Privacy policy

Tech Toppers — Privacy Policy
Last updated: 28 September 2026
This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what rights you have. It applies to www.techtoppers.co.uk and to the Tech Toppers design editor at editor.techtoppers.co.uk.
We have written it to be read. If anything is unclear, email contact@techtoppers.co.uk and we will explain it.

1. Who we are

Tech Toppers is the trading name of Tech Toppers Ltd, a company registered in England and Wales with company number 15771220. Our registered office is The View, 38 Halifax Road, Grenoside, Sheffield, England, S35 8PB.
We are the data controller for the personal information described in this policy. That means we decide why and how it is used, and we are responsible for it.
Contact us about privacy: contact@techtoppers.co.uk.
We do not have a Data Protection Officer, because we are not required to have one. Privacy queries go to the address above.

2. About this policy

2.1 This policy applies to you whether you are a customer, a visitor to our website, someone using our design editor, or someone whose details we hold for another reason.
2.2 We may update this policy to reflect changes in what we do or in the law. We will post the revised version here, update the date at the top, and take any further steps the law requires. Where the change is significant we will tell you directly.
2.3 Our Terms of Service, Design & Content Policy, Marketing & Image Use policy, Colour Accuracy & Printing policy, Trade & Corporate Terms and Refund & Cancellation Policy are separate documents. This policy is only about personal information.

3. What personal information we collect

We collect different information depending on how you deal with us.
3.1 Information you give us directly
Contact details — your name, delivery and billing address, email address and phone number.
Order information — what you ordered, the designs, colours and layouts you chose, your payment confirmation, and the delivery details.
Account information — your username, password and any information you give us for account security.
Design and editor information — the designs you create, save, share or download, including the designer name you attach to a design, and any design title you give when publishing to the library.
Consent records — whether you opted in to us using your design, your photographs or images of your order in our marketing, when you did so, and how. If you withdraw an opt-in, we record that too.
Communications — anything you send us, including support queries, complaints, reviews and correspondence.
Colour preferences — where you choose colours, request a swatch or proof, or discuss colour matching with us.
3.2 Information we collect automatically
When you use our website or the editor we may collect usage data: how you reached us, the pages and features you use, your device and browser, your network connection, your approximate location from your IP address, and how you interact with our emails and our website. We collect this using cookies, pixels and similar technologies.
3.3 Information we receive from others
Shopify, which hosts our store and processes our orders, and the other vendors who provide our website, payment, delivery, analytics and support services.
Payment processors, who handle your card or bank details so we can take payment. We do not store your full card details ourselves.
Delivery carriers, who give us tracking and delivery status.
Business partners, where you have come to us through a campaign or event.
3.4 What we do not collect
We do not knowingly collect information about children — see section 12. We do not collect special category data (such as health, ethnicity or religious information) and we do not process your personal information to make automated decisions about you.

4. How we use your information, and our lawful bases

The law requires us to have a lawful basis for each thing we do with your information. These are ours.
Performing our contract with you — Article 6(1)(b) UK GDPR
taking, processing and delivering your order;
taking payment and issuing refunds;
creating and managing your account and your saved designs;
producing, printing and quality-checking items made to your design;
providing customer support and handling complaints and returns.
Consent — Article 6(1)(a) UK GDPR and regulation 6 of PECR
setting non-essential cookies and similar technologies on your device;
sending you marketing emails, texts or similar messages, where you have asked us to;
using your design, your photographs or images of your order in our marketing. This is always a separate, optional opt-in — see our Marketing & Image Use policy.
Legitimate interests — Article 6(1)(f) UK GDPR
keeping the site and the editor secure, and detecting fraud and abuse;
understanding how our site is used so we can improve it;
answering your questions and maintaining our relationship with you;
establishing and defending legal claims.
Legal obligation — Article 6(1)(c) UK GDPR
keeping financial and tax records, and meeting our other legal obligations.
4.1 The soft opt-in. If you have bought something from us and did not opt out at the time, we may email you about similar products we think you will be interested in. Every such email gives you a clear way to opt out, and we stop as soon as you do.
4.2 Marketing to businesses. Where we market to a business contact rather than an individual, slightly different rules apply. If you would rather we stopped, tell us and we will.

5. Designs, the editor and sharing

5.1 Designs are personal information where they are linked to you or contain something that identifies you. We treat them as such.
5.2 We use your designs to produce your order, to store them so you can return to them, and — where you share them — to display them to whoever holds your share link.
5.3 If you save a design without an account, we store it in our database and give you a link. Because we have no record that it is yours, we cannot action a deletion request against it, restore a lost link, or attach credit to you. Creating an account gives you those rights.
5.4 If you give a designer name, that name is shown wherever the design is shared, and travels with any remix someone makes from it. Only give a name you are happy to be public.
5.5 We do not use your design in our marketing unless you have opted in. See section 4 and the Marketing & Image Use policy.
5.6 Where someone remixes your design, we record that your design was the source. See the Design & Content Policy.

6. Cookies and similar technologies

6.1 We use cookies and similar technologies to run our store and the editor, to remember your preferences, to measure how the site is used, and — where you have agreed — to show you relevant advertising.
6.2 We will not set non-essential cookies on your device without your consent, and we will ask you for that consent clearly and separately from anything else.
6.3 Most browsers accept cookies by default, but you can change your browser settings to refuse them or to alert you when one is set. Blocking cookies may stop parts of the site or the editor working properly.
6.4 If you want to change your cookie choices after you have made them, you can do so at any time by using the cookie settings link in the footer, or by contacting us.
6.5 We use Shopify to run our store; its own cookie practices are described in Shopify's cookie policy at shopify.com/legal/cookies.

