Privacy Policy
Last updated: August 2026

 1. About This Privacy Policy
This Privacy Policy explains how You Name It ("we", "us", "our") collects, uses, stores and shares your personal information when you visit www.younameit.co.uk, purchase products from us, create an account, contact us, submit information for a personalised product, or otherwise interact with our website, products or services (collectively, the "Services").
We respect your privacy and are committed to protecting your personal information. We process personal information in accordance with applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 ("PECR").
Please read this Privacy Policy carefully so that you understand how and why we use your personal information.

2. Who We Are
You Name It is an online retailer specialising in personalised gifts and related products.
For the purposes of applicable data protection law, You Name It Limited is the data controller responsible for the personal information described in this Privacy Policy.
You can find our full legal and contact details in Section 19.

3. What Personal Information We Collect
The personal information we collect depends on how you interact with us and the Services you use.
We may collect the following categories of personal information.

Contact information
This may include:

• your name;
• billing address;
• delivery address;
• email address; and
• telephone number.

Order and transaction information
This may include:

• products ordered or purchased;
• order numbers;
• purchase history;
• transaction details;
• delivery and fulfilment information;
• returns, refunds, cancellations and exchanges;
• discount or promotional codes used; and
• payment status and payment confirmation.

Payment information
Payments may be processed by third-party payment service providers.
Depending on the payment method used, payment providers may collect information such as your card details, bank account information, billing address and other information necessary to process your payment.

We may receive limited payment and transaction information, such as:

• the payment method used;
• transaction reference;
• payment status; and
• payment confirmation.

We do not necessarily receive or store your full payment card details where these are processed directly by a payment service provider.

Personalisation information
When you order a personalised product, you may provide us with information such as:

• names;
• initials;
• dates;
• personal messages;
• dedications;
• engraving instructions;
• photographs;
• images;
• artwork;
• logos;
• designs; and
• other information or content required to personalise your product.

This information may relate to you or to another person.
Where you provide us with personal information about another person, you should ensure that you are authorised to provide that information where required by law.
Please avoid providing sensitive or special-category personal information within personalisation instructions unless it is genuinely necessary for your order.

Account information
Where customer accounts are available, we may collect or process:

• account identifiers;
• login information;
• account preferences;
• saved addresses;
• order history;
• wishlist information; and
• other settings associated with your account.

Communications and customer service information
This includes information you provide when you:

• contact us by email, telephone, contact form, social media or another communication method;
• ask us a question;
• make a complaint;
• request support;
• provide feedback; or
• otherwise communicate with us.

We may retain correspondence and information relating to your enquiry or request.

Reviews and feedback
Where you submit a review or where we use a customer review service, we may process information including:

• your name or display name;
• email address;
• order information;
• product purchased;
• rating;
• review content; and
• responses or other feedback.

Where applicable, we may share limited information with customer review and feedback platforms in order to invite genuine customers to provide feedback about their purchase or experience.

Device and technical information
When you use our website, we or our service providers may automatically collect certain technical information, including:

• IP address;
• browser type and version;
• device type;
• operating system;
• unique device or browser identifiers;
• language settings;
• approximate location derived from your IP address;
• referring website; and
• other technical information relating to your connection and device.

Website usage information
We may collect information about how you interact with our website, including:

• pages and products viewed;
• searches performed;
• links clicked;
• products added to or removed from your basket;
• wishlist activity;
• checkout activity;
• time and date of visits;
• referring pages or websites; and
• navigation and interaction with our Services.

Marketing information and preferences
This may include:

• whether you have agreed to receive marketing;
• your communication preferences;
• your interaction with marketing emails or messages; and
• information relevant to the personalisation or measurement of advertising, where permitted by law.

4. How We Collect Personal Information
We may collect personal information from the following sources.

Directly from you
For example, when you:

• make a purchase;
• create an account;
• submit information for a personalised product;
• subscribe to marketing;
• contact us;
• submit a review;
• enter a competition or promotion; or
• otherwise provide information to us.

Automatically when you use our website
We and our service providers may automatically collect technical and usage information through cookies, pixels, tags, scripts, web storage and similar technologies, subject to applicable law and your choices.

