Last updated: 4 September 2026
Draig Creations respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how Draig Creations collects, uses, stores and protects personal information when you:
- visit our website;
- place an order online;
- contact us by email, telephone, contact form or social media;
- place a bespoke or personalised order;
- purchase from us at a market, show or event;
- make a business, wholesale or corporate enquiry;
- or otherwise interact with Draig Creations.
This policy should be read alongside our Terms and Conditions, Returns & Refund Policy and Cookie information.
1. Who We Are
Draig Creations is a family-run laser engraving business based in Wrexham, North Wales.
For the purposes of UK data protection law, Draig Creations is the data controller for personal information that we collect and use for our own business purposes.
Our contact details are:
Draig Creations
15 Brynteg Crescent
Brynteg
Wrexham
LL11 6NA
Telephone: +44 (0)7376 600833
Email: draigcreations@gmail.com
If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details above or through the contact form on our website.
2. Personal Information We Collect
The information we collect depends on how you interact with Draig Creations.
We may collect the following types of personal information.
Order and Customer Information
When you place or attempt to place an order, we may collect:
- your name;
- billing address;
- delivery address;
- email address;
- telephone number;
- details of the products ordered;
- personalisation instructions;
- order history;
- delivery information;
- correspondence relating to your order;
- and payment confirmation information.
We do not receive or store your full payment-card details where payment is processed by a third-party payment provider such as SumUp.
3. Personalisation Information
Because many Draig Creations products are personalised or made to order, you may provide us with information that is intended to appear on a product.
This may include:
- names;
- dates;
- messages;
- photographs;
- images;
- logos;
- artwork;
- business information;
- club or organisation information;
- addresses;
- or other custom wording.
We use this information only as reasonably necessary to create, engrave, supply or discuss the product you have requested, unless another lawful reason applies.
You should avoid providing unnecessary personal information when requesting personalisation.
If you provide personal information relating to another person, you should ensure that you have an appropriate reason or permission to provide it to us.
4. Contact and Enquiry Information
If you contact Draig Creations by:
- email;
- telephone;
- website contact form;
- social media;
- in person;
- or another communication method,
we may collect your name, contact details and the content of your enquiry.
We may retain relevant correspondence where necessary to:
- respond to you;
- manage an order;
- provide customer service;
- resolve a complaint;
- maintain business records;
- or protect our legal interests.
5. Business, Wholesale and Corporate Enquiries
If you contact us on behalf of a business, retailer, organisation, charity, club or other commercial customer, we may collect:
- your name;
- job title or role;
- business or organisation name;
- business address;
- email address;
- telephone number;
- enquiry details;
- quotation information;
- order history;
- and correspondence.
We use this information to manage the business relationship, respond to enquiries, provide quotations, process orders and maintain appropriate records.
6. Website and Technical Information
When you visit our website, certain technical information may be collected automatically.
This may include:
- IP address;
- browser type;
- device type;
- operating system;
- approximate location derived from technical information;
- pages visited;
- referring website;
- time and date of visits;
- interaction with pages;
- and cookie or similar technology information.
This information may be used to:
- operate and secure our website;
- identify technical problems;
- understand website usage;
- improve our website;
- measure marketing performance;
- and help detect fraud or misuse.
7. Cookies
Our website uses cookies and similar technologies.
Cookies are small files stored on your device that help websites operate and may provide information about how visitors use a website.
Some cookies are strictly necessary for the website to work properly.
Other cookies, such as analytics or advertising cookies, may require your consent before they are used.
Where consent is required, these cookies should not be activated unless you have given the appropriate consent.
You can manage your cookie preferences through the cookie controls provided on our website.
For more information, please refer to our cookie information or cookie settings.
8. Essential Cookies
Essential cookies are required for basic website functions and cannot normally be disabled through our cookie consent system.
For example, our website may use:
wpconsent_preferences
This cookie stores your cookie consent preferences so that the website can remember the choices you have made.
The current duration stated for this cookie is approximately 30 days.
The cookies used by our website may change from time to time as website functionality is updated.
9. Analytics
We may use analytics services, including Google Analytics, to help us understand how visitors use our website.
Analytics may provide information such as:
- pages visited;
- time spent on pages;
- general device information;
- website referrals;
- and general interaction with the website.
Where analytics cookies require consent under applicable law, they will only be used after the necessary consent has been obtained.
Analytics information helps us understand what is working on the website and where improvements may be needed.
10. How We Use Your Personal Information
We may use your personal information for the following purposes:
- processing and fulfilling orders;
- producing personalised and bespoke products;
- arranging delivery;
- providing order confirmations and invoices;
- communicating with you about an order;
- responding to enquiries;
- preparing quotations;
- providing customer service;
- managing returns, refunds or complaints;
- preventing and detecting fraud;
- securing our website;
- complying with legal and accounting obligations;
- maintaining business records;
- improving our products and services;
- analysing website performance;
- and, where permitted, informing you about relevant Draig Creations products, services or offers.
