Privacy Policy

Reviewed: February 26, 2026

1. Introduction

At Pinksheep Marketing Ltd (“Pinksheep”, “we”, “us”, “our”), we respect your privacy and are committed to protecting your personal data. This policy explains:

• What personal data we collect
• Why we collect it
• How we use it
• How we store and protect it
• Your rights regarding your data

We aim to be transparent and clear so you can trust how we handle your information.

2. Who We Are

Pinksheep Marketing Ltd is a UK-based branded merchandise agency.

• Registered company number: 07615225
• Registered office: Stafford Studios, 129a Stafford Road, Wallington, Surrey, SM6 9BN
• VAT number: GB113750835 / PL5263489797
• Contact email: dataprotection@pinksheep.co.uk

When you provide personal data to us, we are typically the data controller, meaning we decide how and why your data is processed. In some cases, when we operate client web stores or fulfilment platforms on behalf of clients, we may act as a data processor.

3. Personal Data We Collect and Why

We only collect the personal data necessary to provide our services, manage orders, communicate with customers, and comply with legal obligations. The main categories of personal data we collect are:

• Contact Information: Names, email addresses, phone numbers, and company details.
  Purpose: To communicate with you, manage orders or projects, and provide support.
• Order and Delivery Details: Shipping addresses, recipient names, and order history.
  Purpose: To fulfil orders, manage production, and provide customer service.
• Website and Platform Usage Data: IP addresses, browser type, pages visited, and engagement with our web stores or The Full Works platform.
  Purpose: To improve user experience, maintain functionality, and analyse performance.
• Marketing and Communication Preferences: Newsletter subscriptions and engagement history.
  Purpose: To send updates and relevant marketing communications.
• Job Applicant Data: CVs, cover letters, and contact details of prospective employees.
  Purpose: Recruitment and candidate management.
• Payment Information: Payment details (e.g., card payment transactions, invoices).
  Purpose: To process payments and maintain financial records.
• Customer Artwork and Branding Files: Logos, artwork, and design files for production.
  Purpose: Production of merchandise and client projects.

We do not collect more personal data than necessary, and we only process data that is relevant to providing our services.

4. How We Collect Your Data

We collect personal data in the following ways:

• Directly from you: via emails, forms, phone calls, or orders.
• Via client web stores: when using our ecommerce platform or placing orders.
• Automatically: website analytics, cookies, and other technical logs.
• From third parties: e.g., courier services for delivery information, accounting platforms.

5. Cookies and Website Tracking

We use cookies and similar technologies on our website to:

• Ensure website functionality.
• Analyse and improve user experience.
• Measure engagement with marketing campaigns.

Types of cookies:

• Necessary cookies: Required for website operation.
• Analytics cookies: e.g., Google Analytics (anonymised data only).
• Advertising cookies: e.g., Google Ads pixels for measuring engagement.

You can manage cookies in your browser settings.

6. How We Store and Protect Your Data

We take organisational and technical measures to protect your data:

• Data is stored securely in trusted cloud-hosted platforms, which have undergone necessary due diligence.
• Role-based access ensures only authorised staff can access data.
• Endpoints are protected with security software and multi-factor authentication.
• Data is encrypted in transit and at rest wherever supported.
• Regular backups, recovery tests, and vulnerability monitoring are performed.

We avoid sharing internal configurations or system-level details publicly for security reasons.

7. Sharing Your Data

We do not sell personal data. We may share data in the following ways:

Trusted Third-Party Providers:

• Infrastructure & Hosting: To securely store data and maintain platform functionality.
• Analytics: To understand website usage and improve services.
• Marketing & Communication: To send newsletters or relevant updates.
• Payment Processing: To handle transactions and manage account.
• Accounting & Bookkeeping: To maintain financial records.
• Recruitment Systems: To manage job applications and candidate communications.

All third-party providers:

• Are GDPR-compliant.
• Process data only under our instructions.
• Implement appropriate security measures.

Exceptional circumstances:

• If required by law or regulatory authorities.
• If Pinksheep is sold, merged, or undergoes corporate restructuring.

We take all steps necessary to ensure your data is treated securely and in accordance with this privacy policy.

8. Your Rights

You have the following rights under UK GDPR:

• Access: Request a summary of your personal data.
• Correction: Update or amend inaccurate information.
• Erasure: Ask us to delete data where allowed.
• Restriction: Limit processing under certain conditions.
• Portability: Receive your data in a portable format.
• Objection: Object to processing, including marketing communications.
• Automated decisions: Object to automated processing or profiling.

Contact us at dataprotection@pinksheep.co.uk to exercise any rights.

You may also complain to the UK Information Commissioner’s Office (ICO): https://www.ico.org.uk

9. Changes to this Privacy Policy

We may update this policy from time to time. The effective date reflects the latest version.

10. Policy Review

This policy is reviewed at least annually or whenever there is a significant change in processing activities or
systems.

11. Definitions