Data Protection and Confidentiality Policy

The Card Project UK Ltd, we are committed to protecting the privacy and confidentiality of our customers' personal data. This Data Protection and Confidentiality Policy outlines how we collect, use, store, and disclose personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Scope

This policy applies to all personal data collected, processed, and stored by The Card Project UK Ltd in the course of our business activities.

Collection of Personal Data

We collect personal data from customers solely for the purpose of fulfilling orders and providing customer support. This may include:

• Name
• Address
• Photographs submitted for card personalization
• Contact information (email, phone number)

Use of Personal Data

Personal data collected by The Card Project UK Ltd is used only for the following purposes:

• Processing orders and delivering products
• Communicating with customers regarding their orders and inquiries
• Providing customer support and resolving issues
• Improving our products and services

Storage and Security

All personal data collected by The Card Project UK Ltd is stored securely on our internal SQL database, which is accessible only by authorized personnel within our network. We employ industry-standard security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.

No payment information is stored at The Card Project as we use a third party payment gateway (Stripe)

Disclosure of Personal Data

We do not disclose personal data to third parties except in the following circumstances:

• When necessary to fulfill orders (e.g., sharing delivery details with shipping carriers)
• When required by law or legal process
• When necessary to protect the rights, property, or safety of The Card Project UK Ltd, our customers, or others

Retention of Personal Data

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Customers may request the deletion of their personal data at any time, subject to any legal obligations or legitimate business interests.

Consent

By using our website and providing personal data, customers consent to the collection, processing, and storage of their data as described in this policy.

Updates to this Policy

We may update this Data Protection and Confidentiality Policy from time to time to reflect changes in our business practices or legal requirements. Any updates will be posted on our website.

Contact Information

For inquiries regarding this policy or the handling of personal data by The Card Project UK Ltd, please contact us at theteam@thecardproject.uk.