Privacy Policy

1. Who this policy applies to

This policy applies to website visitors, customers, prospective customers, business contacts, suppliers and people who contact GYAMDIAS through forms, email, phone, customer accounts or enquiry systems.

2. Information GYAMDIAS may collect

GYAMDIAS may collect names, business names, email addresses, phone numbers, billing and delivery details, account details, order details, quote details, enquiry messages and communication history.

GYAMDIAS may also collect uploaded files, artwork, images, logos, design files, 3D models, project specifications, material choices, colour choices, quantities, deadlines and production instructions.

3. Website and technical information

The website may collect technical data such as IP address, device type, browser type, pages visited, approximate location, cookies, security logs and form submission data.

4. Why personal information is used

Personal information may be used to respond to enquiries, prepare quotes, process orders, provide customer support, produce custom items, deliver products, manage accounts, take payments and keep business records.

Information may also be used to protect the website, prevent fraud, improve services, comply with legal obligations and manage disputes or complaints.

5. Lawful bases for processing

GYAMDIAS may process personal information because it is necessary to take steps before entering into a contract, perform a contract, comply with legal obligations, pursue legitimate business interests or where consent has been given.

Where consent is used, the person may withdraw consent at any time, although this will not affect processing already carried out before withdrawal.

6. Uploaded files and project data

Files, artwork and production information are used to review and fulfil customer projects. They may be stored with order or enquiry records so GYAMDIAS can manage production, reprints, support, quality control and record keeping.

7. Payments

Payment information may be processed by third-party payment providers. GYAMDIAS does not need to store full card details where payments are handled by secure payment processors.

8. WooCommerce and customer accounts

If the website uses WooCommerce or customer account features, account, basket, checkout, billing, delivery and order information may be processed to operate the online shop and customer account area.

9. Hospitality software and NFC services

Where GYAMDIAS provides hospitality software, NFC room plaques or digital guest information systems, additional information may be processed, such as room numbers, venue details, guest information content, staff contact information, support requests and configuration details.

10. Who information may be shared with

Information may be shared with service providers that help operate the business, including website hosting providers, email providers, payment processors, couriers, IT support, professional advisers, production partners and software providers.

Information may also be shared where required by law, regulation, court order, tax authority, fraud prevention requirement or to protect legal rights.

11. International transfers

Some service providers may process information outside the UK. Where this happens, GYAMDIAS aims to use appropriate safeguards where required by applicable data protection law.

12. How long information is kept

Information is kept only for as long as reasonably needed for enquiries, quotes, orders, production records, account management, legal obligations, tax records, dispute handling and business administration.

Uploaded production files may be retained for future reorders or support unless deletion is requested and there is no legal or operational reason to keep them.

13. Customer rights

Depending on location and applicable law, individuals may have rights to access, correct, delete, restrict, object to processing, request portability of their data or complain to a data protection authority.

UK individuals can contact the Information Commissioner's Office if they are unhappy with how their personal information is handled.

14. Marketing

GYAMDIAS may send marketing where permitted by law or where consent has been given. Customers can opt out of marketing messages at any time.

15. Security

GYAMDIAS uses reasonable technical and organisational measures to protect personal information. No online system can be guaranteed completely secure, so customers should avoid sending unnecessary sensitive information.

16. Children's information

The website and production services are not intended to collect personal information from children without appropriate adult involvement. If a project concerns a child, a parent, guardian, school or authorised adult should handle the enquiry or order.

17. Contact

To ask about privacy, request access to personal information or raise a data protection concern, contact GYAMDIAS using the details shown on the Contact page.