Privacy Policy
Eason Bros Ltd, trading as Ink365
Introduction
This Privacy Policy explains how Eason Bros Ltd ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit or make a purchase through our website, ink365.co.uk (the "Website"), and when you otherwise interact with us.
We are committed to protecting your privacy and handling your personal data in an open and transparent manner, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).
Please read this policy carefully to understand how we treat your personal data. It should be read alongside our Cookie Policy.
Who we are
Eason Bros Ltd (company number 11717318) is the "controller" responsible for your personal data. We are registered at Unit 11 Trent Business Park, Eastern Avenue, Lichfield, Staffordshire, United Kingdom, WS13 6RN.
If you have any questions about this policy or about how we handle your personal data, you can contact us at help@ink365.co.uk or by writing to us at the address above.
The personal data we collect
We may collect and process the following categories of personal data about you:
- Identity data — your name and, where relevant, your job title or business name.
- Contact data — your billing address, delivery address, email address, and telephone number.
- Account data — your username, password, and order history if you create an account.
- Order and transaction data — details of the products you have purchased and payments to and from you.
- Payment data — we do not store your full payment card details. Payments are processed securely by our payment providers, who handle your card information on our behalf.
- Communications data — the content of messages you send us, for example through our contact form, by email, or via customer service.
- Technical and usage data — your IP address, browser type and version, device information, and information about how you use the Website, collected through cookies and similar technologies (see our Cookie Policy).
- Marketing data — your preferences in receiving marketing from us and your communication preferences.
We do not intentionally collect any "special category" personal data (such as data about health, race, religion, or political opinions) through the Website.
How we collect your personal data
We collect personal data:
- directly from you — when you place an order, create an account, contact us, sign up to our marketing, or otherwise interact with us;
- automatically — when you use the Website, through cookies and similar technologies; and
- from third parties — such as our hosting platform (Shopify), payment providers, and analytics providers.
How we use your personal data and our lawful basis
Under data protection law, we must have a lawful basis for processing your personal data. We rely on the following bases:
| Purpose | Lawful basis |
|---|---|
| To process and fulfil your orders, including taking payment and arranging delivery | Performance of a contract with you |
| To manage your account and provide customer support | Performance of a contract; our legitimate interests |
| To process payments and prevent and detect fraud | Performance of a contract; legal obligation; our legitimate interests |
| To respond to your enquiries and communicate with you about your orders | Performance of a contract; our legitimate interests |
| To send you marketing communications, where you have agreed or where permitted | Your consent; our legitimate interests (see "Marketing" below) |
| To understand how the Website is used and to improve it | Your consent (for non-essential cookies); our legitimate interests |
| To keep our Website and business secure | Our legitimate interests |
| To keep accounting and tax records and comply with our legal obligations | Legal obligation |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and interests, and we will always act fairly and transparently.
Marketing
We will only send you marketing communications by email where you have given your consent, or where you have previously purchased from us and we are contacting you about similar products (a "soft opt-in" permitted under PECR), and you have not opted out.
You can opt out of marketing at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us. Opting out of marketing will not affect communications we send you about orders you have placed.
Who we share your personal data with
We do not sell your personal data. We share it only as necessary to run our business and provide our services, including with:
- Shopify, which hosts our Website and store platform;
- payment providers, who process payments securely on our behalf;
- delivery and courier partners, to deliver your orders;
- email, marketing, and customer service providers, where applicable, to communicate with you;
- analytics providers, where applicable, to help us understand and improve the Website;
- professional advisers, such as our accountants and legal advisers; and
- regulators, law enforcement, and other authorities, where we are required to do so by law.
These third parties act as our "processors" and may only use your personal data on our instructions and in line with this policy and applicable law, except where they are independent controllers in their own right (such as payment providers handling card data).
International transfers
Some of our service providers, including Shopify, are based outside the United Kingdom. Where your personal data is transferred outside the UK, we take steps to ensure it receives an equivalent level of protection, for example by relying on adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK-US Data Bridge, as applicable.
Data security
We have put in place appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss, or destruction. We limit access to your personal data to those who have a genuine business need to access it. We also have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.
How long we keep your personal data
We will only keep your personal data for as long as is necessary for the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements.
- Order and transaction records are generally kept for six years after the end of the relevant financial year, to comply with HMRC and other legal requirements.
- Account data is kept for as long as your account remains active and for a reasonable period afterwards.
- Marketing data is kept until you withdraw your consent or opt out.
When we no longer need your personal data, we will securely delete or anonymise it.
Your rights
Under data protection law, you have the following rights in relation to your personal data:
- The right to be informed about how we use your personal data.
- The right of access to the personal data we hold about you.
- The right to rectification of inaccurate or incomplete data.
- The right to erasure ("the right to be forgotten") in certain circumstances.
- The right to restrict processing in certain circumstances.
- The right to data portability, to receive your data in a portable format.
- The right to object to processing based on our legitimate interests, and to direct marketing.
- Rights relating to automated decision-making and profiling — we do not carry out automated decision-making that produces legal or similarly significant effects.
- The right to withdraw consent at any time, where we rely on your consent.
To exercise any of these rights, please contact us using the details above. We will respond within one month. There is usually no charge, although we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.
Complaints
If you have a concern about how we have handled your personal data, we would ask you to contact us in the first instance so that we can try to resolve it. You also have the right to lodge a complaint with the ICO, the UK supervisory authority for data protection:
Information Commissioner's Office — www.ico.org.uk — helpline 0303 123 1113.
Cookies
Our Website uses cookies and similar technologies. For full details of the cookies we use and how to manage them, please see our Cookie Policy.
Third-party links
Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of every website you visit.
Children
Our Website is not directed at children, and we do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so that we can delete it.
Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Where the changes are significant, we may also notify you directly.
Effective date: 23rd June 2025