Skip to main content

Privacy Policy

Purple Fox Gifts Ltd trading as Purple Fox Cards respects your privacy and is committed to protecting your personal data.

1. Who we are

Purple Fox Gifts Ltd trading as Purple Fox Cards
Registered address: 4 Lawn Lane, Coven, Staffordshire, WV9 5AX
Email: contact@purplefoxcards.com

2. What data we collect

We may collect and process the following information:

  • your name

  • billing address

  • delivery address

  • email address

  • order details

  • payment-related information supplied through our payment providers

  • website usage data such as cookies, analytics, and device information

3. How we use your data

We use your information to:

  • process and deliver your orders

  • communicate with you about your order

  • provide customer support

  • prevent fraud

  • improve our website and services

  • send marketing emails where you have agreed to receive them

4. Payments

Payments made on our website are processed securely by our payment service providers. We do not store your full payment card details on our own servers.

5. Cookies and analytics

We may use cookies and similar technologies to operate our website, understand how visitors use the site, and improve performance.

You can control cookies through your browser settings.

6. Marketing

If you opt in, we may send you emails about new products, offers, or updates. You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us directly.

7. Sharing your data

We may share your personal data with trusted third parties where necessary to operate our business, including:

  • payment processors

  • delivery companies

  • ecommerce service providers

  • analytics and marketing providers

We do not sell your personal data.

8. Data retention

We keep your personal data only for as long as necessary for legal, accounting, tax, and business purposes.

9. Your rights

Depending on your location and applicable law, you may have rights including:

  • access to your personal data

  • correction of inaccurate data

  • deletion of data

  • restriction of processing

  • objection to certain processing

  • withdrawal of consent where processing is based on consent

To exercise any of these rights, please contact contact@purplefoxcards.com.

10. Contact

If you have any questions about this Privacy Policy or how we use your data, please contact:

Purple Fox Gifts Ltd
4 Lawn Lane, Coven, Staffordshire, WV9 5AX
contact@purplefoxcards.com

Personalised Products: Photographs, Messages and Uploaded Content

This section explains how we use photographs, names, dates, personal messages and other content supplied when you create a personalised product.

In this section, “Purple Fox Cards”, “we” and “us” mean the business identified as the data controller elsewhere in this Privacy Policy.

What we collect

When you personalise a product, you may provide us with:

  • photographs or other images;

  • names, ages, dates and relationships;

  • personal greetings, messages and sign-offs;

  • instructions relating to the design or production of the product; and

  • information required to associate the uploaded content with your order.

Photographs and messages may contain personal information about you or another person, including children.

How we use personalised content

We use uploaded photographs, messages and other personalised content only where necessary to:

  • create and display your product preview;

  • prepare, manufacture, print and quality-check your personalised product;

  • process, fulfil and dispatch your order;

  • respond to a production or order-related query; and

  • investigate a production problem or provide a justified replacement or reprint.

We do not use customer-uploaded photographs or personal messages for advertising, marketing or unrelated purposes.

Our usual lawful basis for this processing is that it is necessary to take steps at your request and to perform our contract with you. Where an order problem, complaint or dispute arises, we may also retain and use limited relevant information where reasonably necessary to resolve the matter, comply with a legal obligation or establish, exercise or defend legal claims.

Who can access the content

Access is restricted to authorised people and systems that reasonably need the content to produce or support your order. This may include:

  • authorised Purple Fox Cards staff;

  • our BigCommerce ecommerce platform and its authorised subprocessors;

  • files stored within or transferred through our BigCommerce-hosted, WebDAV-accessed file area;

  • our secure production, printing, order-processing and file-management systems; and

  • contracted technology, hosting or production providers acting on our instructions.

These providers are permitted to process the content only as necessary to provide their services to us and must protect it appropriately.

Some service providers may process information outside the United Kingdom. Where this happens, we use applicable contractual or other legally recognised safeguards intended to protect personal information in accordance with UK data-protection law.

How long we keep uploaded content

We normally retain uploaded photographs, full personalised messages and associated production files for 30 days after the order has been fulfilled. For this purpose, fulfilment normally means the date on which the order is dispatched.

This period allows us to investigate delivery or production problems and provide a justified replacement or reprint without requiring the customer to submit everything again.

Where a replacement or reprint is produced, the 30-day period will normally run from the fulfilment of that replacement or reprint.

We may keep relevant content for longer where there is a genuine and documented need, such as:

  • an unresolved complaint or production dispute;

  • an active replacement or reprint request;

  • a payment dispute or chargeback;

  • suspected fraud or misuse;

  • a legal claim; or

  • a legal or regulatory requirement.

In those circumstances, we will keep only the information reasonably required and will delete it when the additional retention is no longer justified.

At the end of the applicable retention period, uploaded content will be deleted or securely removed from active production and storage systems. Copies may remain temporarily within protected system backups until those backups are overwritten through the normal backup cycle. Backup copies are not used for routine production or marketing.

We may retain separate order, payment, delivery, invoice and accounting records for longer where required for tax, accounting, fraud-prevention or legal purposes. Wherever reasonably possible, those retained records will not include the original uploaded photograph or full personalised message after the period described above.

Once an upload has been deleted, you may need to upload it again if you request a later reprint.

Security

We use appropriate technical and organisational measures designed to protect uploaded content against unauthorised access, disclosure, alteration, accidental loss or destruction. These measures include restricting access to authorised staff, accounts, service providers and production systems.

No internet or storage system can be guaranteed to be completely secure, but we regularly consider the sensitivity of personalised content when deciding what safeguards are appropriate.

Content relating to other people

If you provide a photograph, message or other personal information relating to another person, you must ensure that you are entitled to provide it to us and that any permission reasonably required has been obtained.

Additional requirements apply where a photograph contains a child, as explained in our Upload Permission and Content Confirmation.

Your data-protection rights

Depending on the circumstances, you may have the right to:

  • request access to personal information we hold about you;

  • ask us to correct inaccurate information;

  • ask us to delete information;

  • ask us to restrict how information is used;

  • object to certain uses of your information; and

  • request transfer of information in a portable format where that right applies.

These rights are not absolute. For example, we may need to retain limited information while fulfilling an order, resolving a dispute or complying with a legal obligation.

To exercise a data-protection right or ask a question about personalised content, contact us using the details shown in this Privacy Policy or through our Contact Us page. Please include your order number where possible so that we can locate the relevant information.

You also have the right to raise a concern with the UK Information Commissioner’s Office.

!