes, InkyCustoms is the controller of the personal information described in this Privacy Policy. This means we decide why and how personal information is used when you interact with our website and services.

3. What this policy covers

This Privacy Policy applies when you:

• Visit or browse inkycustoms.com.
• View products or add items to your basket.
• Place an order through WooCommerce.
• Check out as a guest.
• Create or use a customer account.
• Use your dashboard, order history, addresses, tracking information, coupons, points, or InkyPoints tab.
• Use InkyPoints, referral rewards, birthday rewards, social follow rewards, coupons, or discounts.
• Submit custom artwork links through Google Drive, Dropbox, or similar services.
• Contact us through WPForms, email, support replies, Discord, WhatsApp, or other customer service channels.
• Use the AI chat feature on our website.
• Join our newsletter or receive marketing emails.
• Receive abandoned basket or checkout reminder emails, where enabled and lawfully sent.
• Leave a review, rating, photo review, or feedback, where these features are available.
• Use our website security, anti-spam, checkout, account, or reward systems.

This Privacy Policy does not apply to third-party websites or services that we do not control, such as payment provider websites, Google Drive, Dropbox, Discord, WhatsApp, Royal Mail tracking pages, or social media platforms. Those services may have their own privacy policies.

4. Quick privacy summary

5. Personal information we collect

The personal information we collect depends on how you interact with us. We may collect the categories below.

5.1 Identity information

This may include your name, account name, username, display name, billing name, delivery name, company name where provided, and review display name where reviews are enabled.

5.2 Contact information

This may include your email address, billing address, delivery address, country, region, postcode, telephone number where provided, and contact preferences.

5.3 Order information

This may include your order number, products ordered, product options, selected format, add-ons, order notes, custom instructions, coupon use, InkyPoints redemption, order date, order value, order status, payment status, delivery method, tracking information, return information, and refund information.

5.4 Account information

If you create an account, we may process your login details, saved addresses, dashboard activity, order history, account preferences, coupons, points, InkyPoints information, tracking details, account creation date, and account activity.

5.5 Loyalty and rewards information

If you use InkyPoints, we may process your points balance, points earned, points redeemed, money-off rewards, coupons, reward history, referral activity, birthday reward information, social follow reward activity, expiry dates, reward emails, and information used to detect errors, misuse, duplicate use, fraud, or suspicious activity.

5.6 Payment information

Payment providers may process your payment details. We may receive limited payment-related information such as payment method, payment status, billing details, transaction reference, refund status, risk check results, chargeback status, card brand, or limited card details such as the last four digits where provided by the payment provider.

We do not store your full card number ourselves.

5.7 Custom artwork and file-link information

For custom orders, you may provide links to files hosted on Google Drive, Dropbox, or similar services. We may process the link, file names, file contents, artwork, images, logos, references, instructions, notes, and messages needed to complete the order.

5.8 Support and contact information

This may include WPForms submissions, emails, support messages, Discord messages, WhatsApp messages, AI chat messages, order issue details, return requests, refund requests, photos of products or packaging, and internal support notes.

5.9 Review and feedback information

Reviews are planned but may not currently be active. Where reviews are enabled, we may collect review text, ratings, display names, customer photos, product references, order-related context, and information used to detect fake, misleading, or abusive reviews.

5.10 Marketing information

This may include your newsletter subscription status, double opt-in confirmation, marketing preferences, sign-up date, sign-up source, unsubscribe status, email engagement information, and records showing whether we may send marketing to you.

5.11 Technical information

This may include IP address, browser type, device type, operating system, website session information, pages visited, referring page, approximate location, cookie identifiers, security logs, Turnstile verification data, server logs, and website error information.

5.12 Information we do not intentionally collect

We do not intentionally collect special category personal information, such as health information, biometric information, religious beliefs, political opinions, or similar sensitive information. Please do not send us this type of information unless it is genuinely necessary and we specifically ask for it.

6. How we collect personal information

We collect personal information in the following ways.

7. Why we use personal information and our lawful bases

Under UK data protection law, we need a lawful basis to use personal information. The lawful basis depends on the purpose.

8. Orders and checkout

When you place an order, we collect the information needed to process, confirm, produce, dispatch, and support that order.

