Privacy Policy Overview
Data Controller
Engraved In Your Heart
Last updated: 5 October 2026
At Engraved In Your Heart, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains what information we collect when you visit our website, contact us, place an order or provide photographs or other material for personalised engraving.
1. Who We Are
This website is operated by:
Business name: Engraved In Your Heart
Email: [info@engravedinyourheart.co.uk]
For data-protection purposes, Engrave In Your Heart is responsible for the personal information described in this policy.
2. Information We May Collect
When you use our website or place an order, we may collect information including:
- Your name, email address, telephone number, billing and delivery address.
- Details about your order and personalised engraving requirements.
- Photographs, images, artwork, names, messages or other material you provide for engraving.
- Communications you send to us by email, website forms, social media or other methods.
- Payment and transaction information. Where payments are handled by a third-party payment provider, we may not receive or store your complete card details.
- Technical information such as your IP address, browser/device information and information collected through cookies where applicable.
Photographs capable of identifying a living person can be personal data under UK data-protection law. Information Commissioner's Office
3. Photographs Uploaded for Engraving
Because many of our products are personalised, you may provide us with photographs containing images of yourself, family members, children, pets or other people.
We will use customer-supplied photographs and artwork primarily for the purpose of preparing, producing and fulfilling the personalised product you have requested.
We will not use a customer's personal photograph for advertising, social media, promotional material or product examples without obtaining appropriate permission first.
You should only provide photographs or other material that you have permission or another lawful right to provide to us for the requested service.
4. How We Use Your Information
We may use your personal information to process and fulfil orders; create personalised engravings; communicate with you about enquiries and orders; arrange payment and delivery; provide customer service; maintain appropriate business and accounting records; prevent fraud or misuse of our services; maintain and improve our website; and comply with legal obligations.
The lawful basis we rely upon will depend upon what we are doing with your information. For example, information necessary to process an order will generally be used because it is necessary to perform our contract with you. We may also process information to comply with legal obligations or for legitimate business interests where appropriate.
The ICO requires organisations to identify their lawful basis before processing personal information and explain that basis in their privacy information. Information Commissioner's Office
5. Marketing
We will only send electronic marketing where we have an appropriate lawful basis to do so.
Where you have consented to receive marketing, you can withdraw your consent or unsubscribe at any time by contacting us or using an unsubscribe facility provided with the communication.
6. Sharing Your Information
We do not sell your personal information.
Where necessary to operate our business and fulfil orders, information may be shared with trusted service providers such as website or e-commerce providers, payment processors, delivery/courier companies, IT or cloud-storage providers, professional advisers, and other suppliers necessary to provide our services.
We may also disclose information where required by law or where necessary to establish, exercise or defend legal rights.
Where third parties process personal information on our behalf, we take appropriate steps to ensure that information is handled securely and lawfully.
7. How Long We Keep Your Information
We will only retain personal information for as long as reasonably necessary for the purpose for which it was collected.
Customer photographs and engraving files: , “normally deleted within 30 days after the order has been completed unless the customer asks us to retain the file for a future order.
Order and transaction records: retained for the period required for legitimate business, accounting and legal purposes.
When personal information is no longer required, we will delete or securely dispose of it where reasonably practicable.
8. Keeping Your Information Secure
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no internet transmission or electronic storage method can be guaranteed to be completely secure.
9. Cookies
Our website may use cookies and similar technologies to make the website function, remember preferences, understand how visitors use the website or provide other features.
Where cookies are not strictly necessary, we will obtain consent where required before placing them on your device.
10. Your Data Protection Rights
Depending upon the circumstances, UK data-protection law gives you rights concerning your personal information. These can include the right to request access to your personal information, ask for inaccurate information to be corrected, request deletion in certain circumstances, request restriction of processing, object to certain processing, request transfer of information in applicable circumstances, and withdraw consent where consent is the lawful basis being used.
Not every right applies in every circumstance.
To exercise your rights, please contact:
Engraved In Your Heart
Email: info@engravedinyourheart
11. Complaints
If you have concerns about how we handle your personal information, please contact us first so that we have an opportunity to resolve the matter.
12. Children's Photographs
Customers may sometimes provide photographs containing children for personalised gifts or keepsakes.
We will use such photographs only for the purposes for which they have been provided unless another lawful basis applies. Customers submitting photographs should ensure that they have appropriate authority or permission to provide the image for the requested engraving.
We do not knowingly use children's photographs supplied for personalised orders for unrelated advertising or promotional purposes without appropriate permission.
13. International Transfers
Some website, payment, cloud-storage or other service providers may process information outside the UK.
Where personal information is transferred internationally, we will take appropriate steps required by applicable data-protection law to protect that information.
14. Changes to This Privacy Policy
We may update this Privacy Policy occasionally to reflect changes to our business, website, services or legal requirements.
The latest version will be published on this website together with its updated date.