LCDC Designs

Privacy Policy

Privacy Policy — LCDC-Designs.co.uk

Last updated: 17 October 2025
Controller: LCDC-Designs.co.uk— contact: shop@lcdc-designs.co.uk
Scope: This policy applies to customers ordering from our webstore at LCDC-Designs.co.uk and to visitors who interact with our site. We are a UK business and sell only to delivery addresses in the United Kingdom.

1. Summary — what this notice covers

This privacy notice explains:

  • what personal data we collect about you;
  • how and why we use it;
  • who we share it with (for example, our payment processor Square);
  • how long we keep it;
  • your rights and how to exercise them.

We follow UK data protection law (the UK GDPR and the Data Protection Act 2018) and the Privacy and Electronic Communications Regulations for cookies and electronic marketing. ICO+1

2. Controller and contact

Controller: LCDC-Designs.co.uk
Data protection contact: shop@lcdc-designs.co.uk
If you have concerns you may also contact the UK Information Commissioner’s Office (ICO). ICO

3. Personal data we collect

We collect the personal data needed to provide and manage orders and the site, including:

  • Identity & contact: name, email, phone number, billing & delivery address.
  • Order & transaction data: products ordered, order history, returns.
  • Payment information: we do not store card numbers or full payment credentials — payments are processed by Square (see section 6).
  • Technical & usage data: IP address, device/browser information, pages visited, cookies and similar technologies.
  • Optional marketing preferences and consent choices (if you opt in).

4. How we collect personal data

  • When you create an account, place an order, contact customer support or sign up for marketing.
  • Automatically via cookies and similar technologies when you browse the site. (See Cookies section.)
  • From third parties where you provided your details (for example, when sharing an address during checkout through a courier address lookup).

5. Purposes of processing & lawful bases

We process personal data for these purposes and rely on the following lawful bases under UK GDPR:

  1. To perform your contract (contractual necessity). Taking and fulfilling orders, delivering goods, handling refunds, and communicating about your order.
  2. To comply with legal obligations. Keeping records required by HMRC and other legal obligations (for example tax/accounting). (We retain relevant transaction records in line with HMRC guidance). GOV.UK
  3. For our legitimate interests. Fraud prevention, site security, analytics to improve the service, and enforcing our terms. We ensure a balancing test for legitimate interests where required.
  4. With your consent. For marketing communications and non-essential cookies where we ask for and receive your consent (you can withdraw consent at any time). ICO

6. Payments and third-party processors (Square)

We use Square (Squareup) to process payments. We do not store your card/payment credentials on our systems — Square handles card tokens and payment processing on our behalf. Square acts as a data processor when processing payments for our store and has published data processing terms and privacy notices describing their safeguards and transfer mechanisms. If Square transfers data outside the UK, it uses appropriate safeguards (e.g. standard contractual clauses / intra-company agreements) as described in their documentation. You should also review Square’s privacy information. Square+1

7. Sharing personal data

We will share personal data only as needed to provide services:

  • Payment processor: Square (see above). Square
  • Couriers and delivery partners: to deliver your order.
  • IT, hosting & analytics providers: to run and protect the website (e.g. hosting, email, CRM, analytics).
  • Professional advisors and auditors: where required (e.g. accountants, legal advisors).
  • If required by law or to defend legal claims: where disclosure is legally required.

We require providers we use to implement appropriate security and only process data as instructed.

8. Cookies and similar technologies

We use cookies and similar tracking technologies for essential site functions, analytics and (with your consent) marketing. Under the Privacy and Electronic Communications Regulations (PECR) we ask for consent for non-essential cookies and provide a clear cookie banner and cookie settings. You can change cookie preferences in your browser or via our cookie tool. ICO

9. International transfers

Some service providers (including Square or analytics providers) may process or store data outside the UK. Where personal data is transferred outside the UK we rely on lawful safeguards (for example UK adequacy decisions, Standard Contractual Clauses or similar technical/contractual protections). See the relevant processor’s privacy or data processing terms for details (e.g. Square). Square+1

10. How long we keep your personal data

We keep personal data only as long as necessary for the purposes set out above, including to:

  • fulfil orders and customer service (typical operational retention: until the order and any returns/refunds are completed plus a reasonable period afterwards);
  • meet legal obligations (for example, financial and VAT records — generally at least 6 years in line with HMRC guidance). GOV.UK+1

Where possible we anonymise or aggregate data once no longer needed for the purposes listed.

11. Your rights

Under UK data protection law you have rights (subject to conditions) including:

  • the right to access your personal data (subject access);
  • the right to rectification;
  • the right to deletion (“right to be forgotten”) in certain circumstances;
  • the right to restriction of processing;
  • the right to object to processing based on legitimate interests;
  • the right to data portability where applicable;
  • the right to withdraw consent (for marketing or cookies) at any time.

We will normally respond to valid requests without undue delay and at the latest within one month; we may extend by two further months where requests are complex. To exercise any right, contact shop@lcdc-designs.co.uk. You may also complain to the ICO. ICO+1

12. Security

We use appropriate technical and organisational measures to protect personal data (encryption, access controls, staff training, etc.). We and our processors (including Square) maintain security measures and will notify affected individuals and the ICO where we are legally required to do so in the event of a personal data breach. Square+1

13. Children

Our services are for UK adults only. We do not knowingly collect personal data from children under 16. If we become aware we have collected data from a child we will delete it, unless we are required to retain it by law.

14. Changes to this policy

We may update this policy from time to time. Significant changes will be published on the site with an updated date.

15. How to contact us

Data protection contact: shop@lcdc-designs.co.uk
ICO: https://ico.org.uk (for independent complaints and guidance).