Privacy Policy
This policy explains what personal information we collect when you use this website or place an order, why we need it, and what your rights are. We keep it to the minimum we need to make and deliver your order.
Last updated: 7 November 2026
Who we are
Laser & Ink is the data controller for your personal information.
Address: 22 Breck Lea, Sowerby Bridge, West Yorkshire, HX6 1BS
Email: grant@laserandink.co.uk
What we collect
- Order details: your name, email address, delivery address, phone number if you give one, and what you ordered.
- Personalisation: the text you enter and any photos or artwork you upload. Photos can contain information about other people, so please only upload images you’re entitled to share.
- Payment: payments are processed by Stripe. We never see or store your full card details; we only receive confirmation that payment was made and limited details such as the last four digits of the card.
- Messages and quote requests: anything you send us by email or through our quote form, including artwork.
- Technical data: our hosting provider automatically processes basic technical information such as your IP address and browser type to deliver the site and protect it from abuse.
How we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Making, delivering and supporting your order, including emailing you about it | Contract |
| Replying to enquiries and preparing quotes | Contract (steps before entering a contract) / legitimate interests |
| Keeping order and accounting records | Legal obligation |
| Keeping the website secure and preventing fraud | Legitimate interests |
Email sign-ups: if you join our mailing list, we keep your email address to send occasional gift ideas and offers, based on your consent. Every email has an unsubscribe link, or just reply and ask us to remove you. We only email customers about their own orders (confirmations, proofs, dispatch and a review request) — never marketing unless you’ve signed up.
We don’t sell your data, and we don’t use it for automated decision-making or profiling. Gift messages you add are used only to write your card.
Who we share it with
We only share what’s needed with the services that help us run the shop:
- Stripe – to take payments securely.
- Resend – to send order confirmation and update emails.
- Cloudflare – to host the website and securely store order information and uploaded photos.
- Royal Mail – your name and address appear on your parcel so it can be delivered.
Some of these providers may process data outside the UK. Where they do, they use legally recognised safeguards, such as the UK International Data Transfer Agreement or Addendum, or the UK–US data bridge.
We may also share information if the law requires us to, for example with HMRC.
How long we keep it
- Uploaded photos and artwork: stored securely and deleted 180 days after your order, which gives time to deal with any problems or remakes.
- Order records (name, address, what you bought, what you paid): kept for 6 years, as HMRC requires.
- Emails and quote requests that don’t lead to an order: kept for up to 12 months, then deleted.
Cookies and local storage
We don’t use tracking, advertising or analytics cookies, which is why you won’t see a cookie banner here.
The only thing we store on your device is your basket, saved in your browser’s localStorage so it’s still there if you leave and come back. It stays on your device and is strictly necessary for the basket to work. You can clear it at any time by emptying your basket or clearing your browser data.
When you pay, you’re taken to Stripe’s secure checkout, which may set its own essential cookies for fraud prevention. Our hosting provider, Cloudflare, may also set a strictly necessary security cookie to protect the site from bots.
Keeping your data safe
The site is served over an encrypted connection (HTTPS). Uploaded photos are stored in private storage that isn’t publicly accessible, and only we can view them to make your order.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct anything that’s wrong
- ask us to delete your data (we may need to keep order records for HMRC)
- object to or ask us to restrict how we use your data
- ask for your data in a portable format
To make a request, email grant@laserandink.co.uk. We’ll respond within one month.
Complaints
If you’re unhappy with how we’ve handled your data, please tell us first and we’ll try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We’ll update this page if the way we use your data changes.