From service providers
We may receive information from organisations that help us provide our Services, including:

• ecommerce platform providers;
• payment service providers;
• delivery and fulfilment providers;
• customer review and feedback platforms;
• fraud prevention and security providers;
• analytics providers;
• marketing and communications providers; and
• IT and technical service providers.

From other third parties
In appropriate circumstances, we may receive personal information from business partners, social media platforms, advertising partners, publicly available sources or other third parties, where permitted by law.

5. How and Why We Use Your Personal Information
We only process your personal information where we have a valid lawful basis for doing so.

Depending on the circumstances, we may rely on:

• performance of a contract — where processing is necessary to provide products or services you have requested or to take steps at your request before entering into a contract;
• legal obligation — where processing is necessary to comply with a legal requirement;
• legitimate interests — where processing is necessary for our legitimate business interests or those of another party, provided those interests are not overridden by your rights and interests;
• consent — where you have freely given us specific permission to process your information for a particular purpose; or
• another lawful basis where applicable under data protection law.

The following table explains our main processing activities and lawful bases.

Purpose	Personal information used	Lawful basis
Processing and fulfilling your order	Contact, order, transaction, payment and personalisation information	Performance of a contract
Creating personalised products	Personalisation information, including names, messages, images, photographs, designs and instructions	Performance of a contract
Processing payments	Contact, transaction and payment information	Performance of a contract
Arranging delivery and fulfilment	Name, delivery address, contact and order information	Performance of a contract
Managing returns, refunds, cancellations and complaints	Contact, order, transaction and communications information	Performance of a contract, legal obligation and/or legitimate interests
Responding to enquiries	Contact and communications information	Performance of a contract, steps before entering into a contract and/or legitimate interests
Providing customer service	Contact, order and communications information	Performance of a contract and/or legitimate interests
Maintaining customer accounts	Contact, account, order and preference information	Performance of a contract and/or legitimate interests
Preventing fraud and securing our website and Services	Account, transaction, device, technical and usage information	Legitimate interests and/or legal obligation
Maintaining financial, tax and business records	Order, contact, transaction and payment information	Legal obligation and legitimate interests
Establishing, exercising or defending legal claims	Information relevant to the claim or dispute	Legitimate interests and/or legal obligation
Improving our website, products and Services	Technical, device, usage, customer service and feedback information	Legitimate interests and, where required for the relevant technologies, consent
Website analytics	Device, technical and usage information	Consent where required by PECR and applicable data protection law, or another lawful basis where legally permitted
Sending marketing communications	Contact and marketing preference information	Consent, the PECR soft opt-in where applicable, or another lawful basis permitted by law
Personalised advertising and advertising measurement	Device, technical, usage and marketing information	Consent where required by law
Collecting and displaying customer reviews	Contact, order and review information	Legitimate interests and/or consent, depending on the circumstances
Complying with legal and regulatory requirements	Any information reasonably necessary for the relevant requirement	Legal obligation

Where we rely on legitimate interests, those interests may include:

• operating and improving our business;
• providing effective customer service;
• protecting our business, customers and Services from fraud, misuse and security threats;
• maintaining appropriate business and financial records;
• managing disputes and legal claims;
• understanding how customers use our Services; and
• promoting our products where permitted by law.

We consider and balance our interests against your rights and freedoms before relying on legitimate interests as our lawful basis.

6. Personalised Products and Uploaded Content
As a business supplying personalised products, we may need to process information submitted by you specifically for the production of your order.

This may include:

• names;
• initials;
• dates;
• personal messages;
• photographs;
• images;
• artwork;
• designs;
• logos; and
• other content or instructions.

We use this information primarily to:

• create and manufacture your personalised product;
• provide proofs or previews where applicable;
• communicate with you regarding your personalisation requirements;
• fulfil your order;
• investigate production or quality issues;
• process returns, refunds or complaints where applicable; and
• establish, exercise or defend legal claims where necessary.

Please ensure that you have the necessary rights or permissions to submit photographs, images, designs, logos or personal information relating to another person.
We do not intentionally request special-category personal information for ordinary orders. However, personalised content provided by customers may occasionally reveal sensitive information. Where this happens, we will only process that information to the extent necessary and permitted by applicable law.
We will not use your private uploaded photographs, personal messages or personalised artwork for unrelated marketing purposes without appropriate permission or another valid legal basis.

