Privacy policy
Last updated: 16 September 2026
This Privacy Policy explains how Your DTF Transfers collects, uses, stores and shares personal information when you visit yourdtftransfers.co.uk, create or use an account, place or manage an order, upload artwork, build or upload a gang sheet, purchase plain or personalised clothing, request a digital proof, join our mailing list, contact us, visit our Coventry facility for collection, or otherwise interact with our services.
Your DTF Transfers is a trading name of EHM Ltd, whose registered office is at 250 Boswell Drive, Coventry, West Midlands, CV2 2GW. We are the controller of the personal information described in this policy. Our website and online store are hosted by Shopify. This Privacy Policy should be read alongside our Terms & Conditions and other website policies.
1. Personal information we collect
The information we collect depends on how you use our website and services.
Identity and contact information: name, business or organisation name, billing address, delivery address, email address, telephone number, account details and collection details.
Order and transaction information: products viewed or purchased, sizes, colours and quantities, transfer dimensions, gang-sheet lengths, print locations and print sizes, personalisation selections, delivery method, order number and status, payment confirmation, refunds, cancellations and returns, previous orders, discount codes, and VAT and invoice details.
Artwork and production information: uploaded artwork, logos, photographs, names or wording included in designs, completed and builder-created gang sheets, file names and metadata, print dimensions, placement instructions, order notes, proof requests and approvals, artwork revisions, links used to supply large files, and messages concerning artwork or production. Artwork may sometimes contain information about someone other than the person placing the order; customers supplying this information are responsible for ensuring they have the appropriate authority or permission to provide it. Please do not include unnecessary sensitive personal information in artwork or order notes.
Payment information: payments are processed through Shopify and the payment providers offered at checkout, such as Shopify Payments and PayPal where selected. We do not normally receive or store complete payment-card numbers. Payment providers may supply us with limited information such as payment status, transaction reference, payment method, card type, the last digits of a payment card, billing details and fraud or risk indicators, and they process payment information under their own privacy policies.
Account information: account name, email address, encrypted or platform-managed login credentials, saved addresses, order history and account preferences.
Communications: contact-form submissions, emails, telephone enquiries, complaint details, return requests, customer-support messages, social-media messages sent directly to us, and photographs supplied as evidence of a fault or delivery issue.
Marketing information: mailing-list registration, marketing consent, unsubscribe requests, communication preferences, engagement with marketing messages, and records showing how and when consent was obtained.
Technical and usage information: IP address, device type, browser, operating system, approximate location, referral source, pages viewed, cart activity, session information, cookie identifiers, website interactions, and error and security logs. Non-essential analytics and advertising information is only collected where permitted and where the required consent has been obtained.
Fraud and security information: Shopify, payment providers and security services may generate fraud scores, risk indicators, login records, failed-payment information, device or network indicators and suspected-misuse information.
2. How we collect information
Directly from you when you place an order, create an account, upload artwork, use the gang-sheet builder, request a proof, contact us, join our mailing list, arrange collection or request a return or refund.
Automatically through essential website cookies, server logs, Shopify, security tools, and analytics or advertising cookies where consent has been given.
From service providers such as Shopify, payment providers, delivery providers, artwork-upload applications, gang-sheet-builder applications, email-marketing providers, fraud-prevention services, analytics providers and customer-support tools.
From other people or businesses when you place an order, create an account, upload artwork, use the gang-sheet builder, request a proof, contact us, join our mailing list, arrange collection or request a return or refund.
Automatically through essential website cookies, server logs, Shopify, security tools, and analytics or advertising cookies where consent has been given.
From service providers such as Shopify, payment providers, delivery providers, artwork-upload applications, gang-sheet-builder applications, email-marketing providers, fraud-prevention services, analytics providers and customer-support tools.
From other people or businesses where a business customer provides the contact details or artwork of an employee, client or authorised recipient. The customer supplying that information is responsible for ensuring they are permitted to provide it.
3. Why we use personal information and our lawful bases
Processing and fulfilling orders - to accept and process orders, produce transfers and personalised products, prepare gang sheets, process payments, arrange delivery or collection, provide order updates, and handle returns, refunds and complaints. Lawful basis: performance of a contract, or taking steps requested before entering a contract.
Checking and preparing artwork - to check basic print suitability, match files to orders, create requested proofs, produce ordered products, resolve artwork queries and investigate production complaints. Lawful basis: performance of a contract.
Customer accounts - to provide account access, saved details and order history. Lawful basis: performance of a contract and our legitimate interest in providing account functionality.
Customer service - to answer questions and resolve problems. Lawful basis: performance of a contract and our legitimate interest in supporting customers and maintaining accurate business records.
Accounting, tax and legal compliance - to check basic print suitability, match files to orders, create requested proofs, produce ordered products, resolve artwork queries and investigate production complaints. Lawful basis: performance of a contract.
