Privacy Policy

At Engavory and Ink & Engrave, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, purchase our retail products, or contract our custom studio services.

Kirsten Graham (operating as a Sole Trader) is the data controller responsible for your personal information across both the Engavory and Ink & Engrave brands.

• Business Address: Suite No: 13075, Icon Offices, 182–184 High Street, North East Ham, London, E6 2JA, United Kingdom.

• Primary Compliance Email: kirsty@engravory.com
   

2. What Information We Collect

We collect and process the following categories of data:

• Identity & Contact Data: Your name, billing address, delivery address, email address, and phone number when you fill out a form, place a shop order, or book a custom commission.

• Transaction Data: Details about payments made to us and details of products or services you have purchased from our store or studio. (Note: We do not store financial card details; these are processed securely by our third-party payment gateways).

• Technical & Usage Data: Your IP address, browser type, operating system, pages visited, and analytics data detailing how you interact with our website.
   

3. How We Use Your Information & Our Legal Basis

Under the UK GDPR, we only process your data when we have a valid legal basis to do so

Purpose / Activity Type of Data Legal Basis for Processing

To fulfil shop orders, custom commissions, and deliver digital downloads Identity, Contact, Transaction Performance of a contract with you

To respond to contact forms, project briefs, and customer support inquiries Identity, Contact Legitimate interests (to efficiently manage customer care)

To process secure transactions and protect against fraudulent activity Technical, Transaction Performance of a contract / Legal obligation

To send marketing updates or newsletters (if opted-in)Identity, Contact Consent (can be withdrawn at any time)

To optimize website performance, layout, and troubleshooting Technical, Usage Legitimate interests (to improve our business offerings)
 

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, remember your shopping basket items, analyse our web traffic, and personalize promotional content.

You can manage or disable cookies at any time through your individual browser settings. For specific details regarding the cookies we use, please refer to our dedicated Cookie Policy on-site.
 

5. Third-Party Data Sharing

We do not sell your personal data. We only share your information with trusted third-party service providers necessary to run our business and complete your orders:

• Payment Processors: Secure transaction handling via Square (or other available on-site processors).

• Delivery & Fulfilment: Postal and courier networks (such as Royal Mail, DPD, or UPS) to ship your physical items.

• Website Analytics & Marketing: Google Analytics for monitoring traffic, and Meta pixels for advertising optimization.

All third-party partners are contractually required to respect the security of your personal data and treat it in accordance with UK data laws. Where data must be transferred outside the UK, appropriate safety protocols (such as Standard Contractual Clauses) are strictly enforced.
 

6. Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes we collected it for.

• Business & Tax Records: By UK law, transaction history and contact records related to physical sales and custom invoices must be securely held for 6 years for tax and accounting audits.

• Digital Support: Account details linked to ongoing digital download access remain active unless you request account deletion.
   

7. Data Security

We implement strict technical and organizational security protocols to protect your personal data from accidental loss, unauthorized access, alteration, or disclosure. In the event of any suspected personal data breach, we have procedures in place to notify you and the Information Commissioner’s Office (ICO) where legally required.
 

8. Your Legal Rights

Under the UK GDPR, you hold significant rights regarding your data. You can request to:

• Access a copy of the personal data we hold about you.

• Correct any incomplete or inaccurate information.

• Erase your personal data (the "right to be forgotten"), provided it does not conflict with our legal tax retention obligations.

• Object to or Restrict the processing of your data.

• Withdraw Consent at any time for promotional emails by clicking 'unsubscribe'.

To exercise any of these rights, please contact us at kirsty@engravory.com. If you feel your data has not been handled correctly, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
 

9. Children's Privacy

Our store and custom studio services are not intended for children under the age of 13. We do not knowingly collect personal data from children. If you discover that a child has provided us with personal information, please contact us immediately so it can be securely removed from our databases.
 

10. Changes to this Policy

We may periodically update this Privacy Policy to reflect operational, legal, or regulatory modifications. Any adjustments will be posted directly to this page with an updated "Last updated" date at the very top.
 

11. Contact & Questions

If you have any questions regarding this Privacy Policy or how your personal information is managed, please contact the appropriate brand inbox:

• For general privacy queries, data access requests, or Engavory custom projects: kirsty@engravory.com

• For queries specifically relating to Ink & Engrave online shop accounts or retail orders: kirsty@inkandengrave.com
  
  
   

​