7. Marketing Communications
We may send you information about our products, offers, promotions and Services where permitted by law.
For electronic marketing such as email or text messages, we will obtain consent where required or rely on another applicable permission under PECR, such as the soft opt-in for existing customers where all legal requirements are met.

You can unsubscribe from marketing communications at any time by:

• clicking the unsubscribe link contained in our marketing emails;
• changing your communication preferences where available; or
• contacting us using the details in Section 19.

Opting out of marketing does not prevent us from sending non-marketing communications that are necessary to:

• fulfil your order;
• administer your account;
• provide delivery updates;
• respond to an enquiry;
• deal with a complaint; or
• provide important service information.

8. Cookies and Similar Technologies
Our website may use cookies and similar technologies, including pixels, tags, scripts, web storage and other technologies that store information on or access information from your device.

These technologies may be used for purposes including:

• enabling essential website functions;
• remembering preferences;
• maintaining your shopping basket and checkout;
• account authentication and security;
• fraud prevention;
• understanding how visitors use our website;
• measuring website performance;
• improving our Services; and
• advertising and marketing, where applicable.

Strictly necessary technologies
Some technologies are necessary for the website and Services to function properly.
Where an exemption applies under PECR, these technologies may be used without consent.

Analytics, advertising and other non-essential technologies
Where consent is required by law, we will not use non-essential cookies or similar technologies unless and until you provide valid consent.
You can accept, reject or manage available cookie categories through our cookie consent controls where provided.
You may also control certain cookies through your browser settings. Blocking some technologies may affect how parts of our website function.
For further information about the cookies and similar technologies used on our website, or to review or change your preferences at any time, please use the Cookie Preferences link available in the footer of our website.

9. Who We Share Personal Information With
We do not sell your personal information.
We may share personal information with carefully selected third parties where reasonably necessary to:

• operate our business;
• provide our Services;
• process payments;
• fulfil and deliver orders;
• collect genuine customer feedback;
• maintain and improve our website;
• communicate with customers;
• protect our business and Services;
• comply with legal obligations; or
• pursue other legitimate purposes described in this Privacy Policy.

These recipients may include the following categories.

Ecommerce platform providers
Providers that host, support and operate our online store and provide ecommerce functionality.
Please also see the dedicated Shopify section below.

Payment service providers
Providers that process payments, authenticate transactions, issue refunds, prevent fraud and support payment-related legal and regulatory compliance.
Payment providers may collect payment details directly and process them in accordance with their own privacy policies.

Delivery, postal, courier and fulfilment providers
Providers that assist with:

• delivering orders;
• providing tracking information;
• handling returns; and
• supporting fulfilment and logistics.

We may provide these providers with information such as your name, delivery address, contact details and relevant order information.

Customer review and feedback platforms
Providers that help us collect genuine customer feedback and product or service reviews.
Where applicable, we may share limited information such as your name, email address, order reference, purchase details or other information reasonably necessary to send a review invitation or verify a genuine purchase.

IT, website, cloud storage and technical service providers
Providers that support:

• our website;
• IT systems;
• data storage;
• email;
• communications;
• cybersecurity;
• technical support; and
• other operational functions.

Analytics providers
Providers that help us understand:

• website usage;
• visitor behaviour;
• website performance;
• technical issues; and
• how our Services may be improved.

Where required by law, non-essential analytics technologies will only be used with appropriate consent.

Marketing, advertising and communications providers
Providers that may help us:

• send permitted marketing communications;
• manage email campaigns;
• measure campaign performance;
• display advertising; and
• better understand the effectiveness of our marketing.

Where required by law, we will obtain consent before using relevant technologies or personal information for personalised advertising or similar purposes.

Fraud prevention, security and identity verification providers
Providers that assist us with:

• fraud detection;
• payment security;
• account protection;
• identity verification;
• abuse prevention; and
• cybersecurity.

Professional advisers
We may disclose information where necessary to professional advisers, including:

• accountants;
• auditors;
• insurers;
• solicitors;
• tax advisers; and
• other professional consultants.

Government bodies, regulators and law enforcement
We may disclose personal information where required or permitted by law, including to:

• HM Revenue & Customs;
• courts and tribunals;
• regulators;
• law enforcement bodies;
• government authorities; and
• other organisations with lawful authority to request the information.