Customer accounts - to provide account access, saved details and order history. Lawful basis: performance of a contract and our legitimate interest in providing account functionality.
Customer service - to answer questions and resolve problems. Lawful basis: performance of a contract and our legitimate interest in supporting customers and maintaining accurate business records.
Accounting, tax and legal compliance - to maintain accounting records, meet tax obligations, respond to lawful requests, and exercise or defend legal claims. Lawful basis: legal obligation and legitimate interests.
Security and fraud prevention - to protect our website, verify payments, prevent fraud, detect misuse and maintain system security. Lawful basis: legitimate interests, and legal obligation where applicable.
Website analytics - to understand website performance and improve the ordering experience. Lawful basis: consent for non-essential analytics cookies; essential operational and security data may be processed under our legitimate interests where consent is not legally required.
Marketing - we may send marketing communications where you have specifically consented, or where the existing-customer soft opt-in applies and you were offered an opportunity to object when your details were collected. You may unsubscribe at any time; unsubscribing from marketing does not prevent us from sending necessary order or service messages. Lawful basis: consent, or legitimate interests where the electronic-marketing soft opt-in lawfully applies.
Personalised advertising - if enabled, we will only activate the relevant non-essential cookies or tracking where the required consent has been obtained. Lawful basis: consent. If personalised advertising is not used, this does not apply.
4. Customer artwork
Artwork is used only as reasonably necessary to fulfil the order, carry out print checks, provide a requested digital proof, investigate a complaint and maintain necessary production and order records. We will not use customer artwork in social-media posts, advertising, product listings, portfolios, printed samples or other promotional material unless you have separately given permission. You may request deletion of artwork, although we may need to retain limited information where required for an active order, a complaint or dispute, fraud prevention, legal or accounting obligations, or the establishment or defence of legal claims.
5. Who we share personal information with
Shopify hosts our online store and processes information required to provide ecommerce services. Shopify may act as our processor and, for certain features, as a separate controller.
Payment providers - payment and fraud information may be processed by the payment provider selected at checkout, including Shopify Payments and PayPal where available.
Delivery providers such as Royal Mail, DPD and other couriers displayed at checkout, usually including the recipient's name, delivery address, email address, telephone number and parcel information.
Artwork and gang-sheet services - artwork files and associated order information may be processed by Uploadery (ShopPad) for artwork uploads on product pages, and by Kixxl for building and uploading gang sheets, together with the cloud file storage those applications use. Only providers genuinely used by the website are listed.
Email and marketing services - where applicable, marketing information may be processed by Shopify Email, if used, and any advertising platform enabled with consent.
Professional and technical providers including website developers, hosting and security providers, accountants, bookkeepers, legal advisers, insurance providers, customer-support providers and IT service providers. These organisations receive only the information reasonably required for their role.
Authorities and legal disclosures - we may disclose information where reasonably necessary to comply with the law, respond to a valid legal request, prevent fraud or crime, protect our legal rights, or establish, exercise or defend a legal claim.
Business transfers - if our business is sold, reorganised or merged, relevant personal information may be transferred as part of that transaction, subject to appropriate confidentiality and data-protection requirements. We do not sell personal information.
6. International transfers
Some of our providers, including Shopify and certain payment or technical services, may process personal information outside the United Kingdom. Where information is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses with the UK International Data Transfer Addendum, so that your information remains protected.
7. How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including to fulfil orders, provide support, and meet our legal, accounting and tax obligations. Order and transaction records are generally retained for the period required by UK tax and accounting law. Artwork and production files are retained for as long as reasonably necessary to fulfil and support the order and to resolve any complaint or dispute, after which they are deleted or anonymised.
8. How we protect information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration, and we rely on the security measures provided by Shopify and our payment and technical providers. No method of transmission or storage is completely secure, but we take reasonable steps to protect the information we hold.
9. Your rights
Subject to applicable law, you have the right to access your personal information; to request correction of inaccurate information; to request erasure; to restrict or object to certain processing; to data portability; and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at info@yourdtftransfers.co.uk. We may need to verify your identity before responding.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk. We would, however, appreciate the chance to address your concerns before you approach the ICO.
10. Cookies
We use essential cookies to operate the website and, where you consent, analytics and advertising cookies. You can manage non-essential cookies through the Cookie Settings link in our footer or through your browser settings. Essential cookies cannot be switched off as they are required for the website and checkout to function. Full details are in our Cookie Policy.
11. Children
Our website and services are intended for customers aged 18 or over and are not directed at children. We do not knowingly collect personal information from children.
12. Changes to this policy
We may update this Privacy Policy from time to time. The version that applies is the one published on our website, and the "Last updated" date above shows when it was most recently revised.
13. Contact us
For any questions about this Privacy Policy or how we handle your personal information, contact Your DTF Transfers at info@yourdtftransfers.co.uk, on 07592 925337, or by post to 250 Boswell Drive, Coventry, West Midlands, CV2 2GW.