We will not use personal information for a purpose that is incompatible with the purpose for which it was collected unless there is a lawful basis for doing so.
11. Our Lawful Bases for Using Personal Information
UK data protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, we may rely upon the following lawful bases.
Contract
We process personal information where it is necessary to enter into or perform a contract with you.
Examples include:
- processing your order;
- creating a personalised product;
- delivering goods;
- dealing with an agreed bespoke commission;
- and communicating with you about your order.
Legal Obligation
We may process information where we need to comply with a legal obligation.
Examples may include:
- accounting;
- taxation;
- consumer protection;
- fraud prevention;
- regulatory requirements;
- and responding to lawful requests from authorities.
Legitimate Interests
We may process information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
These interests may include:
- improving our website;
- maintaining appropriate business records;
- responding to enquiries;
- protecting our business against fraud;
- maintaining website security;
- understanding how customers use our website;
- defending legal claims;
- and managing customer and supplier relationships.
Consent
Where the law requires your consent, we will rely on consent.
This may include certain:
- marketing communications;
- analytics cookies;
- advertising cookies;
- or similar website technologies.
Where we rely on consent, you may withdraw that consent at any time.
12. Card Payments
Card payments made to Draig Creations are processed securely by third-party payment providers such as SumUp.
Payment providers process payment information through their own secure systems.
Draig Creations does not normally receive, store or have access to your full debit or credit-card number, card security code or other complete card credentials.
We may receive limited payment-related information such as:
- confirmation that payment was successful;
- payment reference;
- transaction amount;
- date;
- and limited identifying information required to match the payment to your order.
The payment provider will process your personal information in accordance with its own privacy notice and legal obligations.
13. Sharing Personal Information
We do not sell your personal information.
We may share personal information with carefully selected third parties where this is necessary to operate our business or fulfil our obligations to you.
These may include:
- payment providers;
- delivery and courier companies;
- website hosting providers;
- IT and website support providers;
- analytics providers;
- accounting or bookkeeping services;
- professional advisers;
- software providers;
- email or communications providers;
- and other service providers necessary to operate Draig Creations.
We aim to provide third parties with only the personal information reasonably necessary for them to provide the relevant service.
Some providers may act as our data processors, while others may act as independent data controllers for their own activities.
14. Delivery Companies
Where an order needs to be delivered, we may provide the relevant delivery company with information required to complete the delivery.
This may include:
- your name;
- delivery address;
- telephone number;
- email address;
- and relevant delivery instructions.
The delivery company may use this information in accordance with its own privacy obligations.
15. Google and Analytics Providers
Where enabled, we may use Google services such as Google Analytics to understand how visitors use our website.
Google may process information relating to website visits and device activity in accordance with Google’s own privacy terms.
Where consent is legally required for analytics or advertising technologies, we will use these services subject to your cookie preferences.
16. Legal and Regulatory Disclosure
We may disclose personal information where reasonably necessary to:
- comply with applicable law;
- comply with a court order;
- respond to a lawful request from law enforcement or another competent authority;
- protect the rights or property of Draig Creations;
- investigate fraud or misuse;
- enforce our contractual rights;
- or establish, exercise or defend legal claims.
We will not disclose personal information to authorities or third parties simply because it has been requested where we are not legally entitled or required to do so.
17. Marketing
We may occasionally send customers or subscribers information about Draig Creations products, events, services or offers where we have an appropriate lawful basis to do so.
Where consent is required, we will request it.
You may unsubscribe from marketing communications at any time using an unsubscribe facility where provided or by contacting us.
Stopping marketing communications does not prevent us from contacting you about:
- an active order;
- delivery;
- customer service;
- a complaint;
- a legal issue;
- or another non-marketing matter.
18. Social Media
Draig Creations uses social media platforms to communicate with customers and promote our products and events.
If you contact us through a social media platform, the platform itself may also process information about you in accordance with its own privacy policy.
We may retain relevant messages where necessary for customer service, order management or business records.
Information that you publish publicly on social media may be visible to other users of that platform.
19. Photographs and Customer Products
From time to time, we may photograph products that we have made for:
- our website;
- portfolio;
- social media;
- advertising;
- or promotional purposes.
Where a product contains personal information that could identify an individual, we will consider whether it is appropriate to publish that information.
Where appropriate, identifying information may be obscured, replaced or excluded.
We will not knowingly publish private customer information simply because it appeared on an item produced for that customer.
20. Information Received from Third Parties
Most personal information we use is provided directly by you.
However, we may occasionally receive personal information from third parties, such as:
- online marketplaces;
- payment providers;
- retailers;
- event organisers;
- business contacts;
- delivery companies;
- social media platforms;
- or another person placing an order on your behalf.
Where appropriate, we will use that information only for purposes consistent with the reason it was provided.
