Privacy Policy

Last updated at: 16.08.2025

At UK Flags And Apparel (referred to as "We," "Us," or "Our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website [www.ukflagsandapparel.co.uk] (the "Website"), make purchases, or interact with our services. As a UK-based e-commerce business specializing in flags such as the Union Jack and England flag, we comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant laws. By using our Website or services, you consent to the practices described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

We collect various types of information to provide and improve our services, process orders, and enhance your experience. This includes:

Personal Data:

When you create an account, place an order, subscribe to our newsletter, or contact us, we may collect your name, email address, phone number, billing and shipping address, payment details (such as credit card information, processed securely via third-party providers), and any other details you provide.

Usage Data:

Automatically collected data such as your IP address, browser type, device information, pages visited, time spent on pages, and referring/exit pages. This helps us analyze trends and administer the site.

Cookies and Tracking Technologies:

We use cookies, web beacons, and similar technologies to track user behavior, remember preferences, and deliver personalized content. Essential cookies enable core functions like shopping carts, while analytics cookies (e.g., from Google Analytics) help us understand site performance. You can manage cookie preferences via our cookie banner or browser settings.

Marketing Data:

If you opt-in, we collect preferences for promotional communications.

Third-Party Data:

Information from partners like dropshipping suppliers or payment gateways when fulfilling orders.

We do not intentionally collect sensitive personal data (e.g., racial or ethnic origin, political opinions) unless required for legal reasons. For children under 16, we require parental consent for data collection.

2. How We Use Your Information

We process your data based on legal grounds such as consent, contract performance, legitimate interests, or legal obligations. Uses include:

Order Fulfillment:

Processing purchases, shipping flags via dropshipping partners, and handling payments.

Customer Service:

Responding to inquiries, providing support, and managing returns/refunds in line with UK consumer laws.

Marketing and Personalization:

Sending newsletters, promotions, or personalized recommendations (with your consent; you can unsubscribe anytime).

Site Improvement:

Analyzing usage to enhance functionality, security, and user experience.

Fraud Prevention:

Detecting and preventing fraudulent activities.

Legal Compliance:

Complying with tax, accounting, or regulatory requirements.

Our legitimate interests include improving services, marketing, and security, balanced against your rights.

3. Sharing Your Information

We share data only as necessary and with safeguards:

Service Providers:

Dropshipping suppliers (e.g., for manufacturing and delivery), payment processors (e.g., Stripe, PayPal), shipping companies (e.g., Royal Mail), and IT providers (e.g., hosting services).

Marketing Partners:

Third parties like email platforms (e.g., Mailchimp) for campaigns, with your consent.

Legal Requirements:

If required by law, such as for tax authorities or in response to court orders.

Business Transfers:

In case of merger, acquisition, or sale, your data may be transferred with notice.

We do not sell your data. For international transfers (e.g., to suppliers outside the UK/EEA), we use UK International Data Transfer Agreements (IDTAs) or adequacy decisions to ensure protection.

4. Data Security and Retention

We implement robust security measures, including encryption, firewalls, and access controls, to protect against unauthorized access, loss, or breach. In the event of a breach, we will notify you and authorities as required by UK GDPR (within 72 hours where feasible).

Data is retained only as long as necessary: order data for 6 years (for tax purposes), marketing data until you unsubscribe, and usage data for 26 months. After this, data is anonymized or deleted.

5. Your Rights Under UK GDPR

You have rights regarding your data:

Access:

Request a copy of your data.

Rectification:

Correct inaccurate data.

Erasure:

Request deletion (subject to legal obligations).

Restriction:

Limit processing in certain cases.

Portability:

Receive data in a transferable format.

Objection:

Object to processing based on legitimate interests or marketing.

Withdraw Consent:

Anytime, without affecting prior processing.

Complaints:

Lodge with the UK Information Commissioner's Office (ICO) at www.ico.org.uk.

To exercise rights, contact us at [email protected]. We respond within one month, free of charge unless requests are excessive.

6. Cookies and Do Not Track

Our cookie policy is integrated here. We use:

- Essential cookies for site functionality.

- Performance cookies for analytics.

- Targeting cookies for ads.

You can opt out via our cookie consent tool. We honor browser "Do Not Track" signals where possible.

7. Third-Party Links

Our site may link to external sites (e.g., supplier pages). We are not responsible for their privacy practices; review their policies.

8. Changes to This Policy

We may update this policy; changes are posted here with the updated date. Continued use constitutes acceptance. For significant changes, we notify via email.

9. Contact Us

For questions, contact:

UK Flags And Apparel

Email: [email protected]

Phone: +44 07455 755716

This policy applies only to our Website and services.

Thank you for trusting us with your data.