Business transactions
If all or part of our business is sold, transferred, merged, reorganised or otherwise involved in a corporate transaction, personal information may be disclosed to:

• prospective or actual buyers;
• sellers;
• investors;
• lenders;
• professional advisers; and
• other relevant parties.

Such disclosures will be subject to appropriate safeguards and legal requirements.

We require service providers acting on our behalf to process personal information only for appropriate purposes and subject to applicable data protection obligations.

10. Our Relationship with Shopify
Our online store is hosted and supported by Shopify.
Shopify provides the ecommerce platform that enables us to offer our products and Services online.

When you visit or use our website, Shopify may collect and process personal information in order to:

• host and operate the online store;
• provide checkout and ecommerce functionality;
• process transactions;
• maintain platform security;
• prevent fraud;
• provide technical functionality;
• improve its services; and
• support other features used by our store.

Information you submit through our website may be transmitted to and processed by Shopify and its service providers.
Depending on the Shopify features enabled on our store, Shopify may also process information about your interactions with our store and other Shopify services for purposes described in Shopify's own privacy notices.
In some circumstances, Shopify may act as our service provider or processor. In other circumstances, Shopify may be independently responsible for certain processing activities.
You can find further information about how Shopify processes personal information relating to consumers in Shopify's Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers
Where applicable, Shopify also provides a consumer privacy portal through which individuals may exercise rights relating to certain processing activities for which Shopify is responsible:
https://privacy.shopify.com/en

11. International Transfers
Some of our service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred outside the UK and the transfer is subject to UK data protection restrictions, we will take appropriate steps to ensure that the information receives an adequate level of protection.

Depending on the circumstances, this may include relying on:

• UK adequacy regulations;
• the UK International Data Transfer Agreement ("IDTA");
• the UK Addendum to the European Commission's Standard Contractual Clauses;
• binding corporate rules;
• another appropriate safeguard recognised under UK data protection law; or
• a specific exception permitted by law where applicable.

Where appropriate, we also assess relevant risks associated with international transfers.
You may contact us using the details in Section 19 for further information about the safeguards used for relevant international transfers.

12. How Long We Keep Personal Information
We do not keep personal information for longer than reasonably necessary for the purposes for which it was collected, including to:

• fulfil orders;
• provide customer service;
• meet legal and regulatory obligations;
• resolve disputes;
• prevent fraud;
• maintain appropriate business records; and
• establish or defend legal claims.

Retention periods vary depending on the type of information and the reason it is processed.
Our general approach is as follows:

Type of information	General retention approach
Order and transaction records	Generally retained for up to 6 years, or for another period required by tax, accounting or legal obligations
Payment and transaction information available to us	For as long as reasonably necessary for payment administration, accounting, fraud prevention, disputes and legal obligations
Customer account information	While the account remains active and for an appropriate period afterwards, unless earlier deletion is appropriate or continued retention is legally required
Customer service communications	For as long as reasonably necessary to resolve the enquiry, maintain appropriate business records and deal with potential disputes
Personalisation instructions	For as long as reasonably necessary to produce and fulfil the order and manage queries, complaints, replacements or legal claims
Customer-uploaded photographs and artwork	For as long as reasonably necessary for order fulfilment, customer service, reorders where applicable, dispute resolution and legitimate business or legal requirements
Marketing information and preferences	Until you opt out, withdraw consent where applicable, or the information is no longer needed, subject to retaining limited suppression information to respect your preferences
Reviews and feedback	For as long as the review remains relevant or published, subject to applicable rights and legal requirements
Cookie and similar technology data	According to the duration of the relevant cookie or technology and our cookie settings or policy
Security and fraud-prevention information	For as long as reasonably necessary to protect our Services, prevent fraud, resolve disputes and comply with legal obligations

When deciding how long to retain personal information, we consider:

• the amount, nature and sensitivity of the information;
• why we collected it;
• whether we still need it for that purpose;
• legal, tax, accounting and regulatory requirements;
• the risk of harm from unauthorised use or disclosure;
• the existence of actual or potential disputes or legal claims; and
• whether the relevant purpose can be achieved in another way.

When personal information is no longer required, we will delete, anonymise or otherwise securely dispose of it, subject to our legal and technical obligations.

