Privacy.

Who we are

This site is operated under the trading name "BigSkid" by [TRADER], a sole trader based in the UK. Trading address: [TRADING_ADDRESS]. For any privacy question, email [email protected].

The proprietor is the data controller for personal data collected through bigskid.co.uk.

What we collect and why

When you place an order

• Name, delivery address, billing address, email, phone number.
• Lawful basis: performance of the contract between you and us.
• We pass these details to our print and fulfilment partner (Printify, Inc.) and to the carrier (Royal Mail, DPD or equivalent) so the order can be made and delivered.

When you pay

• Payment is processed by Stripe Payments UK Ltd and/or PayPal (Europe) S.à r.l. We never see your full card details.
• Lawful basis: performance of the contract.

When you sign up for the newsletter

• Email address.
• Lawful basis: your consent. You can withdraw at any time using the unsubscribe link in any email.

When you browse the site

• Standard technical data: IP address, browser, device, pages viewed, referring URL.
• Cookies for site function and, with your consent, analytics via Google Analytics 4.
• Lawful basis: legitimate interest (essential function) and consent (analytics).

How long we keep it

• Order data: 6 years from the date of order, in line with HMRC record-keeping rules.
• Newsletter subscribers: until you unsubscribe.
• Analytics: at the retention period set in Google Analytics (currently 14 months).

Who we share it with

• Printify, Inc. (USA) -- order production and fulfilment.
• Royal Mail / DPD / equivalent (UK and EU) -- delivery.
• Stripe Payments UK Ltd / PayPal -- payment processing.
• Brevo (formerly Sendinblue) -- newsletter delivery, if you've opted in.
• Google -- analytics, if you've consented to analytics cookies.

We do not sell your data, ever.

International transfers

Some of our processors are based outside the UK (notably Printify and Google in the US). Transfers are protected by the UK International Data Transfer Agreement or equivalent adequacy mechanism.

Your rights

Under UK GDPR you have the right to:

• Ask for a copy of the data we hold on you.
• Ask us to correct anything inaccurate.
• Ask us to delete your data, where there's no legal reason to keep it.
• Withdraw consent for analytics or newsletter at any time.
• Complain to the Information Commissioner's Office (ico.org.uk) if you think we've handled your data badly.

To use any of these rights, email [email protected]. We'll respond within 30 days.

Cookies

We use the minimum cookies needed to run the site (session, basket, security) and, with your consent, analytics cookies to help us understand what's working. The consent banner manages this; you can change your choice at any time.

Changes to this policy

If we change anything material, we'll update the date at the top of this page and, if you have an account, email you.