Checkout information may include:

• Name.
• Email address.
• Billing address.
• Delivery address.
• Phone number, where provided.
• Company name, where provided.
• Products ordered.
• Order notes.
• Custom instructions.
• Coupon or discount use.
• InkyPoints redemption, where used.
• Payment status.
• Delivery method.
• Order status and tracking information.

Your phone number is not required unless a particular checkout, payment, delivery, or tracking feature needs it. If you provide a phone number, we may use it for order, delivery, payment, support, or tracking-related purposes.

WooCommerce may send order confirmation emails, payment emails, order update emails, dispatch emails, refund emails, and other transactional emails connected to your order.

9. Customer accounts

Customers can check out as guests or create an account. Customer accounts are required to use InkyPoints.

Account features may include:

• Dashboard access.
• Order history.
• Saved billing and delivery addresses.
• Coupons.
• InkyPoints balance.
• InkyPoints tab or reward information.
• Tracking or order status information.
• Customer preferences.

Account information is used to provide these features, secure your account, provide customer support, operate InkyPoints, and maintain order records.

If you want your account deleted, you need to contact us. Account deletion may affect your order history, saved addresses, coupons, InkyPoints balance, reward history, and access to account-only features.

10. InkyPoints and WPLoyalty

We use InkyPoints as our loyalty and rewards feature. InkyPoints is powered by WPLoyalty or related WooCommerce loyalty and rewards tools.

Customers need an account to use InkyPoints.

We may process loyalty-related information such as:

• Your name and email address.
• Your customer account details.
• Your order history.
• Your points balance.
• Points earned from purchases.
• Points earned from referrals.
• Points earned from birthday rewards.
• Points earned from social follow activities.
• Points redeemed for money-off rewards.
• Coupon codes issued through rewards.
• Reward redemption history.
• Reward expiry dates.
• Reward-related email activity.
• Information used to correct points errors or investigate suspicious reward activity.

We use this information to calculate points, show your balance, issue rewards, apply money-off discounts, send reward-related service emails, manage referral rewards, manage birthday rewards, manage social follow rewards, prevent misuse, correct errors, and improve the loyalty experience.

InkyPoints currently expire after 12 months, unless a different expiry period is shown in your account, reward information, or promotion terms.

Reward activity may be checked to prevent misuse, fraud, duplicate use, suspicious activity, or technical errors.

If you request account deletion, some InkyPoints information may be deleted, anonymised, restricted, or retained where we need to keep it for legal, accounting, fraud prevention, dispute, support, or business record purposes.

11. Referral, birthday, and social rewards

InkyPoints may include referral rewards, birthday rewards, and social follow rewards.

Referral rewards

If referrals are enabled, we may process referral links, referral codes, referrer account details, referred customer activity, order status, reward eligibility, and reward history so we can track and apply referral rewards.

Birthday rewards

If birthday rewards are enabled, we may ask for your birthday or birth date information. We use this information only to provide birthday-related rewards, check eligibility, and manage reward records.

You should only provide birthday information if you want to use the birthday reward feature. If you do not provide it, you may not be able to receive birthday rewards.

Social follow rewards

If social follow rewards are enabled, we may process information needed to record reward completion, such as the platform involved, reward campaign activity, completion status, and account or points activity.

Social media platforms may process your information separately under their own privacy policies.

12. Payments

We offer payment methods through third-party payment providers, including Stripe, PayPal, WooPayments, Apple Pay, Google Pay, and card payments through WooPayments.

Payment providers process your payment information. We do not store full card details ourselves.

We may receive payment-related information such as:

• Payment method.
• Payment status.
• Transaction reference.
• Billing details.
• Refund status.
• Chargeback or dispute status.
• Fraud or risk check information.
• Limited card information, such as card brand or last four digits, where provided by the payment provider.

We use payment information to process orders, confirm payment, issue refunds, respond to payment disputes, prevent fraud, and keep accounting records.

Payment providers may act as independent controllers for some of their own processing. Their own privacy notices may apply when you use their payment services.

13. Delivery, tracking, and customs

We use Royal Mail and Royal Mail Click & Drop to help dispatch and manage deliveries.

