GDPR

Privacy Policy (UK GDPR)

Identitag Ltd
Version: 2.0 (Rewrite)
Last updated: 20 December 2025

1. Who we are

This privacy policy explains how Identitag Ltd (“we”, “us”, “our”) collects and uses personal data.

Data Controller: Identitag Ltd
Address: Salters Lane, Sedgefield, Stockton-on-Tees, TS21 3EE, United Kingdom
Email: it@identitag.co.uk
Telephone: 01740 621175

2. What personal data we collect

We may collect and process the following categories of personal data:

A. Information you provide to us

  • Name, company name, job title (where relevant)

  • Billing and delivery address

  • Telephone number and email address

  • Account login details (where you create an account)

  • Order details, invoices, and payment status (note: we do not store full card details – see section 9)

  • Personalisation/engraving details you submit (e.g., text, references, drawings, schedules and specifications)

  • Communications with us (e.g., emails, messages, and call notes)

B. Information collected automatically when you use our website

  • IP address and device identifiers

  • Browser type/version, operating system

  • Referral source, pages viewed, time spent, and website navigation

  • Cookie and analytics data (see section 8)

3. How we use your data and our lawful bases

UK GDPR requires us to have a lawful basis for each use of personal data. The main lawful bases we rely on are contract, legal obligation, legitimate interests, and consent. ICO+1

We use your personal data for the purposes below:

A. To process and fulfil orders (including personalisation/engraving)

  • Purpose: order processing, production, dispatch, delivery, customer service

  • Lawful basis: performance of a contract with you (or steps requested prior to a contract)

B. To manage customer accounts and provide support

  • Purpose: account administration, responding to enquiries/complaints, aftersales support

  • Lawful basis: contract and/or legitimate interests (running our business and supporting customers)

C. To manage our business, records and compliance

  • Purpose: invoicing, accounting, audit, tax recordkeeping, fraud prevention, and legal claims

  • Lawful basis: legal obligation (where applicable) and/or legitimate interests

D. To improve our website and services

  • Purpose: troubleshooting, analytics, service improvement, security monitoring

  • Lawful basis: legitimate interests (and consent where required for non-essential cookies)

E. Marketing communications (where applicable)

  • Purpose: sending marketing emails and promotions

  • Lawful basis: consent (or other lawful basis where legally permitted). You can opt out at any time.

4. Who we share your data with

We may share personal data with trusted third parties where necessary, including:

  • Couriers and delivery providers (to deliver your order)

  • Payment processors (to take payment and prevent fraud)

  • IT/website hosting and support providers

  • Professional advisers (e.g., accountants, insurers, solicitors) where necessary

  • Authorities/regulators where required by law or to protect legal rights

We only share personal data that is reasonably necessary for the relevant purpose. We do not sell personal data.

We may also share information in connection with a business sale, merger, acquisition, or asset transfer, where permitted by law.

5. International transfers

Some of our suppliers (for example, certain couriers, payment providers, or IT providers) may process data outside the UK. Where this happens, we take steps designed to ensure appropriate safeguards are in place (for example, contractual safeguards) in line with UK data protection requirements.

6. How long we keep your data (retention)

We keep personal data no longer than necessary for the purposes described in this policy, including meeting legal, accounting, and reporting requirements. ICO+1

As a general guide:

  • Order, invoice and transaction records are typically retained for a number of years to meet tax/accounting obligations and to manage queries, returns, and warranty support.

  • If you request deletion, we will assess the request against legal obligations and legitimate business needs (e.g., we may need to retain certain records to comply with law or to establish or defend legal claims).

7. Your rights

Under UK GDPR, you have rights over your personal data, including:

  • The right to be informed

  • The right of access

  • The right to rectification

  • The right to erasure (in certain circumstances)

  • The right to restrict processing

  • The right to data portability

  • The right to object

  • Rights related to automated decision-making and profiling (where applicable)

  • The right to withdraw consent at any time where we rely on consent ICO+1

You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your data has been handled incorrectly.

To exercise your rights, contact us using the details in section 10.

8. Cookies and analytics

We use cookies and similar technologies to operate our website and (where enabled) understand how it is used. Some cookies are essential; others (such as analytics/marketing cookies) may require your consent depending on how they are configured.

Where applicable, you can manage cookie preferences via our cookie banner/settings. If you disable cookies, parts of the site may not function as intended.

9. Payment information

When you pay by card (online or by telephone), we do not store your full payment card details. Payments are handled by our payment processing providers for the purpose of completing the transaction. Those providers are required to protect your information and use it only to provide payment services to us.

10. Contact us

If you have any questions about this privacy policy or how we handle personal data, please contact:

Email: it@identitag.co.uk
Post: Identitag Ltd, Salters Lane, Sedgefield, Stockton-on-Tees, TS21 3EE
Telephone: 01740 621175

11. Third-party websites

Our website may contain links to other websites. We are not responsible for the privacy policies or practices of third-party sites.

12. Changes to this policy

We may update this privacy policy from time to time to reflect changes to our website, services, or legal requirements. Please review it periodically to stay informed.