Privacy Policy

Last updated: 24th January 2026

1. Introduction

Decal Empire is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our website and services.

2. Information We Collect

2.1 Personal Information

When you place an order, we collect:

• Name and contact details
• Delivery address
• Email address
• Phone number (optional)
• Payment information (processed securely by our payment provider)
• Account login credentials and authentication data (processed securely by Clerk)

2.2 Order Information

• Products ordered
• Artwork files uploaded
• Order history
• Communication records

2.3 Account & Authentication Data

If you create an account on our website, we use Clerk to securely manage your registration, login, and authentication. Clerk may collect and process:

• Email address
• Name and profile information
• Password (securely encrypted and hashed)
• Session tokens and login history
• Device and browser information for security purposes
• Social login data (if you choose to sign in via Google, Apple, or other providers)

Clerk acts as a data processor on our behalf and is certified under the EU-US Data Privacy Framework for GDPR compliance. Your authentication data may be transferred to and stored in the United States with appropriate safeguards in place.

Learn more: Clerk Privacy Policy

2.4 Technical Information

When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• How you arrived at our site
• Mouse movements, clicks, and scroll behaviour (via analytics tools)

3. How We Use Your Information

We use your information to:

• Process and fulfil your orders
• Manage your account and authentication
• Send order confirmations and updates
• Provide customer support
• Send proofs for approval
• Improve our services and website experience
• Analyse website usage and performance
• Comply with legal obligations

4. Data Sharing

4.1 Service Providers

We share data with trusted third parties who help us operate our business:

• Payment processors (Stripe)
• Delivery services
• Email providers
• Authentication services (Clerk)
• Analytics services (Google Analytics, Microsoft Clarity)

4.2 Legal Requirements

We may disclose information if required by law or to protect our rights and safety.

4.3 No Selling of Data

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate security measures to protect your data:

• SSL encryption for all data transmission
• Secure payment processing
• Secure password storage using industry-standard encryption
• Regular security reviews
• Access controls for staff

6. Data Retention

We retain your data for as long as necessary to:

• Fulfil your orders
• Maintain your account
• Provide customer support
• Meet legal obligations
• Resolve disputes

Order records are typically retained for 6 years for accounting purposes. Account data is retained for as long as your account remains active.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability
• Withdraw consent

To exercise these rights, contact us at contact@decalempire.co.uk.

8. Cookies and Analytics

We use cookies and similar technologies to improve your experience and understand how our website is used.

8.1 Essential Cookies

These cookies are necessary for the website to function properly:

• Keep you signed in to your account
• Remember your preferences
• Process your shopping cart
• Maintain security

8.2 Authentication Cookies

We use Clerk for secure user authentication. Clerk uses cookies to:

• Manage your login session
• Keep you securely signed in
• Protect against unauthorised access

These cookies are necessary for account functionality and security.

8.3 Analytics Cookies

We use analytics tools to understand how visitors interact with our website. This helps us improve user experience and our services.

Google Analytics

We use Google Analytics to collect information about how you use our website. This includes:

• Pages you visit and time spent on each page
• How you arrived at our site (e.g., search engine, direct link)
• Your approximate location (country/city level)
• Browser and device information
• Interactions with site features

Google Analytics uses the following cookies:

Google Analytics data is processed by Google. You can learn more about how Google handles your data in their Privacy Policy.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Microsoft Clarity

We use Microsoft Clarity to understand how you interact with our website through heatmaps and session recordings. This helps us identify usability issues and improve your experience. Clarity collects:

• Mouse movements, clicks, and scroll behaviour
• Pages visited and navigation patterns
• Device and browser information
• Time spent on pages

Important: Sensitive information such as payment details and passwords are automatically masked and never recorded.

Microsoft Clarity uses the following cookies:

You can learn more about Microsoft's data practices in their Privacy Statement.

8.4 Managing Cookies

When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or reject non-essential cookies.

You can also control cookies through your browser settings. Please note that disabling certain cookies may affect website functionality, including the ability to stay signed in to your account.

How to manage cookies in your browser:

• Chrome: Settings > Privacy and Security > Cookies
• Firefox: Settings > Privacy & Security > Cookies
• Safari: Preferences > Privacy > Cookies
• Edge: Settings > Privacy & Services > Cookies

9. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries outside the UK, including the United States. This applies to data processed by our service providers including Clerk (authentication), Google (analytics), and Microsoft (analytics).

Where data is transferred outside the UK, we ensure appropriate safeguards are in place:

• Clerk is certified under the EU-US Data Privacy Framework
• Google and Microsoft comply with applicable data transfer mechanisms
• All transfers are conducted in accordance with UK GDPR requirements

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

For significant changes, we will notify you via email or a prominent notice on our website.

13. Contact Us

For privacy-related enquiries or to exercise your data rights:

Email: contact@decalempire.co.uk

Address:
Decal Empire LTD
Unit 6 Parc Gelli Werdd
Cross Hands, Llanelli
SA14 6EF
United Kingdom

Company No. 13933695

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.