Privacy Policy | Football Shirt & Print Co

This policy explains what personal information we collect when you visit our website, buy from us or get in touch, how we use it and the rights you have. We keep it as plain and short as we can.

Who we are

Football Shirt & Print Co Ltd is the “controller” of your personal information for the purposes of UK data protection law (the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025). Football Shirt & Print Co Ltd is a private limited company registered in England and Wales, company number 15919550. Registered office and trading address: 10 Saddler Place, Wellesbourne, Warwick, Warwickshire, CV35 9UY, United Kingdom. We are not currently registered for VAT.

For anything about your personal information, contact us at [email protected] or by post at the address above.

What we collect

Order details: your name, billing and delivery addresses, email address, phone number, the items you buy, any personalisation you ask us to print, and your order history.
Payment information: payments are handled by Stripe, PayPal, Klarna and Clearpay. We never see or store your full card number. We receive confirmation of payment and limited details such as the card type and last four digits.
Account details: if you create an account, your login details and saved addresses.
Messages: what you send us by email, WhatsApp, Instagram or other channels, and your phone number or username on those services.
Marketing preferences: whether you have signed up to our emails, and whether you open them.
Reviews: any review you leave, and your name as you choose to show it.
Website usage: your IP address, device and browser type, pages viewed and how you arrived at the site. Analytics and advertising cookies are only set if you agree to them (see our Cookie Policy).
Other marketplaces: if you buy from us on eBay or in person (we take card payments with Square), we receive the details needed to fulfil that order. Those platforms’ own privacy policies also apply.

How and why we use it

To process and deliver your order, including printing personalisation, sending order and dispatch emails, handling returns and customer service. Lawful basis: contract.
To take payment and prevent fraud. Our payment providers screen transactions automatically for fraud and may decline a payment as a result. If that happens, you can contact us to have it reviewed by a person. Lawful basis: contract and legitimate interests (preventing fraud).
To keep accounting and tax records. Lawful basis: legal obligation.
To reply to your messages and enquiries. Lawful basis: legitimate interests (answering you) or contract.
To send marketing emails about new stock and offers. We do this only if you have opted in, or if you have bought from us before and did not opt out (you can unsubscribe in any email). Lawful basis: consent or the “soft opt-in” under the Privacy and Electronic Communications Regulations.
To invite you to review your purchase on Trustpilot after an order. Lawful basis: legitimate interests (gathering honest feedback). You can opt out at any time.
To understand how the site is used and to advertise on Google, Meta (Facebook and Instagram), Pinterest and TikTok. Lawful basis: consent, through our cookie banner.
To keep the site secure and protect it from spam and attacks. Lawful basis: legitimate interests.

We do not sell your personal information. We do not make decisions about you using only automated means that have legal or similarly significant effects, except for the payment fraud screening described above.

Who we share it with

We share only what is needed with service providers who help us run the shop. They act on our instructions, or as independent controllers where noted.

Website hosting and security: WP Engine (hosting), Cloudflare (content delivery and security), Automattic (Jetpack, Akismet spam filtering and MailPoet email sending).
Payments: Stripe, PayPal, Klarna and Clearpay. They are independent controllers for the payment and credit information you give them.
Delivery: Royal Mail, including through its Click & Drop service. We share your name, address and, where needed for delivery updates, your email address or phone number.
Order management and accounting: our own stock and order system (hosted by Railway in the EU), Xero (accounting), Square (in-person sales), Resend (order-related emails) and Amazon Web Services (file storage).
Messaging: Meta (WhatsApp and Instagram) when you message us there.
Reviews: Trustpilot, which receives your name, email address and order reference to send review invitations.
Analytics and advertising (only with your consent): Google (Analytics, Ads and Tag Manager), Meta, Pinterest and TikTok.
Cookie consent: Usercentrics (Cookiebot), which records your cookie choices.
Professional advisers and authorities: our accountants, and HMRC, the police or other authorities where the law requires it.
If the business were ever sold, the information would pass to the new owner, who would be bound by this policy.

International transfers

Some of these providers are based in, or store data in, the United States or other countries outside the UK. Where this happens, we make sure the transfer is protected by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or by the ICO’s International Data Transfer Agreement or Addendum.

How long we keep it

Order, payment and accounting records: 6 years from the end of the financial year they relate to, as required for tax purposes.
Customer accounts: while your account is open. If you ask us to close it, we delete your account details but keep the order records we are legally required to retain.
Messages and enquiries: up to 2 years after our last contact, unless they relate to an order.
Marketing: until you unsubscribe. We then keep your email address on a suppression list so we do not email you again.
Analytics and cookie data: see our Cookie Policy.

Your rights

You have the right to:

ask for a copy of the personal information we hold about you;
ask us to correct information that is wrong or incomplete;
ask us to delete your information (unless we need to keep it, for example for tax records);
ask us to restrict how we use it, or object to us using it on the basis of legitimate interests;
object to marketing at any time. Every marketing email includes an unsubscribe link;
ask for a copy of information you gave us, in a portable format;
withdraw consent at any time, including your cookie choices, using the “Cookie settings” link at the bottom of every page.

To use any of these rights, email [email protected]. We will respond within one month. We may need to confirm your identity first. There is normally no charge.

Complaints

If you are unhappy with how we have handled your personal information, please contact us first at [email protected]. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, phone 0303 123 1113.

Children

Our website is not aimed at children, and you must be 18 or over to place an order. We do not knowingly collect information from children under 13.

Keeping your information secure

We use secure (HTTPS) connections, reputable payment providers and access controls, and we limit who can see your information. No method of sending information over the internet is completely secure, but we take reasonable steps to protect it.

Changes to this policy

We may update this policy. The latest version will always be on this page, with the date it was last changed.

Last updated: 15 October 2026