Privacy policy
Last updated: 6 July 2026
Who we are
TeePack is the data controller for personal data collected via teepack.co.uk. We're based in the United Kingdom. Contact us at hello@teepack.co.uk with any privacy questions or to exercise your rights under UK GDPR.
What we collect
- Account and contact details — name, company, email, phone, postcode. Collected when you request a quote, create an account or contact us.
- Order and quote content — the products, quantities, decoration positions, artwork files and any brief you send us.
- Authentication data — email address plus a hashed password (we never see or store your plain password). Optional two-factor authentication settings you enable.
- Technical and analytics data — IP address, user agent, referrer, pages viewed. Used for security, fraud prevention and improving the site. We do not use advertising or cross-site tracking cookies.
- Correspondence — a record of the emails and messages you exchange with us.
Why we use it and our lawful basis
- To prepare and deliver quotes and orders — performance of a contract.
- To operate your account and provide customer support — performance of a contract.
- To keep the site secure and detect fraud — legitimate interests.
- To meet accounting, tax and regulatory obligations — legal obligation.
- To send occasional service updates — legitimate interests, with an opt-out in every email.
- To send marketing emails (if you opt in) — consent, which you can withdraw at any time.
Who we share it with
We share personal data only with processors we rely on to run the business:
- Hosting, database and authentication providers that store the site's data.
- Email delivery services used to send quotes, order updates and account emails.
- Print, embroidery and fulfilment partners that produce and ship your order — they receive only what they need (name, delivery address, items, artwork).
- Payment providers where applicable — we do not store card numbers ourselves.
- HMRC, our accountants and other authorities where required by law.
We never sell your data or share it for advertising.
International transfers
Some of our processors are based outside the UK. Where personal data is transferred abroad, we rely on UK adequacy decisions or the International Data Transfer Agreement / SCCs with appropriate safeguards.
How long we keep it
- Quote and order records: 7 years, to meet UK accounting and tax obligations.
- Marketing consents and preferences: until you unsubscribe or delete your account.
- Authentication logs: up to 12 months, for security investigations.
- Artwork files: for the life of your account plus a reasonable reorder window, then deleted on request.
Your rights
Under UK GDPR you have the right to:
- Access a copy of the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete data we no longer need to keep (subject to legal retention).
- Restrict or object to certain processing.
- Port your data to another provider in a machine-readable format.
- Withdraw any consent you gave.
To exercise any of these, email hello@teepack.co.uk. If you're unhappy with how we handle a request, you can complain to the ICO at ico.org.uk.
Security
Data is encrypted in transit (HTTPS) and at rest. Access to production data is restricted to authorised staff, protected by strong passwords and — where available — two-factor authentication. We audit access and privileges regularly.
Changes to this policy
We'll update this page when our practices change and revise the "Last updated" date at the top. Material changes will be notified by email where we hold your address.
This page is maintained by TeePack. It's a plain-English summary of how we handle personal data — it isn't legal advice.