Delivery information may include:

• Your name.
• Delivery address.
• Email address.
• Phone number, only where required or useful for tracking notifications.
• Order number.
• Package details.
• Shipping method.
• Tracking number, where tracking is available.
• Customs description and value for international orders.

If your item has tracking, tracking information may be included in your email or order details.

For international orders, customer and order information may be included on customs forms, shipping labels, import paperwork, delivery systems, postal handover systems, and local delivery systems in the destination country.

Delivery providers and customs authorities may process your information according to their own legal obligations and privacy policies.

14. Custom artwork, Google Drive, Dropbox, and file links

For custom orders, customers may upload artwork, images, references, or files to services such as Google Drive or Dropbox and submit a link before adding the product to the basket.

We do not currently collect direct file uploads through the website for custom artwork. Custom files are not stored directly in WordPress or WooCommerce as website uploads.

We may process:

• The file link you provide.
• File names.
• Artwork, images, references, and instructions in the linked files.
• Custom order notes.
• Messages about the custom order.
• Production notes needed to complete the order.

We use custom artwork and files only to review, prepare, print, complete, and support your order.

We delete our copies of custom artwork every 30 days.

The original file stored in your Google Drive, Dropbox, or other file-sharing account is controlled by you and the relevant platform. If you want to remove access to that original file, you should manage or delete it through your own file-sharing account.

Please do not include unnecessary personal information in custom files, file names, folders, links, or notes.

We will not use customer-supplied custom artwork for marketing, product examples, social media, or public display unless you separately give permission.

15. Contact forms and customer support

We use WPForms for contact forms. Contact form submissions may be saved in WordPress/admin and emailed to us.

When you contact us, we may process:

• Your name.
• Email address.
• Order number, where provided.
• Message content.
• Support issue details.
• Return, refund, or replacement details.
• Photos or attachments sent later by email if we ask for them.
• Internal notes about the support request.

Contact forms do not currently allow customers to attach files. If we need photos or files to help with a support issue, we may ask you to reply by email or provide them another way.

We use support information to answer questions, resolve order issues, handle returns or refunds, investigate problems, provide customer service, and maintain records.

16. AI chat

Our website may use an AI chat feature, including AI Chat by PureThemes or similar tools, to help answer customer questions or guide visitors around the website.

If you use the AI chat, it may process information such as:

• Your chat messages.
• Pages you are viewing.
• Basic technical information such as IP address, browser, device, and session information.
• Information needed to operate the chat feature.

Please do not send sensitive information, payment details, passwords, private account information, or unnecessary personal information through the AI chat.

AI chat responses may not always be accurate or complete. For order-specific support, returns, refunds, custom order issues, or privacy requests, please contact us through our Contact Us page.

17. Reviews, ratings, and customer photos

Reviews are planned but may not currently be active. If reviews are enabled, customers may be able to leave reviews, ratings, comments, or photos.

Review information may include:

• Your review text.
• Your rating.
• Your display name or name shown with the review.
• Customer photos, where photo reviews are enabled.
• The product reviewed.
• Order-related context used to confirm authenticity.
• Information used to detect fake, misleading, abusive, spam, or manipulated reviews.

Reviews may be displayed publicly on product pages or other parts of the website.

If customer photos are submitted with a review, they may also be displayed with the review or used in website areas that showcase customer feedback, where permitted by the review feature and applicable law.

We may use customer reviews and photos for product pages, homepage content, social media, or marketing emails only where appropriate and where we have a lawful basis to do so.

If you want a review or photo removed or anonymised, please contact us. We will consider your request in line with applicable law, our legitimate business interests, and any technical limits of the review system.

18. Newsletter and marketing emails

We use Brevo and Make for newsletter and marketing-related workflows.

We send marketing emails to newsletter subscribers using double opt-in. This means you may need to confirm your subscription by email before receiving marketing.

Marketing emails may include:

• Product updates.
• New releases.
• Restocks.
• Collector-related updates.
• Offers and promotions.
• InkyCustoms news.
• InkyPoints or loyalty campaigns where they are promotional.

