Privacy policy

This Privacy Policy explains how PLUKRAY collects, uses, stores and shares personal information when you visit www.plukray.co.uk, purchase or enquire about our products or services, submit artwork or project files, contact us, interact with our marketing, or otherwise use our website and services.

For the purposes of applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018, the data controller is:

Adam Plukita trading as PLUKRAY
29 Parkgate Crescent
Belfast
BT4 1EU
United Kingdom

Email: support@plukray.co.uk
Telephone: +44 7868 602132

Nothing in this Privacy Policy limits any rights you have under applicable data protection law.

1. Personal information we collect

The personal information we collect depends on how you interact with PLUKRAY.

We may collect:

• your name;
• email address;
• telephone number;
• billing address;
• delivery address;
• order and transaction information;
• products or services purchased or requested;
• customer account information;
• messages and enquiries;
• complaints, return and refund information;
• project specifications;
• dimensions, quantities and material information;
• delivery instructions;
• reviews and feedback;
• marketing preferences;
• cookie and privacy preferences;
• IP address;
• browser and device information;
• approximate location derived from technical information;
• website browsing and interaction information;
• referral information;
• fraud-prevention and transaction-risk information; and
• information required for legal, tax, accounting or regulatory purposes.

2. Artwork, photographs and project files

Because PLUKRAY provides custom UV and raised 3D UV printing, customers may provide additional information that would not normally be collected by a standard online retailer.

This may include:

• photographs;
• JPG, PNG, PDF or other artwork files;
• logos;
• company branding;
• names and personalised wording;
• photographs of products to be printed;
• photographs of people;
• product drawings;
• dimensions and technical information;
• proofs and design revisions;
• print-ready artwork;
• files uploaded through a project form, product customiser or similar facility where available.

We use this information primarily to:

• assess whether a project can be produced;
• prepare quotations;
• prepare or review artwork;
• create proofs;
• communicate with you about your project;
• manufacture or print the requested product;
• investigate quality issues;
• support repeat projects where appropriate; and
• maintain necessary records relating to the transaction.

Customer-supplied artwork and photographs are not normally used by PLUKRAY for public advertising, social media, portfolio content or other promotional purposes without appropriate permission.

3. Personal information contained in customer artwork

Artwork or photographs supplied by a customer may contain personal information relating to other people.

For example, a customer may ask us to print:

• a family photograph;
• a child's name;
• a wedding photograph;
• employee names or photographs;
• personalised gifts;
• business identification details.

Where you provide personal information relating to another person, you should ensure that you are entitled to provide that information to us for the requested purpose.

PLUKRAY does not normally attempt to identify or infer sensitive characteristics about individuals depicted in customer artwork.

Please avoid providing unnecessary sensitive or confidential personal information.

4. Business and manufacturer projects

Where PLUKRAY works with businesses, manufacturers or product makers, we may process business contact information relating to employees, representatives or other individuals involved in the project.

This may include:

• name;
• job title;
• company;
• business email address;
• business telephone number;
• correspondence;
• quotations;
• purchase information;
• artwork approvals; and
• project instructions.

For certain B2B projects, PLUKRAY may process personal information contained in artwork or production files on behalf of a business customer and according to that customer's instructions.

Where the circumstances require it, separate data-processing terms may apply.

5. Payment information

Payments may be processed through Shopify Payments or another payment service made available through our checkout.

Complete payment card information is normally supplied directly to the relevant payment provider.

PLUKRAY does not normally receive or store your complete payment card number or card security code.

We may receive limited payment-related information such as:

• payment method;
• payment status;
• billing information;
• transaction reference;
• limited card information, such as the final digits of a card; and
• fraud or risk indicators.

6. Information required to provide our services

Some information is necessary for us to enter into or perform a contract with you.

For example, we normally need appropriate:

• identity and contact details;
• delivery details;
• payment information;
• order information; and
• project specifications.

For custom printing, we may also require artwork, dimensions, material information or other information necessary to manufacture the requested product.

If required information is not provided, we may be unable to accept, quote, process, manufacture, deliver or complete the relevant order or project.

7. How we use personal information

We may use personal information to:

• respond to enquiries;
• prepare quotations;
• assess printing projects;
• prepare artwork and proofs;
• communicate about project requirements;
• accept and manage orders;
• process payments;
• produce personalised and custom-printed products;
• provide UV and raised 3D UV printing services;
• arrange delivery;
• communicate about orders and projects;
• manage customer accounts;
• provide customer service;
• manage cancellations, returns, reprints and refunds;
• investigate damaged, defective or incorrectly produced goods;
• maintain project and transaction records;
• prevent fraud and unauthorised activity;
• protect our customers, website and business;
• troubleshoot and improve the website;
• measure website and business performance;
• understand how customers use the store;
• manage reviews and feedback;
• send marketing where legally permitted;
• maintain marketing preferences and suppression records;
• establish, exercise or defend legal claims;
• comply with accounting, tax and regulatory requirements; and
• comply with lawful requests from courts, regulators and public authorities.

