GDPR and PECR Privacy Policy

This policy explains how Aspenprint complies with the UK General Data Protection Regulation (GDPR) and the Privacy and Electronic Communications Regulations (PECR). These laws govern how we collect, use, store and protect your personal data, and how we handle email, SMS and other electronic communications.

What this means for you

• Your personal data will only ever be used lawfully and fairly.

• We will never use or share your information without a valid reason and, where required, your explicit consent.

• You have the right to access, update, or request removal of your data at any time.

• You can unsubscribe from our marketing communications whenever you choose.

How we collect and use data

• We collect personal data (such as name, address, email and telephone number) when you place an order, make an enquiry, or sign up to hear from us.

• Order details are stored securely for accounting purposes for a period of seven years, as required by law.

• You can request removal of your data from our systems at any time by emailing sales@aspenprint.com or calling 01202 717418. Requests will be actioned within 48 hours, except where records must be retained for legal or accounting purposes.

Marketing and communications

• We will not add you to any marketing list without your permission.

• Under PECR, we may occasionally contact you about similar products or services if you are an existing customer and were given the chance to opt out (this is known as a “soft opt-in”).

• Every marketing email we send will include a clear unsubscribe link.

• We do not buy or sell marketing lists.

Social media

• If you follow Aspenprint on social media, you can unfollow at any time. We will not add you to groups or platforms without your action.

Security measures

• All staff have unique system logins, and access is removed immediately when employment ends.

• Passwords are updated regularly and access rights are strictly controlled.

• We do not store payment details.

• We will never cold call you, or ask for bank details or passwords by phone. Any telephone transactions are always initiated by you.

Data breach policy

• If a breach occurs, Aspenprint will investigate and notify the ICO within 72 hours, where legally required.

• If your personal data may be affected, we will inform you promptly and take steps to secure our systems.

Your rights

Under GDPR and PECR, you have the right to:

• Access the personal data we hold about you.

• Request correction of inaccurate data.

• Request deletion of your personal data.

• Object to certain types of processing, including marketing.

• Withdraw consent at any time.

For further details about your rights, visit the Information Commissioner’s Office (ICO) website: ico.org.uk/for-the-public.