Privacy Policy

Last Updated: 28/08/2025

1. Who We Are

Cardecoray is a trading name of Creation Cardboard Limited (“we”, “us”, “our”). Creation Cardboard Limited is a company registered in England and Wales (Company Number: 16078512), with its registered office at 82A James Carter Road, Mildenhall, IP28 7DE.

Creation Cardboard is a UK-based company specializing in custom cardboard products for events. We process and deliver orders nationwide via our Shopify website and other third party ecommerce platforms like Etsy, Amazon, ebay and others.

Contact

Email: hello@cardecoray.co.uk
Address: 82A James Carter Road, Mildenhall, IP28 7DE

2. What Personal Data We Collect

Name, contact details (email, phone)
Billing and delivery addresses
Payment information (handled securely by Shopify)
Order history
Uploaded photos and design files (for custom products)
Website usage data (cookies, IP address, analytics)

3. How We Use Your Data

To process and fulfil your orders
To provide customer support
To personalize products using your uploaded photos/designs
For internal analysis and service improvements
To send marketing emails (with your consent)

4. Lawful Basis for Processing

Contract: To provide products/services you order
Legitimate interest: Business operation and fraud prevention
Consent: For marketing communications
Legal obligation: For record-keeping and tax purposes

5. Who We Share Data With

Shopify: E-commerce and payment processing
Couriers (e.g., ParcelForce, Royal Mail): For deliveries
Canva: If used for photo/uploads/design processing
Accountants & legal consultants (where required by law)
Authorities, if legally obliged

We never sell your data to third parties for marketing.

6. Photo Upload Policy

You own all images uploaded to customize your order.
Images are used solely to fulfil your order and may be processed through Canva.
We securely store photos you upload for custom orders for up to 90 days after order completion. This allows us to assist with remakes, reorders, or address any concerns related to your order. If you would like your images deleted sooner, please contact us and we will remove them promptly. All photos are stored securely and are never used for any purpose other than fulfilling your order or unless you give explicit consent.
You are responsible for having the rights to use uploaded images.
We reserve the right to refuse images that breach copyright or are inappropriate.

7. Data Retention

Order info: 7 years (for accounting/tax)
Uploaded photos: 90 days after order completion, or sooner if requested
Marketing/analytics: until unsubscribed or deleted

8. Your Rights

Under UK GDPR, you have rights to:

Access, correct, or delete your data
Object to processing and direct marketing
Request data portability
Withdraw consent anytime

To exercise your rights: Contact us at hello@cardecoray.co.uk. We’ll respond within 30 days.

9. Data Security

SSL encryption used on our site
Data access restricted to staff and service providers
Regular third-party security audits via Shopify

10. Cookies & Tracking

We use cookies to:

Operate the website
Improve user experience
Measure analytics (Google Analytics, Shopify)
Marketing (with consent)

See our separate [Cookie Policy] for more details.

11. Children’s Privacy

Our products are not targeted at children under 13. We do not knowingly collect children’s data. Contact us if you believe we have done so.

12. Changes to This Policy

Policy may change to reflect business updates or law. Significant changes will be posted on our website or sent by email.

13. Complaints

If you’re unhappy with our privacy practices, contact us first. If unresolved, you can contact the UK ICO (Information Commissioner’s Office) at ico.org.uk.

14. Contact Us

For any privacy-related questions, requests, or concerns:

Email: hello@cardecoray.co.uk
Address: 82A James Carter Road, Mildenhall, IP28 7DE