1. Who controls your information

Mark Minehan trading as Poster Croc controls the personal information described in this notice. Contact us through the contact form or at info@postercroc.com.

Business correspondence address: 12 Donnington Grove, RG42 4JS, England, United Kingdom.

2. Information we collect

• Your name, email address, billing address, delivery address and telephone number if you provide one at checkout.
• Order details, product choices, payment status, delivery tracking and messages about an order.
• Account details if you create a customer account.
• Information you send through our contact form or by email.
• Technical and security information such as IP address, browser type, device information and activity logs.
• Cookie and analytics information where you give consent.

Payment providers process complete card or account credentials. Poster Croc does not receive your full card number.

3. Why we use it

• Contract: to take payment, fulfil and deliver orders, provide customer service and handle problems.
• Legal obligation: to keep tax and accounting records, respond to lawful requests and protect consumer rights.
• Legitimate interests: to secure the website, prevent fraud, operate the business and improve customer service.
• Consent: for non-essential cookies, analytics and future email marketing where you choose to opt in.

4. Who receives information

We share only the information needed for each provider to perform its service. Providers may include WooCommerce and Automattic, Printful, HostArmada, payment providers enabled at checkout, delivery companies, Google services where enabled, security providers such as Wordfence, professional advisers and public authorities where the law requires disclosure.

Printful receives order and delivery information so it can manufacture and ship your poster. A payment provider receives payment and fraud-prevention information. Each provider may also act as an independent controller for parts of its service.

5. International transfers

Some providers process information outside the United Kingdom. Where UK data-protection law requires safeguards, we rely on an adequacy regulation, approved contractual clauses or another lawful transfer mechanism.

6. How long we keep information

We keep order and transaction records for up to seven years where needed for tax, accounting and legal purposes. We normally keep contact enquiries for up to two years after the last message. Customer accounts remain until you ask us to delete them or the account is no longer needed. Security logs have shorter operational retention periods unless we need them to investigate an incident.

7. Your rights

Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability or an objection to processing. You may withdraw consent at any time. Withdrawing consent does not affect earlier lawful processing.

Contact info@postercroc.com to exercise a right. We may ask for information to confirm your identity. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

8. Children

Poster Croc does not knowingly sell directly to anyone under 18. A parent or legal guardian must make purchases for a younger person.

9. Marketing

We do not currently operate an email newsletter. If we introduce one, we will ask for the required consent and include an unsubscribe link in each marketing email.

10. Security and changes

We use access controls, software updates, encryption in transit and security monitoring to protect personal information. No internet service can guarantee complete security. We will update this notice when our services or legal obligations change and place the revised date at the top.