7. Who we share your information with

We do not sell your personal information. We share it only in the circumstances below.
7.1 Service providers acting on our behalf. Companies that provide our website, payment processing, delivery, cloud storage, email, analytics and customer support — including Shopify, our payment providers and our carriers. They may use your information only to provide their service to us, and they are bound to protect it.
7.2 Business and marketing partners. Where you have consented to marketing, or to us using your design in our marketing, we may share relevant information with the partners who help us run a campaign. They use it in accordance with their own privacy notices.
7.3 Where you ask us to. For example, where you ask us to deliver to a third party or to share a design with someone.
7.4 Legal and safety. Where we are required to disclose information by law, by a court or by a regulator, or where we need to in order to enforce our terms, prevent fraud, or protect our rights or the rights of others.
7.5 A change of ownership. If our business or part of it is sold or merged, information may transfer to the buyer. We would tell you if that happened and the policy you are reading would continue to apply until it was replaced.

8. International transfers

8.1 Some of our service providers, including Shopify, store and process data outside the UK and the European Economic Area.
8.2 Where we transfer your information outside the UK, we rely on a recognised transfer mechanism — normally the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a transfer to a country that the UK Government has determined provides an adequate level of protection. Where we rely on the EU Standard Contractual Clauses for transfers out of the EEA, we do the same.
8.3 We take steps to make sure your information continues to be protected to the standard this policy describes, wherever it is held.

9. How long we keep your information

We keep personal information only as long as we need it. These are our retention periods.
9.1 Designs and editor content
Kept while your account is active.
Deleted when you ask us to, or when you close your account.
Where an account is inactive for 24 months, we will email you and then delete the saved designs if we do not hear back.
Where you saved a design by link without an account, it stays until it is deleted by us or you ask us to remove it. See section 5.3 — we may not be able to identify it as yours.
9.2 Order and account records
Kept for 6 years from the end of the relevant financial year, because tax and company law require it.
9.3 Marketing images and content you opted in to
Kept until you withdraw your consent, after which we stop using them and remove them from the channels we control. We may not be able to recall printed material already distributed.
9.4 Consent records
Kept for as long as we need them to show that we had your permission, plus a reasonable period afterwards in case of a dispute.
9.5 Cookies and analytics
Session cookies are removed when you close your browser. Analytics data is kept for the period stated in our cookie settings, normally up to 26 months.
9.6 Complaints and legal claims
Kept for as long as we need to resolve the matter, and then for the period within which a claim could be brought.
9.7 Backups
Information deleted from our live systems may remain in backups for up to 90 days before it is overwritten.
9.8 If you ask us to delete something, we will do so unless we have to keep it to meet a legal obligation, to resolve a dispute, or to establish or defend a legal claim. Where we must keep something, we will tell you why. This does not affect your right of erasure in section 10.

10. Your rights

You have the following rights. They are not absolute — they apply in certain circumstances, and in some cases we may lawfully decline a request. Where we do, we will explain why, and you can appeal by replying to our decision.
10.1 Right of access. You can ask for a copy of the personal information we hold about you, and for details of how we use and share it.
10.2 Right to rectification. You can ask us to correct information that is inaccurate or incomplete.
10.3 Right to erasure. You can ask us to delete personal information where we no longer have a good reason to keep it.
10.4 Right to restrict processing. You can ask us to stop using your information in certain circumstances — for example while we are checking whether it is accurate.
10.5 Right to object. You can object to processing based on our legitimate interests, and you can object at any time to us using your information for direct marketing. We will stop marketing immediately when you ask.
10.6 Right to data portability. You can ask for information you gave us to be provided to you, or transferred to another organisation, in a commonly used electronic format.
10.7 Right to withdraw consent. Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect anything we lawfully did before you withdrew it.
10.8 Rights in relation to automated decisions. We do not use your information to make automated decisions that have a legal or similarly significant effect on you.
10.9 How to exercise a right. Email contact@techtoppers.co.uk and tell us what you want. We will respond within one month. If your request is complex we may extend that, and we will tell you if we need to.
10.10 We may need to confirm your identity before we act, to make sure we do not give your information to someone else. There is normally no charge.

11. Security

11.1 We take the security of your information seriously. We use measures appropriate to the risk, including encrypted connections, access controls, and limiting who inside our business can see your information.
11.2 No system is perfectly secure, and no transmission over the internet is completely safe. Please do not send us sensitive or confidential information through insecure channels.
11.3 If you have an account, keep your password to yourself. If you think your account has been compromised, tell us immediately.
11.4 If a breach ever affects your rights and freedoms in a significant way, we will tell you and the Information Commissioner's Office as the law requires.

12. Children

12.1 Our services are not intended for children, and you must be 18 or over to order from us or to create an account in the editor. We do not knowingly collect personal information from anyone under 18.
12.2 If you are a parent or guardian and believe a child has given us their information, contact us and we will delete it.

13. Other websites

Our site may link to websites we do not control. We are not responsible for their privacy practices. Please read their policies before you give them any information. Anything you post publicly — on social media, for example — may be seen and used by others, and we cannot control that.

14. How to contact us, and how to complain

14.1 For anything to do with privacy, email contact@techtoppers.co.uk, or write to us at Tech Toppers Ltd, The View, 38 Halifax Road, Grenoside, Sheffield, England, S35 8PB.
14.2 Please contact us first. We would rather fix a concern directly, and in most cases we can.
14.3 If you are not satisfied with how we have handled it, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:
Website: ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
14.4 You can complain to the ICO at any time. You do not have to go through our complaints process first, although we would appreciate the chance to put things right.
14.5 If you are in the EU, you also have the right to complain to the supervisory authority in your own country, and you can contact them about how we handle your information.