Privacy Policy

Cloud Boyz, London, United Kingdom. Data protection contact: [email protected].

Account & orders: name, email, delivery address, phone, order contents, payment references, terms acceptance timestamps.

Wholesale applications: company name, VAT/trade details, business address, references, product interest.

Custom projects: briefs, uploaded artwork, proof approvals, messages.

CRM & stockists: business contact details for shops we work with (entered by our team).

Technical: IP address, browser type, device data, session and cart cookies (see Cookie Policy).

Contract: processing orders, accounts, custom projects, and wholesale applications you submit.

Legitimate interests: fraud prevention, service improvement, B2B relationship management, and limited analytics where enabled with consent.

Legal obligation: tax, accounting, and regulatory records.

Consent: marketing emails and non-essential cookies where required.

To fulfil order requests, wholesale onboarding, custom design and production, customer support, transactional email, and platform security. Marketing communications only where you opt in or where permitted for existing customers with an easy opt-out.

Artwork and documents uploaded for custom orders are stored securely with access limited to authorised staff and processors required to deliver your project.

We use trusted processors for hosting, email delivery, payment processing (when enabled), and file storage. We do not sell personal data. We may disclose information if required by law or to protect our rights.

Orders & invoices: typically 6 years for UK tax and accounting.

Wholesale & CRM records: while the relationship is active and for a reasonable period after.

Marketing opt-outs: retained to honour your preference.

Support tickets: up to 24 months unless longer retention is required.

Data may be processed in the UK and EEA. Where processors are outside the UK/EEA, we use appropriate safeguards such as UK International Data Transfer Agreements or EU Standard Contractual Clauses.

You may have rights to access, rectify, erase, restrict, object, or port your data, and to withdraw consent where processing is consent-based. UK residents may complain to the ICO; EU residents to their local supervisory authority. Contact [email protected] to exercise rights.