PRIVACY POLICY

Last updated: 6 November 2026

This Privacy Policy explains how Personalised Badges UK (trading name of UK School Badges Limited) collects, uses, discloses, and protects your personal data when you visit our website, place an order for personalised badges, or interact with us in any other way.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller: UK School Badges Limited
Registered Address: 23 Middlemore Lane West, Aldridge, Walsall, WS9 8BG
Company Registration: 13739558
Trading as: Personalised Badges UK

Contact Details:
Email: info@personalisedbadgesuk.co.uk
Telephone: 01922 285582

If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above.

2. What Personal Data We Collect

We collect personal data that you provide to us and data that is automatically collected when you use our website.

Data you provide to us includes:

  • Contact information: name, billing and delivery address, email address, telephone number.
  • Order information: details of the personalised badges you purchase (including any text, names, logos, designs, or customisation instructions you supply).
  • Payment information: card details or other payment information (processed securely by our payment service providers – we do not store full card details ourselves).
  • Account information (if you create an account): username, password, order history.
  • Communication data: messages you send to us via contact forms, email, or live chat.
  • Any other information you voluntarily provide, such as feedback or survey responses.

Automatically collected data includes:

  • Technical data: IP address, browser type and version, device type, operating system, time zone setting.
  • Usage data: pages you visit, time spent on pages, clickstream data, referring website.
  • Cookies and similar technologies: see our separate Cookie Policy for full details.

For personalised badges, we may process special categories of data only if you voluntarily include it in your customisation. We do not actively collect sensitive personal data unless you provide it as part of an order.

3. How and Why We Use Your Personal Data (Lawful Basis)

We will only process your personal data where we have a lawful basis to do so. The main lawful bases we rely on are:

Purpose Lawful Basis Examples
To process and fulfil your orders, including customising and delivering badges Contract Processing payment, preparing your personalised design, arranging delivery
To manage your account and provide customer service Contract / Legitimate interests Responding to enquiries, handling returns or complaints
To improve our website and services Legitimate interests Analysing how visitors use the site, fixing bugs
To send you marketing communications (e.g., newsletters, offers) Consent (or legitimate interests for existing customers) Promotional emails about new badge designs or discounts (you can unsubscribe at any time)
To comply with legal obligations Legal obligation Keeping records for tax, accounting, or fraud prevention
To prevent fraud and protect our business Legitimate interests / Legal obligation Verifying orders and detecting suspicious activity
To send business-to-business marketing emails to organisations Legitimate interests See section 3A

3A. Business Contacts and Business-to-Business Marketing

This section explains how we handle contact details of organisations that we approach about our products, and who may not yet have dealt with us. It applies if we have contacted you or your organisation by email, or hold your organisation’s details for that purpose.

What we collect

  • Organisation name and type (for example, company, charity, council).
  • Generic business email address (for example, info@, enquiries@, office@ or clerk@).
  • Business telephone number and business address.
  • Your job role or the role of the mailbox, where this is published.

We aim to use generic role mailboxes. If the address you use for your organisation includes your name, it is still personal data and this section applies to it.

Where we get your details

We take them only from public sources: the organisation’s own website, and public registers such as Companies House and the Charity Commission register. We do not buy or rent lists.

Why we use them

To contact organisations by email, one to one, about our personalised badges and related products and offers, where we think they may be relevant to your organisation.

Our lawful basis

We rely on legitimate interests (Article 6(1)(f) UK GDPR). Our interest is to promote our products to organisations that are likely to use them. We have considered whether this could unfairly affect you. In summary: the addresses are published for contacting the organisation, we use generic business addresses, we send low volumes, each message is relevant to your organisation’s activities, we use no tracking and no profiling, and every message includes a clear way to opt out. We do not use special category data.

We only send these emails to organisations that are “corporate subscribers” under the Privacy and Electronic Communications Regulations (PECR). That means companies, limited liability partnerships, charitable companies and other incorporated bodies, and public bodies such as councils. We do not send marketing emails of this kind to sole traders, ordinary partnerships or unincorporated associations.

Who sees your details

Only people at Personalised Badges UK who need them. Our email and website hosting providers handle them on our behalf. We do not sell your details. See section 4 for how we share data more generally.

How long we keep them

We keep these business contact details for 12 months after we last contacted you, unless you reply or enquire. If you do, we treat you as a customer or enquirer under the rest of this policy. After that period we delete them. If you ask us not to contact you, we keep your email address and organisation name on a “do not contact” list, so that we don’t contact you again. This is a legal requirement for us.

Your right to object and how to opt out

You have the right to object to us using your details for marketing, at any time, and we will always stop. To opt out, reply “unsubscribe” to any email from us, or email info@personalisedbadgesuk.co.uk. We will add you to our do-not-contact list straight away and won’t contact you again about this.

Your other rights

You can ask for a copy of the details we hold about you, ask us to correct them, ask us to delete them, or ask us to restrict how we use them. See section 8 for the full list of your rights. To use any of them, email info@personalisedbadgesuk.co.uk. We will reply within one month.

Telling you about this

If we collected your details from a public source rather than from you, UK GDPR Article 14 requires us to tell you. We do so in our first email to you, through the privacy link in it, and in any case within one month of getting your details.

Complaints

If you are unhappy with how we have used your details, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

4. How We Share Your Personal Data

We may share your personal data with the following categories of recipients:

  • Service providers: Third-party companies that help us run our business, such as payment processors, shipping and fulfilment partners (e.g., Royal Mail, courier services), website hosting providers, email service providers, and printing partners who produce your personalised badges.
  • Professional advisers: Accountants, lawyers, or auditors where necessary.
  • Regulators and authorities: Where we are legally required to do so (e.g., HMRC or the ICO).

We do not sell your personal data to third parties. All third parties are required to respect the security of your data and to treat it in accordance with the law.

5. International Data Transfers

Your data is primarily processed within the UK or EEA. If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Access to your data is restricted to employees and service providers who need it for business purposes and who are subject to a duty of confidentiality.

In the event of a personal data breach, we will notify you and the ICO where we are legally required to do so.

7. Data Retention

We will keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Order and transaction data: typically kept for 6–7 years for tax and legal purposes.
  • Marketing data: until you unsubscribe or withdraw consent.
  • Website analytics data: usually anonymised or deleted after a shorter period.
  • Business contact details used for B2B marketing: see section 3A

8. Your Legal Rights

Under UK data protection law, you have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision-making

To exercise any of these rights, please contact us at info@personalisedbadgesuk.co.uk. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. For full details and to manage your preferences, please see our Cookie Policy.

10. Children’s Privacy

Our website and services are not intended for children under 13. We do not knowingly collect personal data from children.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will be revised. Significant changes will be notified via the website or by email where appropriate.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Thank you for trusting Personalised Badges UK with your personal information.