Last updated: 29 September 2026 · Data controller: SubhMade · Trading address: 124 City Road, London, EC1V 2NX · Email: [email protected]
SubhMade is a trading name of Wajid Bashir, a sole trader based in the United Kingdom, who is the data controller for this website. This policy explains how SubhMade collects, uses, shares, and stores personal data when you visit our website, place an order, or contact us.
1. What we collect
We may collect the following information:
- your name
- email address
- delivery address
- billing address
- phone number
- order details
- artwork, files, and messages you send us
- payment status information
- technical data such as your IP address, browser type, device information, and cookie data
2. How we use your data
We use personal data to:
- process and fulfil your order
- contact you about proofs, artwork, delivery, and support
- provide customer service
- keep business and accounting records
- improve our website and services
- meet legal and tax obligations
3. Legal bases
We rely on the following legal bases under UK GDPR, where applicable:
- contract, to process and deliver your order
- legal obligation, to keep required business and tax records
- legitimate interests, to run and improve our business, protect our systems, and respond to customer enquiries
- consent, where we ask for it for cookies or marketing
4. Sharing your data
We share personal data only where necessary, including with:
- payment providers
- print production partners
- delivery and courier services
- website and IT service providers
- professional advisers
- regulators or authorities if required by law
These third parties may act as data processors or independent controllers depending on the service they provide.
We use Google Analytics (via Google Tag Manager) to understand how visitors use the site, and Google Fonts to display text. These services receive your IP address and browser information. Google participates in the UK Extension to the EU-US Data Privacy Framework for the relevant personal information.
We also use Umami, a privacy-friendly analytics tool that we host ourselves, to count page visits. It does not use cookies and does not identify you. This is based on our legitimate interest in understanding overall visitor numbers.
We use the Pinterest tag to measure whether our Pinterest adverts lead to visits or sales. It receives your IP address, browser information and page activity. Pinterest participates in the UK Extension to the EU-US Data Privacy Framework.
5. International transfers
If any service provider stores or processes data outside the UK or EEA, we will only use appropriate safeguards permitted by law.
6. Data retention
We keep personal data only for as long as needed for the purposes described in this policy, including to complete orders, handle disputes, and meet legal, accounting, and tax obligations.
Retention periods may vary depending on the type of record. If you want a specific retention schedule, we can provide one separately.
7. Cookies
Our website uses cookies and similar technologies to make the site work, remember preferences, and understand how the site is used.
Where required, we will ask for your consent before placing non-essential cookies. You can also control cookies through your browser settings.
8. Your rights
Depending on the circumstances, you may have the right to:
- access the personal data we hold about you
- correct inaccurate or incomplete data
- ask us to delete your data
- ask us to restrict how we use your data
- object to certain processing
- ask for data portability
- withdraw consent where processing relies on consent
To exercise any of these rights, email [email protected]. We respond within one month.
9. Complaints
If you are unhappy with how we have handled your personal data, please email [email protected] with the subject line “Complaint”. We acknowledge receipt within 30 days, take appropriate steps to investigate without undue delay, keep you informed of progress, and tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), but we would appreciate the chance to put things right first.
10. Security
We take reasonable technical and organisational measures to protect personal data, but no website or online system is completely secure.
11. Children’s data
Our website and services are not intended for children, and we do not knowingly collect data from children unless required to fulfil an order or legal obligation.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be published on our website.