We will not use personal information for a materially incompatible purpose unless permitted or required by law.

8. Our lawful bases

PLUKRAY processes personal information only where there is an appropriate lawful basis.

Contract

We may process information where necessary to perform a contract with you or take steps at your request before entering into a contract.

This includes:

• preparing quotations;
• processing orders;
• creating custom artwork;
• producing personalised products;
• providing printing services;
• processing payments;
• arranging delivery;
• communicating about an order; and
• managing returns, refunds or reprints.

Legal obligation

We may process information where necessary to comply with legal obligations, including:

• accounting;
• taxation;
• consumer protection;
• responding to lawful regulatory requests; and
• complying with applicable data protection requirements.

Legitimate interests

Where appropriate, we may rely on our legitimate interests to:

• operate and improve PLUKRAY;
• provide effective customer service;
• respond to general enquiries;
• maintain appropriate business and project records;
• protect our systems and website;
• prevent fraud and abuse;
• measure business performance;
• manage disputes;
• establish, exercise or defend legal claims; and
• market our own similar products or services to existing customers where legally permitted.

When relying on legitimate interests, we consider whether our interests are overridden by the rights and interests of the individual concerned.

Consent

We may rely on consent where required for:

• non-essential cookies;
• certain analytics;
• advertising or tracking;
• certain marketing;
• publication of customer content where consent is appropriate; and
• other optional processing for which we specifically request permission.

Where processing relies on consent, you may withdraw consent at any time.

Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

9. How we obtain personal information

We may receive personal information directly from you when you:

• browse our website;
• contact PLUKRAY;
• request a quotation;
• submit a project;
• upload artwork;
• place an order;
• create an account;
• approve artwork or a proof;
• request support;
• submit a complaint;
• request a return or refund;
• provide feedback or a review;
• subscribe to marketing; or
• manage your privacy preferences.

We may also collect certain technical information automatically through cookies, pixels, logs and similar technologies.

Information may also be received from providers involved in operating our business, including:

• Shopify;
• payment processors;
• couriers;
• fraud-prevention providers;
• website and hosting providers;
• connected Shopify apps;
• analytics providers;
• advertising providers where enabled;
• customer service providers; and
• public authorities where legally permitted or required.

10. Shopify

Our online store is hosted by Shopify.

Shopify provides services including:

• ecommerce infrastructure;
• checkout;
• customer accounts;
• payment integrations;
• security;
• fraud prevention; and
• other functions required to operate the store.

As a result, Shopify processes personal information relating to visitors and customers.

This may include:

• contact details;
• customer account information;
• orders;
• transactions;
• delivery information;
• IP addresses;
• browser and device information;
• website activity;
• cookie and privacy preferences; and
• security and fraud information.

For core ecommerce functions, Shopify generally processes information in connection with providing services to PLUKRAY.

In other circumstances, Shopify may process personal information for its own purposes and act as a separate controller.

11. Shopify Network Intelligence and Enhanced Services

Where Shopify Network Intelligence or related Shopify Enhanced Services are enabled, Shopify may use information about interactions with PLUKRAY together with information from interactions with Shopify and other Shopify merchants to provide Enhanced Services.

These may include services relating to:

• fraud prevention;
• analytics;
• product or store personalisation;
• measurement;
• advertising; and
• recommendations.

Where UK law requires consent for non-essential tracking, advertising or related technologies, those activities should take place only after the required consent has been obtained.

You can learn more by reading the Shopify Consumer Privacy Policy.

Shopify also provides a Shopify Privacy Portal, through which individuals may exercise certain rights relating directly to Shopify's processing.

Where Shopify Network Intelligence is enabled for UK customers, Shopify currently requires merchants to disclose this processing, link to its Consumer Privacy Policy and inform customers about its privacy portal.

12. Who we share personal information with

Where necessary, PLUKRAY may share appropriate personal information with:

• Shopify and Shopify group companies;
• payment processors and banks;
• fraud-prevention providers;
• postal services and couriers;
• manufacturers or suppliers where required for a project;
• IT, website, hosting and cybersecurity providers;
• Shopify apps and integrations;
• customer support providers;
• analytics providers;
• advertising or marketing providers where legally permitted;
• review and feedback providers;
• accountants;
• insurers;
• professional advisers;
• legal advisers;
• regulators;
• tax authorities;
• courts;
• law-enforcement bodies; and
• other public authorities where disclosure is legally required.

