Makelium

1. Introduction

This Privacy Policy explains how Makelium (“we”, “us”, “our”) collects, uses and protects personal information when you use this website, place an order online, purchase from us at an event, or use an authorised point-of-sale account.

2. Data We Collect

Depending on how you interact with us, we may collect:

• Contact details – such as your name, email address, postal address and phone number.
• Order information – products purchased, prices, delivery or pickup details, fulfilment status, tracking information and order history.
• Account information – login and account details if you create an account on our website.
• Images or content you upload – for example, photographs supplied for a personalised or made-to-order product.
• Payment-related information – payment method, payment status and transaction references. Full card details are handled by the payment processor rather than stored by us.
• Event and POS information – where relevant, event details and transaction records for in-person sales.
• POS operator information – for authorised staff or helpers, this may include name, employee number, role, access-card identifier, protected PIN credentials and sales audit records.
• Technical data – IP address, browser type and basic usage data through cookies, security logs or analytics where used.

3. How We Use Your Information

We use personal information where necessary to:

• Process, manufacture, fulfil and deliver orders, including Event Pickup.
• Submit eligible made-to-order products to fulfilment partners.
• Provide order-status, dispatch and tracking updates.
• Process payments and maintain financial records.
• Provide customer support and respond to enquiries.
• Maintain customer accounts and order history.
• Operate and secure our point-of-sale system, including operator access and transaction auditing.
• Improve our website, products and services.
• Comply with legal, tax, accounting, fraud-prevention and security obligations.

4. Legal Bases for Processing (UK GDPR)

Depending on the circumstances, we rely on one or more of the following legal bases:

• Contract – to process and fulfil purchases and provide products or services requested from us.
• Legitimate interests – to operate, secure and improve our website, fulfilment processes, POS system and business administration, provided those interests are not overridden by your rights.
• Consent – for certain optional cookies, marketing communications or other processing where consent is required.
• Legal obligation – where we must keep or disclose information to comply with law, tax, accounting or regulatory requirements.

5. Cookies and Similar Technologies

We use cookies and similar storage where necessary to keep the website working, maintain sessions, remember preferences and support security. We may also use analytics where enabled to understand how the site is used.

Where consent is required for non-essential cookies, you will be given a choice. You can also control cookies through your browser settings, although blocking necessary cookies may prevent parts of the website from working.

6. Sharing Your Information

We do not sell your personal data. We may provide the minimum information necessary to trusted service providers where this is required to run our business or fulfil your order, including:

• Payment processors – such as PayPal or Square, to process online or in-person payments.
• Fulfilment and manufacturing partners – where a product is printed, manufactured or dispatched on our behalf.
• Delivery and postal providers – to deliver goods and provide tracking.
• IT, hosting, email and security providers – where needed to operate and protect our systems.
• Professional or public authorities – where disclosure is required by law or reasonably necessary for legal claims, fraud prevention or regulatory compliance.

Where a fulfilment partner needs customer-supplied artwork or a photograph to manufacture an item, that content may be provided to the partner solely for the purpose of producing and fulfilling the order.

7. International Processing

Some service providers may process personal information outside the United Kingdom. Where this happens, we take reasonable steps to ensure an appropriate lawful safeguard is used where required by UK data protection law.

8. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including legal, tax, accounting, reporting, fraud-prevention and dispute-resolution requirements. Order and transaction records may therefore be kept for several years. Access credentials may be retained while an authorised POS operator account remains active and for an appropriate audit period afterwards.

9. Security

We use reasonable technical and organisational measures to protect personal information from loss, misuse, alteration and unauthorised access. Sensitive authentication credentials such as passwords and POS PINs are stored in protected form rather than as readable plain text where the system supports them.

No method of electronic transmission or storage is completely secure, so absolute security cannot be guaranteed.

10. Your Rights

Under UK data protection law, depending on the circumstances, you may have rights to:

• Access personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of information in certain circumstances.
• Object to or restrict certain processing.
• Request portability of certain information where applicable.
• Withdraw consent where processing is based on consent.
• Complain to the Information Commissioner's Office if you believe your data-protection rights have been infringed.

To exercise a right, please contact us using the details on our website. We may need to verify your identity before responding to some requests.

11. Third-Party Websites and Services

Our website may contain links to third-party websites or services, including payment and tracking services. Those organisations have their own privacy practices, and we encourage you to read their privacy notices when you interact with them directly.

12. Changes to This Policy

We may update this Privacy Policy when our services, suppliers, legal obligations or data practices change. The current version and its last-updated date will be shown on this page.

13. Contact

If you have questions about this Privacy Policy or how we handle personal information, please contact us using the details provided on our website.