Privacy Policy | Madly Merch

Last updated: 1 October 2026.

1. Who we are

Madly Merch Ltd ("we", "us", "our") is the controller of the personal information described in this policy. We are a company registered in Northern Ireland with company number NI684137. Our registered office is 28 Main Street, Saintfield, BT24 7AA, Northern Ireland.

You can contact us about privacy at info@madlymerch.co.uk.

2. The information we collect

Enquiries: your name, email address and message, any image you attach, and the page or product you were viewing when you contacted us.
Orders: your name, email address, phone number, delivery address, the products and options you order, your design notes, any artwork files you upload, and records of your order and payment (such as amount, date and reference).
Payment: your card details are collected and processed by Stripe. We do not see or store your full card number.
Our communications: emails and messages between us, including proofs, approvals and customer service.
Website use: if you agree to analytics cookies, information about how you use the site, such as the pages you visit, your device and browser, and your approximate location. See our Cookie Policy.
Security: short-lived records used to prevent spam and abuse, including a protected identifier derived from your internet address, which are deleted automatically.

3. How we use it, and why

To reply to your enquiry and prepare a quote. This is in our legitimate interests and, where you ask us, to take steps before a contract.
To take your order, create your artwork, make and deliver your products, and provide customer service. This is necessary for our contract with you.
To keep accounts, tax and other records that the law requires. This is a legal obligation.
To keep our website and systems secure and to prevent fraud, spam and abuse. This is in our legitimate interests.
To send you news and offers by email, where you have agreed or, if you are an existing customer, under the "soft opt-in" rule. You can opt out at any time.
To understand how our website is used and to improve it. We do this only if you agree to analytics cookies.
To defend or bring legal claims, and to run and improve our business. This is in our legitimate interests.

We do not sell your personal information. We may send you marketing emails about our products and offers. If you are an existing customer, we may do this under the "soft opt-in" rule unless you tell us not to. Otherwise we will only do it if you have agreed. Every marketing email has an unsubscribe link, and you can also ask us to stop at any time by emailing info@madlymerch.co.uk.

4. Who we share it with

We share personal information only where needed, and only with:

Stripe, to take payment and prevent fraud.
Couriers and delivery services, who need your name, address and contact details to deliver your order.
Service providers that host and run our systems: Vercel (website hosting), Supabase (database), Amazon Web Services (storage of uploaded artwork, in the UK, London region), our order and customer management system (Madly CRM) and our email provider (ZeptoMail).
Google and Vercel, for analytics and tag management, only if you agree to analytics cookies.
Our accountants, lawyers and other professional advisers.
Authorities and other organisations, where the law requires or allows, and a buyer if we sell or restructure our business.

5. Transfers outside the UK

Some of the providers above may also process personal information outside the UK, including in the European Economic Area and the United States. Where they do, we use providers that rely on approved safeguards for international transfers, such as the UK's adequacy regulations or the UK's standard data transfer agreement. You can ask us at info@madlymerch.co.uk for more information.

6. How long we keep it

Order and accounting records: 6 years from the end of the financial year to which they relate, as tax law requires.
Artwork files and design notes: 3 years after your last order, so that repeat orders are easy.
Enquiries that do not become orders: 3 years after our last contact with you.
Marketing emails: until you unsubscribe or ask us to stop.
Unpaid checkout records from abandoned orders: deleted automatically after 30 days.

When the period ends we delete the information or make it anonymous. Backups are overwritten on a regular cycle.

7. Cookies

We use cookies and similar technologies as explained in our Cookie Policy. You can change your choices at any time using the cookie settings link in the footer.

8. Your rights

You can ask us to give you a copy of the personal information we hold about you, to correct it, to delete it, to restrict how we use it, to give it to you in a portable format, or to stop using it where we rely on our legitimate interests. You can object to marketing at any time. Where we rely on your consent, you can withdraw it at any time. Some rights are limited where we must keep information by law.

To use any of these rights, email info@madlymerch.co.uk. We will reply within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

9. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections and a private, access-controlled store for uploaded artwork. No system is completely secure, so we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.