Privacy Policy
Effective Date: 01/05/2025
Website: https://gicleeuk.com
This Privacy Policy explains how Giclée UK collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
Giclée UK is a trading name of SDK Group Ltd, which is the data controller responsible for your personal data.
Registered Address:
Unit 69 Peffer Place
Edinburgh, EH16 4BB
United Kingdom
Email: info@gicleeuk.com
Telephone: 0131 555 6444
2. Personal Data We Collect
We may collect and process the following data:
- Identity data (name, company name)
- Contact data (email address, phone number, postal address)
- Order and billing information
- Uploaded artwork and production files
- Technical data (IP address, browser type, device information)
- Communications (emails, contact form submissions)
3. How We Use Your Data (Lawful Basis)
We process personal data under the following lawful bases:
- Contractual necessity – to provide quotes, process orders, manufacture and deliver print products
- Legitimate interests – business administration, fraud prevention, service improvement
- Legal obligation – accounting, tax, and regulatory compliance
- Consent – where required for marketing or non-essential cookies
4. Artwork Uploads & Production Files
Any artwork or files uploaded are used solely for quotation, proofing, and print production. Files are accessible only to authorised staff and production partners where required.
Artwork files may be retained for a limited period after order completion for reprints, dispute resolution, or legal purposes, after which they are securely deleted.
5. Cookies & Analytics
We use cookies to ensure the website functions correctly and to analyse website usage.
Cookies may include essential cookies, functional cookies, and analytics cookies. Where required, consent is obtained via a cookie banner.
You can manage or disable cookies through your browser settings.
6. Third-Party Data Processors
We may share personal data with trusted third parties only where necessary, including:
- Website hosting and infrastructure providers
- Email and communication services
- Payment processors
- Analytics and security services
- Delivery and logistics providers
All processors are contractually required to comply with UK GDPR.
7. International Data Transfers
Some service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses.
8. Data Retention
Personal data is retained only for as long as necessary for the purposes it was collected, including legal, accounting, and operational requirements.
Order and invoice data is retained in line with UK tax law. Other data is periodically reviewed and securely deleted.
9. Your Data Protection Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure of your data
- Restrict or object to processing
- Request data portability
- Withdraw consent where applicable
Requests can be made by contacting info@gicleeuk.com</