Privacy Policy

Who we are

ThreeKZ is the data controller for the personal data described on this page. We are an embroidery and vinyl print business based in Colne, Lancashire, working across Pendle, Burnley and the surrounding area.

We are a service area business and do not publish a street address. You can reach us by email at Threekzdesignandbranding@gmail.com or by phone on 07940 591866, and either is enough for any request about your data.

What we collect

When you send an enquiry

The quote form asks for, and stores:

• Your name, phone number and email address.
• The service you are interested in, and how many items you need.
• Whether you already have garments, and any deadline you have given us.
• The details you type into the message box.
• Any artwork file you choose to upload.

Alongside that, and without you typing it, we record your IP address, the page you sent the enquiry from, and the time you sent it. The IP address is kept because it is what lets us deal with abuse of the form. We do not use it to identify you for any other purpose.

When you browse the site, our own counting

We count five things on our own server: pages loaded, taps on the phone number, taps on the WhatsApp link, taps on the email address, and enquiries sent through the form. For each one we store the time it happened, which of the five it was, and which page it happened on. That is the entire record.

We do not store your IP address, your device or browser, where you came from, or any cookie, identifier or session against these counts, and nothing is placed on your device to collect them. There is no way to link two of these entries to the same person, including for us. It is a tally, not a profile: we can see that a page was loaded a hundred times and we cannot tell whether that was a hundred people or one person a hundred times.

Because it holds no personal data it is not covered by data protection law, which is why it needs no consent and runs for every visitor whichever way you answer the cookie banner.

No analytics and no third-party tracking

We removed Google Analytics from this site in August 2026. There is no analytics tag, no advertising pixel and no third-party tracker of any kind. Nothing is loaded from Google and nothing about your visit is sent to Google or to anyone else. The five counts described above are the only measurement on this site, and they stay on our own server.

Separately, our host keeps standard server logs, which include IP addresses, for security and to keep the site running. That happens for every website and does not depend on cookies.

Why we are allowed to use it

Under UK GDPR we rely on two lawful bases, depending on the data:

• Steps before a contract. Handling your enquiry, quoting for the work and replying to you. Without this data we cannot give you a price.
• Legitimate interests. Keeping a record of enquiries so we can pick up a conversation later, and protecting the form from spam and abuse. We have weighed this against your privacy and think a business keeping a note of who asked it for a quote is what a customer would reasonably expect.

Nothing on this site relies on consent. There is no analytics to consent to, the anti-spam cookie is strictly necessary and needs none, and our own counting holds no personal data. The notice at the bottom of the page tells you about that cookie; it does not ask you to agree to anything, because there is nothing to agree to.

Who else handles your data

We do not sell your data and we do not share it for anyone else’s marketing. We do use a small number of suppliers to run the site, and they process data on our instructions:

Some of these suppliers are based outside the UK, or store data outside it. Where that happens the transfer is covered by the UK’s approved safeguards, either an adequacy decision or the International Data Transfer Agreement, which the supplier has in place as part of their contract with us.

How long we keep it

Enquiries are kept for 24 months from your last contact with us, then deleted. If you become a customer we keep the order record for six years after the end of the tax year it falls in, because HMRC requires it. Uploaded artwork is kept for as long as you are a customer, so that repeat orders match the last run, and deleted with the rest if you are not.

Server logs are kept for a short period by our host and then removed automatically. Our own anonymous visit counts are kept indefinitely, because there is nothing in them to identify anyone and no reason to delete a tally.

Your rights

Under UK GDPR you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that is wrong.
• Delete it.
• Stop or limit what we do with it.
• Send it to you, or to somebody else, in a portable format.
• Stop relying on legitimate interests, where you object to that.

All of these are free, and we will respond within one month.

How to ask us to delete your data

Email Threekzdesignandbranding@gmail.com with the subject Data deletion request, or ring 07940 591866 and tell us. Include the name, email address or phone number you used when you got in touch, so we can find the right record.

We will delete the enquiry, any uploaded artwork and the email copy, and confirm to you when it is done, within one month. If we have to keep something, for example an invoice HMRC requires us to retain, we will tell you exactly what and why rather than quietly keeping it.

You do not need to give a reason, and asking will not affect any quote or work in progress.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

If we change how we handle data we will update this page and change the date at the top.