For marketing, we may process your email address, name where provided, subscription status, double opt-in confirmation, consent records, sign-up source, unsubscribe status, email engagement information, and campaign activity.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us through our Contact Us page.

We do not currently send SMS marketing, push notifications, or marketing emails to previous customers using the soft opt-in route.

We do not sell your personal information to third parties for their own direct marketing.

19. Abandoned basket and checkout emails

We may send abandoned basket or checkout reminder emails where this feature is enabled and lawfully configured.

These emails may use information such as your email address, basket contents, checkout activity, products viewed or selected, coupon activity, and customer account status.

Abandoned basket emails can sometimes be treated as marketing depending on how they are set up and what they contain. We aim to send these emails only where permitted and in line with your marketing preferences or consent settings.

You can unsubscribe from marketing-style emails using the unsubscribe link or by contacting us.

20. Service messages

Service messages are different from marketing emails. Even if you unsubscribe from marketing, we may still send important messages that relate to your order, account, rewards, security, or legal information.

Service messages may include:

• Order confirmations.
• Payment confirmations or payment issues.
• Dispatch and delivery updates.
• Tracking information.
• Return, refund, or replacement updates.
• Customer support replies.
• Password reset emails.
• Account security messages.
• InkyPoints earned or redeemed messages.
• Reward expiry or reward status messages.
• Important legal, privacy, or security notices.

21. Cookies and similar technologies

Our website uses cookies and similar technologies to make the website work, operate WooCommerce, manage baskets and checkout, support accounts, operate InkyPoints, protect against spam and bots, and maintain security.

Based on our current setup, we do not currently use analytics cookies, advertising cookies, pixels, or session recording tools.

We do not currently use a cookie banner or consent plugin. If we add non-essential cookies, analytics, advertising pixels, remarketing, session recording, or similar tracking tools in future, we should update this Privacy Policy and add a proper cookie consent tool where required.

You can usually control cookies through your browser settings. If you block cookies, some parts of the website may not work properly, including basket, checkout, account, security, and InkyPoints features.

22. Analytics, advertising, and tracking

Based on our current setup, we do not currently use:

• Google Analytics.
• Google Search Console.
• Microsoft Clarity.
• Hotjar.
• Session recording tools.
• Meta/Facebook Pixel.
• TikTok Pixel.
• Google Ads conversion tracking.
• Pinterest tag.
• Snapchat Pixel.
• Reddit Pixel.
• Affiliate tracking.
• Other advertising pixels.

If we add analytics, advertising pixels, conversion tracking, remarketing, affiliate tracking, or session recording in future, we will update this Privacy Policy and, where required, ask for cookie or tracking consent.

WooCommerce, WordPress, Hostinger, Cloudflare, and security tools may still generate operational, technical, or security logs needed to run and protect the website.

23. Security, anti-spam, and fraud prevention

We use security and anti-spam measures to protect the website, customers, accounts, checkout, forms, payment systems, coupons, and InkyPoints.

We use Cloudflare and Cloudflare Turnstile to help protect the website from bots, spam, suspicious activity, automated abuse, and security threats.

Security information may include:

• IP address.
• Device and browser information.
• Website session information.
• Turnstile verification information.
• Form activity.
• Checkout activity.
• Account activity.
• Order and payment risk indicators.
• Coupon and InkyPoints activity.
• Technical and server logs.

We may use this information to block bots, prevent spam, detect suspicious orders, prevent fraud, prevent abuse of discounts or rewards, protect accounts, investigate technical issues, and secure the website.

We do not currently log failed login attempts ourselves, but Cloudflare, Hostinger, WordPress, WooCommerce, or other security tools may process security logs depending on how the website and hosting are configured.

24. Who we share personal information with

We share personal information only where needed to run the website, process orders, provide services, protect the business, comply with law, or use the tools described in this Privacy Policy.

We do not outsource printing, packing, fulfilment, or customer support at this time.

We do not sell your personal information.

25. Third-party tools we use

Our website and business may use the following tools and services.

If our tools change, this section should be updated so it continues to match the website’s actual setup.

26. International transfers

We are based in the United Kingdom, but some customers, service providers, payment providers, website tools, email providers, automation tools, cloud storage platforms, delivery partners, and technology providers may be located outside the UK.