We aim to disclose only the information reasonably necessary for the relevant purpose.

Service providers acting on our behalf are expected to protect personal information and use it only for authorised purposes.

13. Customer artwork and third-party suppliers

We will not routinely provide customer artwork to third parties unrelated to fulfilling the customer's project.

Where a specialist supplier, software provider or production partner needs access to a file in order to provide a requested service, we will limit access to what is reasonably necessary.

Customer artwork may also be stored using secure hosting, cloud storage or ecommerce infrastructure used to operate PLUKRAY.

14. We do not sell customer information for money

PLUKRAY does not sell customer personal information for monetary payment.

Certain online advertising or data-sharing activities may nevertheless fall within broader legal definitions such as "sale", "sharing" or "targeted advertising" in some jurisdictions outside the UK.

Where such laws apply to PLUKRAY, appropriate privacy choices will be provided where required.

15. International transfers

Shopify and some other service providers may process personal information outside the United Kingdom.

Where UK personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal transfer mechanism applies where required.

Depending on the destination and circumstances, this may include:

• UK adequacy regulations;
• contractual safeguards recognised under UK law; or
• another lawful transfer mechanism.

You may contact support@plukray.co.uk if you would like further information about relevant international-transfer safeguards.

16. Cookies and similar technologies

PLUKRAY and its technology providers may use cookies and similar technologies such as pixels, tags and local storage.

These technologies may be used to:

• operate the website;
• keep the store secure;
• manage checkout;
• remember basket contents;
• remember privacy choices;
• maintain sessions;
• prevent fraud;
• measure website performance;
• understand website usage;
• measure marketing effectiveness;
• personalise content; and
• provide advertising where permitted.

Strictly necessary technologies

Certain technologies are necessary for functions such as:

• security;
• checkout;
• payments;
• basket management;
• privacy preference storage; and
• customer sessions.

Where permitted by law, strictly necessary technologies can operate without consent.

Non-essential technologies

Where consent is legally required, non-essential analytics, advertising or personalisation technologies will be used only after the required consent has been obtained.

Customers should be able to accept, reject or manage applicable non-essential cookies through the privacy controls available on the store.

The ICO states that non-essential cookies must not simply be set before consent and that valid consent requires a clear positive action.

17. Marketing communications

PLUKRAY may send marketing communications where:

• you have given appropriate consent; or
• another lawful marketing rule applies.

For existing individual customers, the PECR "soft opt-in" may allow marketing of PLUKRAY's own similar products or services where the legal requirements have been satisfied.

This includes providing an opportunity to opt out when details are collected and in every subsequent marketing communication.

You can unsubscribe at any time by:

• using the unsubscribe link contained in a marketing email; or
• contacting support@plukray.co.uk.

Unsubscribing from marketing does not prevent us from sending necessary non-marketing messages relating to:

• orders;
• quotations;
• artwork approval;
• payments;
• delivery;
• account security;
• complaints;
• returns;
• refunds; or
• customer service.

We may retain a minimal suppression record after you unsubscribe so that your preference continues to be respected.

18. Automated fraud and security checks

Shopify, payment processors and fraud-prevention providers may use automated systems and risk indicators to detect potentially fraudulent or unauthorised transactions.

These systems may consider information including:

• transaction value;
• billing and delivery information;
• IP address;
• device information;
• order history;
• payment information; and
• unusual purchasing patterns.

Orders may be delayed, reviewed, cancelled or declined where a significant fraud or security concern is identified.

PLUKRAY does not normally use solely automated decision-making that produces legal or similarly significant effects without an appropriate lawful basis and safeguards.

Where applicable law gives you rights in relation to automated decision-making, you may contact us at support@plukray.co.uk.

19. How long we retain information

PLUKRAY keeps personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, tax, accounting, security and dispute-resolution purposes.

Retention depends on the type of information.

Order, payment and accounting records

We retain transaction and accounting information for the period necessary to comply with applicable tax and accounting requirements.

Because PLUKRAY is operated by a self-employed individual, HMRC currently requires relevant business records to be retained for at least five years after the 31 January submission deadline for the relevant tax year.

Artwork and project files

Customer artwork, proofs, photographs and production files are retained only for as long as reasonably necessary to:

• complete the project;
• investigate problems;
• support agreed repeat orders;
• maintain appropriate production records; and
• establish or defend legal claims where necessary.

We periodically review whether project files are still required.

A customer may ask us to delete personal information contained in project files, subject to any lawful reason requiring or permitting us to retain particular information.

Customer service and complaints

Correspondence relating to orders, complaints, disputes or legal matters may be retained for an appropriate period after the matter is closed.

