loader

Privacy Policy

  • Privacy Policy

Privacy Policy

Last Updated: February 26, 2026

At NDC Creations, we are committed to protecting and respecting your privacy. This policy explains how we collect, use, and store your personal data when you visit our website (https://ndccreations.co.uk), purchase our products, or book an event with us.

1. Data Controller

NDC Creations is operated by CVC International Ltd. We are the “data controller” of the personal information you provide to us.

2. What Data We Collect

We collect information that allows us to fulfill your orders and provide a personalized experience:

  • Identity Data: Name, title, and (for events) company name.
  • Contact Data: Billing address, delivery address, email address, and telephone numbers.
  • Personalisation Data: The specific text, names, dates, or messages you provide for engraving.
  • Financial Data: Payment card details (processed securely via Stripe; we do not store your full card details on our servers).
  • Technical Data: IP address, login data, browser type, and location (collected via cookies).
  • Marketing Data: Your preferences in receiving marketing from us via Active Campaign.

3. How We Use Your Data

We only use your data when the law allows us to. Most commonly:

  • To Perform a Contract: To process your order, deliver your items, and manage event bookings.
  • Legitimate Interests: To improve our website and protect our business (e.g., fraud prevention via Stripe).
  • Consent: Where you have opted-in to receive our newsletter or accepted marketing cookies.

4. Who We Share Your Data With

We do not sell your data. However, we share data with trusted third parties to run our business:

  • Payment Providers: Stripe (to process payments securely).
  • Website Platform: WordPress and WooCommerce (to host our store).
  • Marketing Automation: Active Campaign (if you subscribe to our emails).
  • Analytics & Security: Google Analytics, Jetpack, and reCAPTCHA.
  • Support: WhatsApp (if you use our live chat support).
  • Delivery: Courier services to ship your physical goods.

5. Data Retention

  • Order Information: We keep your contact and order details for 6 years to comply with UK tax and accounting laws.
  • Personalisation Text: We may retain the text used for engraving for up to 2 years to assist with re-orders or disputes, unless you request its deletion.
  • Marketing: We keep your data until you unsubscribe from our list.

6. International Transfers

Some of our third-party providers (like Facebook, LinkedIn, and Active Campaign) are based in the United States. We ensure they have the correct legal safeguards in place (such as Standard Contractual Clauses) to protect your data as per UK law.

7. Your Legal Rights

Under the UK GDPR, you have the right to:

  • Access your data.
  • Correct inaccurate data.
  • Delete your data (the “Right to be Forgotten”).
  • Object to or restrict processing.
  • Data Portability (moving your data elsewhere).

To exercise these rights, contact us at hello@ndccreations.co.uk.

8. Complaints

If you have a concern, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.