21. International Transfers
Some of the companies that provide services to our website or business may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK and UK data protection law requires additional protection, we will seek to ensure that an appropriate lawful transfer mechanism is used.
Depending on the destination and organisation involved, this may include:
- UK adequacy regulations;
- the UK Extension to the EU-US Data Privacy Framework where applicable;
- appropriate contractual safeguards;
- or another transfer mechanism permitted by UK data protection law.
We do not rely solely on whether a country has been recognised as adequate by the European Commission.
Our international transfers are governed primarily by the requirements applicable under UK data protection law.
22. How Long We Keep Personal Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet any applicable legal, tax, accounting or regulatory requirements.
Different types of information may therefore be retained for different periods.
For example, we may keep:
- order and transaction records for the period required for accounting, tax and legal purposes;
- correspondence relating to disputes or complaints for as long as reasonably necessary to resolve or defend the matter;
- personalisation artwork for a reasonable period where it may be needed for repeat orders or order records;
- website analytics according to the retention settings of the relevant analytics system;
- and marketing information until consent is withdrawn or the information is no longer reasonably required.
When personal information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.
23. Repeat Orders and Personalisation Files
Where customers may reasonably wish to reorder the same personalised design, we may retain relevant design files, layout information or order records for a reasonable period.
This helps us reproduce previous orders accurately.
If you would prefer us not to retain a personalisation file for possible repeat use, you may contact us.
In some circumstances we may still need to retain limited information where necessary for legal, accounting, dispute or record-keeping purposes.
24. How We Protect Your Information
We take reasonable technical and organisational measures to protect personal information against:
- unauthorised access;
- accidental loss;
- inappropriate disclosure;
- alteration;
- misuse;
- and destruction.
Measures may include access controls, secure passwords, software security measures, secure third-party payment processing and limiting access to personal information to those who reasonably require it.
No internet-based system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature of the information we hold.
25. Your Data Protection Rights
Under UK data protection law, depending on the circumstances, you may have rights including:
Right of Access
You may ask for confirmation that we process your personal information and request a copy of the information we hold about you.
Right to Rectification
You may ask us to correct inaccurate or incomplete personal information.
Right to Erasure
In certain circumstances, you may ask us to delete your personal information.
This right is not absolute and we may need to retain certain information where there is a legal or legitimate reason for doing so.
Right to Restrict Processing
In certain circumstances, you may ask us to restrict how your personal information is used.
Right to Object
You may have the right to object to certain types of processing, including certain processing based on legitimate interests and direct marketing.
Right to Data Portability
Where applicable, you may request that personal information you have provided to us is supplied in a structured, commonly used and machine-readable format or transferred to another organisation.
Right to Withdraw Consent
Where we rely on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.
26. Automated Decision-Making
Draig Creations does not normally make decisions about customers solely through automated decision-making that produces legal or similarly significant effects.
Certain third-party systems, such as payment or fraud-prevention systems, may use automated processes as part of their own services.
Where this occurs, those providers may process information in accordance with their own privacy policies.
27. Exercising Your Rights
If you wish to exercise your data protection rights, please contact:
Email: draigcreations@gmail.com
or contact us through the contact form on our website.
Please provide enough information for us to identify you and understand your request.
We may need to request additional information to verify your identity before disclosing personal information.
We will respond in accordance with the timescales required by applicable data protection law.
28. Complaints
If you have concerns about how Draig Creations has handled your personal information, please contact us first so that we have an opportunity to investigate and respond.
You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
The ICO provides information about data-protection rights and how to make a complaint through its official website.
Your right to complain to the ICO is not affected by contacting us first.
29. Children’s Information
Our website and products are not primarily intended to collect personal information directly from children.
Where a personalised product contains a child’s name, photograph or other information supplied by a parent, guardian or other customer, we use that information only as reasonably necessary to produce or manage the relevant order.
Customers should ensure they are entitled to provide any child’s personal information supplied to us.
30. Links to Other Websites
Our website may contain links to websites operated by other organisations.
Draig Creations is not responsible for the privacy practices or content of third-party websites.
You should review the privacy information provided by the relevant website before supplying personal information to it.
31. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Changes may be made to reflect:
- changes to our business;
- changes to our website;
- new service providers;
- changes to the way we use personal information;
- changes to technology;
- or changes in data protection law or regulatory guidance.
The latest version will be published on our website and the Last updated date at the top of this policy will be amended.
Where a change would materially affect how we use personal information, we will take reasonable steps to provide additional notice where required.
32. Contact Draig Creations
If you have any questions about this Privacy Policy, how we use personal information or your data-protection rights, please contact:
Draig Creations
15 Brynteg Crescent
Brynteg
Wrexham
LL11 6NA
Telephone: +44 (0)7376 600833
Email: draigcreations@gmail.com
You can also contact us using the contact form provided on our website.