Marketing

Marketing contact information is retained until you unsubscribe, withdraw consent or object, subject to a minimal suppression record where necessary.

Website and security information

Technical and security information is retained only for an appropriate period based on security, fraud prevention, troubleshooting and legal requirements.

When personal information is no longer required, we delete it, anonymise it or appropriately restrict access, subject to technical backup limitations.

20. Security

PLUKRAY uses reasonable technical and organisational measures intended to protect personal information against:

• unauthorised access;
• loss;
• misuse;
• alteration;
• destruction; and
• unlawful disclosure.

Measures may include:

• access controls;
• authentication;
• secure ecommerce infrastructure;
• encrypted transmission where appropriate;
• secure payment processing;
• restricted access to customer information;
• security monitoring;
• software updates; and
• appropriate service-provider controls.

No internet transmission or electronic storage system is completely secure, and absolute security cannot be guaranteed.

21. Your data protection rights

Depending on the circumstances and applicable law, you may have rights to:

• request access to personal information;
• correct inaccurate personal information;
• request deletion;
• request restriction of processing;
• object to certain processing;
• object to direct marketing;
• receive or transfer certain personal information;
• withdraw consent; and
• exercise rights relating to certain automated decisions.

Not every right applies in every circumstance.

The applicable rights can depend on the reason and lawful basis for processing.

The ICO requires privacy notices to explain purposes, lawful bases, recipients, international transfers, retention and applicable individual rights.

Right to object to direct marketing

You have the right to object at any time to the use of your personal information for direct marketing.

Where you object, we will stop using your personal information for that purpose.

22. Exercising your rights

To exercise a data-protection right, contact:

support@plukray.co.uk

Please describe your request clearly and provide enough information for us to identify the relevant records.

We may ask for reasonable evidence of identity where necessary to protect your information.

If someone acts on your behalf, we may ask for evidence that they are authorised to do so.

We will respond within the time required by applicable law.

Some rights are subject to exemptions or limitations.

You will not normally be charged for exercising your rights, although applicable law may allow a reasonable fee or refusal in limited circumstances involving manifestly unfounded or excessive requests.

23. Data protection complaints

You have the right to complain to PLUKRAY if you believe that we have not handled your personal information appropriately.

Complaints may be submitted to:

support@plukray.co.uk

or by post to:

Adam Plukita trading as PLUKRAY
29 Parkgate Crescent
Belfast
BT4 1EU
United Kingdom

PLUKRAY will:

• provide a clear means of making a data protection complaint;
• acknowledge receipt within 30 days;
• take appropriate steps to investigate the complaint;
• make appropriate enquiries;
• keep you informed where appropriate; and
• communicate the outcome without undue delay.

These requirements are now expressly required for organisations under the Data (Use and Access) Act 2025 and came fully into force in June 2026.

24. Complaining to the Information Commissioner's Office

If you remain dissatisfied with how PLUKRAY has handled your personal information or privacy complaint, you may complain to the UK's supervisory authority:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113

The current ICO address and helpline remain confirmed by the ICO.

You may also submit a complaint through the ICO's website.

25. Children

PLUKRAY's online store is intended primarily for adults who are able to enter into contracts.

We do not intentionally operate the website as a service directed at children.

However, because customers may order personalised products, customer-supplied artwork may contain:

• photographs of children;
• children's names;
• birth dates;
• school or family-related personalised content.

Where an adult customer supplies such information for a legitimate printing project, we use it only as reasonably necessary to provide the requested service and related support.

We do not normally use customer-supplied photographs of children for marketing or public portfolio purposes without appropriate permission.

If you believe personal information relating to a child has been supplied to PLUKRAY inappropriately, contact support@plukray.co.uk.

26. Third-party websites and services

Our website may contain links to websites, apps or services operated by third parties.

PLUKRAY does not control the privacy practices of independent third parties.

Where you leave our store or choose to use an independent third-party service, you should review that provider's own privacy information.

27. Changes to this Privacy Policy

We may update this Privacy Policy where necessary because of changes to:

• law or regulatory guidance;
• our products or services;
• printing processes;
• Shopify;
• connected applications;
• suppliers;
• website functionality;
• advertising or analytics technologies; or
• the ways in which we process personal information.

The latest version will be published on this website together with its Last updated date.

Where a material change requires additional notice or consent, we will take appropriate steps before beginning the relevant new processing.

28. Contact PLUKRAY

For privacy enquiries, data-protection requests or complaints:

Adam Plukita trading as PLUKRAY
29 Parkgate Crescent
Belfast
BT4 1EU
United Kingdom

Email: support@plukray.co.uk
Telephone: +44 7868 602132