Privacy

Christian Mizon is the data controller for personal information collected through madebybackdrop.com. Our address is [your trading address], and you can reach us about anything on this page at hello@madebybackdrop.com.

We keep this deliberately small. There are three ways we end up with your information:

• If you join the drop list, we store your email address and the date you joined.
• If you use the contact form, we receive your name, email address, the topic you picked and your message.
• If you buy a pack, our payment provider collects your payment and billing details and shares your name, email and order details with us so we can supply the files and handle support.

We don't ask for anything we don't need. We never see or store your card number — that stays with the payment provider.

To send you the drop list, if you asked for it. Our basis is your consent, which you can withdraw at any time using the unsubscribe link in any email.

To fulfil orders, deliver files, provide re-downloads and handle refunds. Our basis is performance of our contract with you.

To answer your messages. Our basis is our legitimate interest in responding to people who contact us.

To meet our legal obligations, such as keeping records for tax purposes.

Only the services that make the shop work, and only what they need:

• Our payment provider, who acts as merchant of record and processes payments, invoicing and tax.
• Our email provider, to send the drop list.
• Our form provider, to deliver contact form messages to us.
• Our hosting provider, which serves the site.

We don't sell your data, we don't share it for advertising, and we don't hand it to anyone else unless the law requires it.

This site sets no cookies of its own and runs no analytics or advertising trackers. There's nothing here to consent to, which is why you won't see a cookie banner.

Our payment provider may set cookies during checkout that are necessary to process your payment securely. Those are covered by their own privacy policy.

If we add analytics later, we'll update this page and ask for consent first where the law requires it.

Some of the services above are based outside the UK. Where personal data is transferred internationally, it's protected by an adequacy decision or by standard contractual clauses — the safeguards UK and EU data protection law requires.

Drop list subscribers: until you unsubscribe, then we delete your address.

Contact messages: up to two years, so we have context if you write again.

Order records: six years, because tax law requires us to keep them.

Under UK GDPR you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that's wrong.
• Delete your data, where we don't have a legal reason to keep it.
• Restrict or object to how we use it.
• Send your data to another provider in a portable format.
• Withdraw consent for marketing at any time.

Email hello@madebybackdrop.com and we'll respond within one month. There's no charge.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.

The site is served over HTTPS. Access to order and subscriber data is limited to the people who need it, protected by strong passwords and two-factor authentication. If a breach ever affects your rights, we'll tell you and the ICO within the timeframes the law sets.

If we change how we handle your data — a new provider, a new purpose — we'll update this page and change the date at the top. If the change is significant and you're on the drop list, we'll email you.