Privacy Policy

1. Introduction

Blaze Artworks ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, place an order, or communicate with us. We are based in England and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

The data controller responsible for your personal data is Blaze Artworks. Our contact details are:

Email: info@blazeartworks.com
Phone: +44 (0)1332 230548
Address: Hartington Mews, Unit 10, DE23 8EA, Derby, UK

3. What Information We Collect

We may collect the following personal information:

Your name, email address, phone number, and delivery address when you place an order or make an enquiry
Payment information processed securely through Stripe and Klarna (we do not store your card details)
Images and design references you send us for custom orders
Your helmet details and condition information if requesting a repaint
Communications between us, including emails and messages through our website
Technical data such as your IP address, browser type, and browsing behaviour on our website collected through cookies
Your account details if you register on our website

4. How We Use Your Information

We use your personal information for the following purposes:

To process and fulfil your orders, including delivery and payment
To communicate with you about your order, design progress, and any queries
To create and manage your customer account
To improve our website, products, and customer service
To send you marketing communications, but only if you have opted in (you can unsubscribe at any time)
To comply with legal obligations

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

Contract: Processing is necessary to fulfil your order and provide our services
Legitimate interest: To improve our website and business operations, and to respond to enquiries
Consent: For marketing communications, which you can withdraw at any time
Legal obligation: To comply with applicable laws and regulations

6. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your data with the following trusted service providers who help us run our business:

Stripe: To process card payments securely
Klarna: To provide buy-now-pay-later payment options
Delivery services: To ship your orders (Royal Mail, courier services)
Website hosting: Our website is hosted on secure servers

These third parties only have access to the personal information necessary to perform their functions and are required to keep your data secure.

7. Cookies

Our website uses cookies to improve your browsing experience and to analyse website traffic. Cookies are small text files stored on your device. We use essential cookies to make our website function properly and analytics cookies to understand how visitors use our site. You can manage your cookie preferences through your browser settings or through the cookie settings option on our website.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Order records are retained for 6 years to comply with tax and accounting obligations. Marketing data is retained until you unsubscribe. If you request deletion of your account, we will remove your personal data within 30 days, except where we are required by law to retain it.

9. Data Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our website uses SSL encryption to secure data transmitted between your browser and our server. Payment information is processed securely by Stripe and Klarna and is never stored on our servers.

10. Your Rights

Under the UK GDPR, you have the following rights:

Right of access: You can request a copy of the personal data we hold about you
Right to rectification: You can ask us to correct inaccurate or incomplete data
Right to erasure: You can ask us to delete your personal data in certain circumstances
Right to restrict processing: You can ask us to limit how we use your data
Right to data portability: You can request your data in a structured, machine-readable format
Right to object: You can object to processing based on legitimate interest or for marketing purposes

To exercise any of these rights, please contact us at info@blazeartworks.com. We will respond within 30 days.

11. Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

12. International Transfers

Your personal data is primarily processed and stored within the United Kingdom. Where data is transferred outside the UK (for example, through our use of third-party services), we ensure appropriate safeguards are in place in accordance with UK data protection law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Telephone: 0303 123 1113

15. Contact Us

For any questions about this Privacy Policy or your personal data, please contact us at: