Privacy Policy

Who is responsible for your data?

Branded Cups Ltd is the controller of personal data used to operate branded-cups.com and its customer checkout. Registered in England and Wales, company number 08958988. Registered office: Unit 1a Commerce Way, Highbridge, England, TA9 4AG.

For privacy questions or to exercise your rights, email hello@branded-cups.com, call 0333 880 1050 or write to the registered office.

What we collect and why

• Enquiries and quotes: your name, email, phone number, organisation, requirements and messages, so we can respond and prepare a quotation. This is necessary to take steps at your request before a contract, or for our legitimate interest in answering business enquiries.
• Accounts and orders: login and contact details, billing and delivery addresses, products, quantities, artwork, order notes, payment status, invoices and delivery updates. We use these to fulfil the contract, provide support and meet accounting and tax obligations.
• Artwork and designs: uploaded files, saved designs and revisions, including personal information you choose to include. These are used for design previews, artwork support and manufacture. Only upload material you are entitled to share; avoid including unnecessary sensitive information.
• Payments: Mollie processes your payment credentials and transaction as an independent controller. We receive the transaction reference and payment outcome; full card numbers are not stored in our shop. Read Mollie’s Privacy Statement for its payment processing and retention rules.
• Security and operation: IP address, browser and device information, request logs and account/session identifiers, for site delivery, security, fraud prevention and troubleshooting. Our lawful basis is our legitimate interest in operating a secure service, or a legal obligation where applicable.
• Optional measurement, advertising and chat: the information described below, based on the choices you make in Cookie settings.

Required form fields are needed to respond or process your order. Optional fields may be left blank. Sending an enquiry, creating an account or accepting our terms does not subscribe you to promotional emails or give consent to advertising cookies.

Google, Meta and advertising measurement

With analytics consent, Google Analytics and Vercel Analytics measure site use and aggregate campaign performance. Marketing consent authorises the Google Ads and Meta (Facebook and Instagram) integrations for conversion measurement, advertising audiences and personalised ads. The event data consists of IP address, device and browser information, pages and actions, product and transaction details, cookie identifiers and advertising click identifiers, according to the action you take.

With marketing consent, our conversion-matching integration makes hashed contact details from your enquiry or order available to the advertising tags. Hashing does not make these details anonymous. We do not send the contents of your artwork, messages, full postal address or payment credentials as advertising event data.

Google and Meta may combine information received from this site with information from their own services, subject to your choices and their policies. Read how Google uses information from sites and apps and Meta’s Privacy Policy. These companies may process data for their own purposes as described in those policies.

Optional tracking is disabled before a choice or after rejection. Google Consent Mode signals reflect your category choices. Choosing analytics alone does not authorise Meta tracking, personalised Google advertising or enhanced conversion matching. See our Cookie policy for technologies and durations.

Live chat and communications

Zoho SalesIQ live chat loads only with functional consent. It processes device and visit information, chat identifiers and information you enter in a conversation. You can contact us by email or phone without enabling chat.

Order confirmations, invoices, artwork requests and delivery messages are service communications. A quote request, account, order or cookie choice does not subscribe you to promotional emails or SMS. Promotional messages require a separate permission or another basis permitted by the rules governing direct marketing. You can object to direct marketing or unsubscribe at any time.

Who receives information?

We use Vercel to host the website, OVH to host the PrestaShop checkout, and Cloudflare for site infrastructure and artwork storage. Zoho handles enquiries, customer communications and accounting. Our Google Workspace/Sheets integration supports order administration. These services receive the contact, transaction, artwork or technical information needed for their role.

For manufacture and fulfilment, the Re-uz/Make Shop connection transmits your artwork, ordered products and quantities, delivery address and contact details. Carriers receive delivery details. Professional advisers and authorities may receive information where required for accounting, legal obligations or claims. Advertising providers receive the optional data described above when the relevant consent is given.

The purpose of sharing fulfilment information is to manufacture and deliver your order. It does not authorise a partner to enrol you in its marketing list.

International transfers

Our hosting, payment, communication and advertising providers operate in the UK, the European Economic Area and the United States. Using their services involves processing outside the UK. Transfers to the EEA are covered by UK adequacy regulations. Other restricted transfers require an applicable UK adequacy decision or contractual transfer safeguards under UK data protection law.

Transfer terms are described in Cloudflare’s Data Processing Addendum, Vercel’s Data Processing Addendum and Zoho’s UK Privacy Policy. To request the safeguards that apply to your information, including a copy, email hello@branded-cups.com.

How long information is kept

Quote and contact requests remain available while we handle them. Once a request is closed, our enquiry retention rule is 730 days from its last update. Artwork uploaded to an abandoned basket has a 7-day retention rule; artwork attached to an order has a 730-day retention rule from upload. Expired records and files are removed by the corresponding cleanup process.

We retain accounting records for six years from the end of the financial year they cover. Records relating to an unresolved tax enquiry, transactions spanning more than one accounting period or another continuing legal obligation are kept until that requirement ends. This accounting period does not extend the retention of every artwork file or advertising cookie.

Customer accounts and saved designs remain available for account access, repeat orders and support until the account or design is removed. To request removal, email hello@branded-cups.com. Information needed for an outstanding order, complaint, legal claim or statutory record is retained until that specific requirement ends. Security and support records are assessed against the incident being investigated, outstanding claims and legal obligations. Cookie and browser-storage periods are listed in the Cookie policy. An unsubscribe record is kept to prevent further promotional messages to that address.

Your rights and complaints

Subject to the conditions in data protection law, you can request access, correction, erasure, restriction or portability of your data. You can object to processing based on legitimate interests and to direct marketing. Where we rely on consent, you can withdraw it at any time; this does not affect processing lawfully carried out before withdrawal.

Use Cookie settings to change optional tracking choices. For other requests, email hello@branded-cups.com. We may need proportionate information to verify your identity. We respond without undue delay and within one month of receiving a valid request. For complex or multiple requests, the law permits an extension of up to two further months; we explain the extension and its reasons within the first month.

If you are concerned about our handling of your data, contact us first. You can also complain to the Information Commissioner’s Office (ICO) or your relevant supervisory authority. We do not use this site’s tracking to make solely automated decisions with legal or similarly significant effects on you.

Changes to this notice

The date above identifies this version. If an optional tracking purpose materially changes, a fresh choice will be requested rather than treating an old choice as consent to the new purpose.