13. How We Protect Your Personal Information
We take the security of personal information seriously and use appropriate technical and organisational measures designed to protect it against:

• accidental or unlawful loss;
• alteration;
• destruction;
• unauthorised disclosure; and
• unauthorised access.

Depending on the circumstances, these measures may include:

• access controls;
• secure systems and service providers;
• authentication measures;
• encryption where appropriate;
• monitoring and security procedures;
• limiting access to people who reasonably need the information; and
• appropriate contractual protections with service providers.

However, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure.
You should take reasonable precautions when sending information online and keep account credentials confidential.

14. Your Data Protection Rights
Under the UK GDPR, you may have the following rights, depending on the circumstances.

Right to be informed
You have the right to receive clear information about how we collect and use your personal information.
This Privacy Policy is intended to provide that information.

Right of access
You may ask us whether we process your personal information and request a copy of the personal information we hold about you.

Right to rectification
You may ask us to correct personal information that is inaccurate or complete information that is incomplete.

Right to erasure
You may ask us to delete your personal information in certain circumstances.
This right is not absolute, and we may need or be permitted to retain information for legal, regulatory, contractual or other legitimate reasons.

Right to restrict processing
You may ask us to restrict the processing of your personal information in certain circumstances.

Right to data portability
In certain circumstances, you may have the right to receive personal information you provided to us in a structured, commonly used and machine-readable format and to have it transmitted to another organisation.

Right to object
You may object to certain processing of your personal information, including processing based on legitimate interests in some circumstances.
You have an absolute right to object to the use of your personal information for direct marketing purposes.

Right to withdraw consent
Where we rely on consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Rights relating to automated decision-making
You may have rights regarding decisions based solely on automated processing, including profiling, where those decisions produce legal effects or similarly significantly affect you.
We do not use solely automated decision-making that produces legal or similarly significant effects on individuals unless expressly stated otherwise.

Exercising your rights
To exercise a data protection right, please contact us using the details in Section 19.
You do not have to use a specific form or wording.
We may ask for information reasonably necessary to verify your identity and protect personal information from unauthorised access or disclosure.
We will respond within the period required by applicable law.
Under the UK GDPR, this is normally without undue delay and within one month, although the response period may be extended in certain circumstances permitted by law.
There is normally no charge for exercising your rights. However, applicable law may permit us to charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.
Not all rights apply in every circumstance, and exemptions may apply.

15. Children's Personal Information
Our Services are intended for adults purchasing products and are not specifically directed at children.
We do not knowingly seek to collect personal information directly from children where parental or guardian consent would be required by law.

Personalised products purchased by an adult may contain a child's:

• name;
• photograph;
• date of birth;
• message; or
• other personal information.

In these circumstances, we process that information to fulfil the purchaser's order and for other appropriate purposes described in this Privacy Policy.
If you believe that a child has provided personal information to us improperly, please contact us using the details in Section 19.

16. Third-Party Websites and Links
Our website may contain links to websites, services or platforms operated by third parties.
We do not control those third parties and are not responsible for their privacy, security or data-processing practices.
We encourage you to read the privacy notices of any third-party websites or services you visit.

17. Complaints
If you have concerns about how we collect or use your personal information, please contact us first using the details in Section 19.
We will take your concerns seriously and aim to resolve them appropriately.
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Information Commissioner's Office
Website: https://ico.org.uk/
Telephone: 0303 123 1113
We would appreciate the opportunity to address your concerns directly, but you are not required to contact us before making a complaint to the ICO.
If you are located outside the UK, you may also have the right to complain to the data protection authority responsible for your location.

18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:

• our business practices;
• our Services;
• the technologies we use;
• our service providers;
• legal or regulatory requirements; or
• other operational circumstances.

When we make changes, we will publish the updated Privacy Policy on our website and change the "Last updated" date at the top of this page.
Where required by law, we will provide additional notice of material changes.

19. Contact Us
For questions about this Privacy Policy, our privacy practices or your personal information, or to exercise your data protection rights, please contact:

Trading name: You Name It
Legal company name: You Name It Limited
Company number: 16004796
VAT number: [VAT NUMBER, IF APPLICABLE]
Registered address: 9 Hawk Close, Flitwick, MK45 1RX, Bedfordshire, UK
Postal/contact address: Same as registered address
Email: sales@younameit.co.uk
Telephone: (+44) 07463674185
Website: www.younameit.co.uk