This means personal information may sometimes be processed, accessed, or stored outside the UK.

Examples include:

• International delivery information used for customs and overseas postal handling.
• Payment information processed by payment providers operating internationally.
• Newsletter or automation information processed by Brevo or Make.
• Cloud storage links provided through Google Drive or Dropbox.
• Security information processed by Cloudflare.
• Messages sent through Discord or WhatsApp.

Where required, we aim to use appropriate safeguards for international transfers, such as using providers in countries recognised as providing adequate protection, using contractual safeguards, or relying on another lawful transfer mechanism.

27. How long we keep personal information

We keep personal information only for as long as reasonably needed for the purposes described in this Privacy Policy, including order fulfilment, customer support, accounting, tax, legal, security, fraud prevention, dispute, and business record purposes.

We may anonymise information so that it no longer identifies you. We may use anonymised information for business analysis, website improvement, reporting, and planning.

28. Your data protection rights

Depending on your location and the circumstances, you may have rights over your personal information.

These may include the right to:

• Ask for access to personal information we hold about you.
• Ask us to correct inaccurate or incomplete personal information.
• Ask us to delete personal information in certain circumstances.
• Ask us to restrict how we use personal information in certain circumstances.
• Object to our use of personal information in certain circumstances.
• Ask for a copy of certain personal information in a portable format.
• Withdraw consent where we rely on consent.
• Complain to the UK Information Commissioner’s Office.

These rights are not absolute. They may depend on the type of information, the lawful basis we rely on, whether we need to keep information for legal or tax reasons, whether we need it for disputes or fraud prevention, and whether another legal exception applies.

To make a privacy request, please contact us through our Contact Us page.

We may need to ask for information to confirm your identity before responding to a request.

29. Account deletion

If you have a customer account and want it deleted, please contact us through our Contact Us page.

Account deletion may affect:

• Your ability to log in.
• Your saved addresses.
• Your dashboard access.
• Your order history display.
• Your coupons.
• Your InkyPoints balance.
• Your reward history.
• Your ability to access account-only features.

We may still need to keep certain information after account deletion, such as order records, payment records, refund records, tax records, support records, fraud prevention records, dispute records, and legal records.

Where we cannot delete information completely, we may restrict, archive, or anonymise it where appropriate and technically possible.

30. Children

Our website and products are intended for customers who can lawfully place orders or use the website with appropriate permission.

You must be at least 18 years old to place an order with us. If you are under 18, you should only use the website or place an order with permission from a parent or legal guardian.

We do not knowingly collect personal information from children for marketing purposes.

If you believe a child has provided personal information to us without appropriate permission, please contact us so we can review the situation.

31. Discord, WhatsApp, and social messages

Customers may sometimes contact us through Discord, WhatsApp, or other social or messaging platforms.

If you contact us this way, we may process your username, profile name, phone number where visible, message content, order information you provide, files or photos you send, and support history.

We use this information to respond to your message, provide customer support, answer questions, and resolve order issues.

Discord, WhatsApp, and other platforms are not controlled by us. They may process your information under their own privacy policies and platform rules.

Please do not send payment details, passwords, sensitive information, or unnecessary personal information through social or messaging platforms.

32. Third-party links and external services

Our website may link to third-party websites and services, including payment pages, delivery tracking pages, file-sharing platforms, social media platforms, Discord, WhatsApp, and other external services.

We are not responsible for the privacy practices, content, security, or policies of third-party websites or services that we do not control.

You should read the privacy policies of third-party services before providing personal information to them.

33. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will be posted on this page with the updated date at the top.

We may update this Privacy Policy to reflect changes to our website, products, plugins, payment providers, delivery providers, InkyPoints, reviews, marketing tools, cookies, security tools, legal requirements, or business operations.

If we make significant changes, we may take additional steps to notify you where appropriate, such as by website notice, checkout notice, account notice, or email.

34. Contact and complaints

If you have questions about this Privacy Policy or how we use your personal information, please contact us through our Contact Us page:

inkycustoms.com/contact-us

If you are unhappy with how we use your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner’s Office, which is the UK regulator for data protection.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk