Free UK Shipping on Orders Over 50Premium Clothing & Highest Print Quality
HOODIE DESIGN

Privacy

Privacy notice

A plain-English explanation of the personal information we use to create, take payment for and deliver your custom garments.

Last updated 3 September 2026
01

Who controls your data

Logo Embroidery Scotland Ltd, trading as Hoodie Design, is the controller of personal information collected through this website. Our registered office is Thornbridge Business Centre, 4, Laurieston Rd FK3 8XX; company number SC432309.

Privacy questions and data-rights requests can be sent to hello@hoodiedesign.co.uk.

02

Information we collect

  • Contact, billing and delivery details, including your name, email, telephone number and address.
  • Order information, including garments, sizes, quantities, school or group, graduation year and communications with us.
  • Custom content, such as student names, uploaded crests, logos, graphics and design choices.
  • Payment and transaction references from Stripe. We do not receive or store your full card details.
  • Technical and security information needed to operate the service, such as IP address, request logs, browser type, administrator session information and Google reCAPTCHA risk results for protected forms.
  • If you consent to analytics, information about how you use the website, including pages viewed, approximate location, referring page, device and browser information, and session interactions collected through Google Analytics.

We normally receive this information directly from you. A school, organiser or group representative may also provide order information and student names on behalf of a group.

03

How and why we use it

PurposeLawful basis
Build designs, take payment, fulfil and support ordersContract
Account, tax, fraud-prevention and legal recordsLegal obligation and legitimate interests
Quality control, service security and handling disputesLegitimate interests in operating a safe, reliable business
Protect contact forms and administrator login from spam, credential attacks and automated abuse using Google reCAPTCHALegitimate interests in protecting customers, staff and the website
Measure website use and improve the customer journey through Google AnalyticsConsent, which can be withdrawn through Cookie settings
Optional marketing, if introduced and requestedConsent, which can be withdrawn

Where required information is not provided, we may be unable to produce, take payment for or deliver the order. We do not use personal information for solely automated decisions that have legal or similarly significant effects.

04

Who we share it with

We share only what is needed with service providers supporting the order, including our 20i hosting and email providers, Stripe for payment processing, print and fulfilment partners, and delivery carriers. Google processes limited technical and interaction information when reCAPTCHA protects the contact form or administrator login. If you accept analytics, website-use information is also processed by Google Analytics. We may disclose information to professional advisers, regulators or law-enforcement bodies where legally required.

These organisations act as processors or independent controllers depending on their role. Stripe’s use of information is also covered by its own privacy notice.

Read Google’s Privacy Policy, Google’s Terms and our Cookie Policy for more about these services.

05

How long we keep it

We keep order, payment and accounting records for the period required by tax, company and consumer law. Design files, name lists and customer communications are kept only while reasonably needed for production, delivery, quality control, customer support, reorders and legal claims, then deleted or anonymised.

Google Analytics event and user data is retained according to the retention setting in our Analytics property. Analytics cookies can remain for up to two years unless you withdraw consent, clear them or your browser limits them sooner. Aggregated reports may be retained for longer.

We decide exact periods by considering legal requirements, the volume and sensitivity of the information, the purpose for which it was collected and whether that purpose can be achieved in another way.

06

International transfers

Some service providers, including Google, may process information outside the UK. Where that happens, we require an approved protection such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses, unless another lawful exception applies. Contact us for information about the safeguard used for a particular provider.

07

Security

We use appropriate technical and organisational measures to protect personal information, including encrypted connections, restricted administration access and vetted service providers. No internet service can guarantee absolute security, but we review safeguards in proportion to the information and risk.

08

Your rights

Depending on the circumstances, you may have rights to access, correct or erase your information; restrict or object to its use; receive portable data; and withdraw consent at any time. You have a particular right to object to processing based on legitimate interests and to direct marketing.

You can withdraw or change analytics consent at any time using the Cookie settings control in the website footer. This does not affect processing that took place before consent was withdrawn.

These rights are not absolute. For a practical guide to making a request, read Your Data Rights.

09

Questions and complaints

Please email hello@hoodiedesign.co.uk first so we can investigate. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data-protection regulator.

We may update this notice when our services or legal obligations change. The latest version and update date will remain on this page.