Privacy Policy

Liberty Signs Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy explains what personal data we collect when you use libertysigns.co.uk, why we collect it, and how we keep it safe.

We are the data controller for your information. Contact us at info@libertysigns.co.uk or by post at Unit 8, Mosley Rd, Trafford Park, Manchester M17 1HQ.

Liberty Signs Ltd is a company registered in England & Wales (company no. 12476901; registered office: Cuffley Place, Office 205, Sopers Road, Cuffley, United Kingdom, EN6 4SG). We are not required to appoint a Data Protection Officer; privacy queries are handled at the contact details above.

What we collect

• Identity & contact details: your name, email address, phone number, and delivery/billing address.
• Account data: email and hashed password when you create an account, stored securely via Supabase Auth.
• Order data: what you ordered, pricing selections, artwork files you upload, and proof approvals.
• Payment data: processed entirely by Stripe. We never see or store your card details; we only keep a Stripe transaction reference against your order.
• Technical data: IP address, browser type, pages visited, and timestamps. Collected automatically to keep the site running and secure.
• Support messages: messages you send through our contact or support forms, along with your name and email so we can reply.
• Marketing preferences: if you opt in (for example when booking a survey or in your account settings), we record your consent to receive occasional marketing emails about new products, offers, and case studies.

Why we collect it and our legal basis

• Fulfilling your order, processing payments, and sending order confirmations and dispatch notifications: contract performance.
• Abandoned cart reminders: legitimate interest (you can opt out at any time).
• Sending marketing emails about new products, offers, and case studies, where you have opted in: consent (you can withdraw at any time via the unsubscribe link or your account settings).
• Responding to support messages: legitimate interest / consent.
• Keeping the site secure and preventing fraud: legitimate interest.
• Measuring product, cart, checkout, and campaign performance when you accept optional analytics and advertising measurement storage: consent.
• Complying with tax and accounting obligations: legal obligation.

Who we share your data with

We only share your data with third parties necessary to run our business and fulfil your orders:

• Stripe: payment processing. See Stripe's privacy policy.
• Supabase: database and authentication hosting. See Supabase's privacy policy.
• Resend: transactional email delivery.
• DPD: your name and delivery address are shared to deliver your order.
• Google Tag Manager / Google Analytics / Google Ads: analytics and advertising measurement, only when you consent to optional measurement storage.
• Our order-management system: order details, including your delivery postcode, are processed in Liberty Signs' own order-management platform to calculate delivery and installation options and to fulfil your order.

We do not sell your personal data.

How long we keep your data

• Account data: kept while you have an account. You can delete it anytime from your settings or by emailing us.
• Order and invoice data: kept for 7 years to comply with UK tax regulations (HMRC).
• Support messages: kept for up to 12 months after the conversation.
• Abandoned cart data: retained so you can recover your cart for up to 30 days, after which it can no longer be recovered.
• Technical and security logs: kept for up to 12 months.
• Marketing consent records: kept as evidence of your consent until you withdraw it, and for a short period afterwards.

Cookies and local storage

We use a small number of essential cookies and browser local storage to keep the site working. Optional analytics and advertising measurement storage is used only if you accept it. For full details, see our Cookie Policy.

Your rights under UK GDPR

You have the right to access, rectify, erase, restrict, and port your data, as well as to object to processing based on legitimate interests and to withdraw consent where we rely on it.

To exercise any of these rights, email us at info@libertysigns.co.uk. We will respond within one month, though we may extend this by up to two further months for complex or numerous requests and will tell you if so.

International data transfers

Some providers may process data outside the UK. Where they do, transfers are protected by Standard Contractual Clauses or equivalent safeguards approved by the ICO.

How we keep your data safe

We use HTTPS encryption across the entire site. Passwords are hashed and never stored in plain text. Payment data is handled entirely by Stripe, who are PCI DSS Level 1 certified. Database access is restricted to authorised personnel only, with row-level security in place.

Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Prices shown by our online calculator are generated automatically from the options you choose, but this does not involve profiling, and you can always contact us for a manual quote.

Children

Our site is not directed at anyone under 16. We do not knowingly collect personal data from children. If you believe we have, please contact us and we will delete it promptly.

Complaints

Please contact us first at info@libertysigns.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or by calling 0303 123 1113.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or by placing a notice on our website.