Privacy Policy

FFS Merch Ltd ("FFS Merch", "we", "us" or "our") is a company registered in England & Wales, trading from Axwell Park, Blaydon, NE21 5PB. We are committed to protecting and respecting your privacy in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it. If you have any questions, you can contact us at hello@ffsmerch.co.uk.

We collect information you give us directly, and information collected automatically:

• Account details: name, email address, password (stored securely, hashed) and order history.
• Order and quote details: contact information, delivery address, artwork files, product preferences, and any notes you provide.
• Payment information: processed securely by Stripe. We never see or store your full card details.
• Communications: emails, chat messages, or enquiries you send us, and our replies to you.
• Technical data: IP address, browser type, and pages visited, collected automatically to help us run and improve the site.

We use your personal data to:

• Create and manage your account and process orders and quote requests.
• Take payment and prevent fraudulent transactions.
• Communicate with you about your order, account, or enquiry.
• Improve our website, products, and customer service.
• Comply with our legal and regulatory obligations.
• Send you marketing communications, where you have opted in — you can unsubscribe at any time.

We process your data under one or more of the following legal bases: performance of a contract (fulfilling your order), legitimate interests (running and improving our business), consent (marketing communications), and legal obligation (accounting and tax records).

We do not sell your personal data. We share it only with trusted third parties who help us operate our business, including:

• Stripe — for secure payment processing.
• Supabase — for account authentication and database hosting.
• Resend — for transactional and marketing email delivery.
• Our print production and courier partners — to fulfil and deliver your order.

Each of these providers is contractually required to keep your data secure and only use it for the purposes we specify.

We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. Order records are typically retained for 6 years to meet UK tax obligations.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data ("the right to be forgotten").
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent to marketing at any time.

To exercise any of these rights, email us at hello@ffsmerch.co.uk. See our GDPR Statement for more detail on how we handle these requests.

We use essential cookies to keep you signed in and to remember items in your cart. We may also use analytics cookies to understand how visitors use our site. You can control cookies through your browser settings.

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@ffsmerch.co.uk or write to us at Axwell Park, Blaydon, NE21 5PB. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.