Privacy Policy – YPD Creative

Last updated: 15th August, 2025

YPD Creative ("we", "our", "us") is committed to protecting your privacy and complying with all relevant data protection laws, including the UK General Data Protection Regulation (GDPR). This policy explains how we collect, use, and protect your personal information.

1. Who We Are

  • Data Controller: YPD Creative (trading style of Graphink Limited)

  • Company Registration: England & Wales, Company No. 09130897

  • ICO Registration: ZA004755

  • Registered Office: 67 Howard Street, North Shields NE30 1AF

  • Contact: hello@ypdcreative.co.uk

2. Information We Collect We collect and process the following categories of personal data:

  • Contact & Identity Information: Name, business name, postal address, email address, telephone number, marketing preferences, and communication history.

  • Order & Commercial Information: Products/services ordered, specifications, quantities, pricing, artwork files, design briefs, and project communications.

  • Payment Information: Billing addresses and purchase history. Payment processing data is handled securely by Stripe; we never store your card details.

  • Website Usage Data: IP address, browser type and version, device information, pages visited, time spent on site, referral sources, and cookie data (see Section 9 for full details).

3. Legal Basis for Processing We process your personal data under the following legal bases as defined by UK GDPR:

  • Contract Performance: Processing is necessary to fulfil your orders and provide our services to you.

  • Consent: For marketing communications and non-essential cookies, where you have given your explicit consent. You have the right to withdraw this consent at any time.

  • Legitimate Interests: We process your data to analyse website usage and improve our services, for fraud prevention, and for our general business administration. These activities are necessary to run our business efficiently and securely without disproportionately impacting your privacy.

  • Legal Obligation: Processing is necessary for us to comply with our legal obligations, such as maintaining accounting records, tax compliance, and regulatory requirements.

4. How We Use Your Data

  • Order Processing & Service Delivery: To process and fulfil your orders, communicate with you about projects, send proofs for approval, arrange delivery through courier services, and provide customer support.

  • Business Operations: To maintain accounting records and invoices, improve our services based on feedback, prevent fraud and ensure payment security, and comply with legal and regulatory obligations.

  • Marketing (with your consent only): To send newsletters and promotional offers and inform you about new products and services. You can withdraw your consent at any time.

5. Data Sharing & International Transfers We only share your data when necessary for service delivery, and we do so under appropriate legal and security safeguards.

  • Essential Service Providers:

    • Payment Processing: Stripe Inc. (USA) – we rely on their secure payment platform.

    • Delivery Services: UK courier companies, such as Royal Mail, DPD, and UPS. We share only the necessary delivery address and contact details.

    • Cloud Storage & IT Services: We may use providers like Dropbox Inc. (USA), Google LLC (USA), Microsoft Corporation (USA), Apple Inc. (USA), and TransferNow (France).

  • International Transfers: All international transfers are protected by safeguards as required by the UK GDPR, which may include Adequacy Decisions, Standard Contractual Clauses (SCCs), or other legally compliant mechanisms.

6. Data Retention

  • Artwork & Project Files: Retained for 7 years to enable reprints and resolve queries. We will delete these sooner upon your request unless legally required to retain them.

  • Accounting Records: 6 years from the end of the relevant accounting period, as this is a legal requirement.

  • Marketing Data: Until you unsubscribe or request deletion.

  • Website Analytics: 26 months maximum (Google Analytics setting).

  • Customer Communications: 3 years unless an ongoing relationship continues.

7. Your Rights Under UK GDPR, you have the right to:

  • Access: Request copies of your personal data.

  • Rectification: Correct inaccurate or incomplete data.

  • Erasure: Request deletion of your data (subject to our legal obligations).

  • Restriction: Limit how we process your data.

  • Portability: Receive your data in a machine-readable format.

  • Object: Object to processing based on our legitimate interests.

  • Withdraw Consent: For marketing and non-essential cookies.

  • Automated Decision-Making: We do not use automated decision-making or profiling, which means we never use your data to make significant decisions about you without human involvement.

To exercise your rights, contact hello@ypdcreative.co.uk. We will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how we handle your data.

8. Data Security We implement appropriate technical and organisational measures to protect your data, including SSL encryption, secure cloud storage with encryption, regular security updates, and staff training. We have a clear incident response procedure and will notify the ICO within 72 hours of becoming aware of a high-risk breach.

9. Cookies & Website Analytics

  • Essential Cookies: These are required for website functionality (e.g., session management and security) and do not require your consent.

  • Analytics Cookies: We use Google Analytics with IP anonymisation to understand website usage and improve our services. We will ask for your consent before setting these cookies.

  • Cookie Management: You can control cookies through your browser settings or our cookie banner. Blocking cookies may affect website functionality.

10. Children's Privacy We do not knowingly collect personal data from children under 13. If you believe we have, please contact us immediately.

11. Changes to This Policy We may update this policy to reflect legal or operational changes. Significant changes will be communicated via email or a website notice.

12. Contact Us

  • Data Protection Queries: hello@ypdcreative.co.uk

  • Postal Address: 67 Howard Street, North Shields NE30 1AF