PRIVACY POLICY

Version: 02/2026

This Privacy Policy explains how TIIMA (“we”, “us”, “our”) collects, uses and protects your personal data when you use our website or purchase our services.

We are committed to protecting your privacy in accordance with:

•UK General Data Protection Regulation (UK GDPR)

•Data Protection Act 2018

1. Who We Are

TIIMA

The Mount

72 Paris Street

Exeter

EX1 2JY

Email: hello@tiima.co.uk

We are the data controller responsible for your personal data.

2. What Personal Data We Collect

We may collect and process the following personal data:

•Name

•Billing address

•Delivery address

•Email address

•Telephone number

•Wedding date and event details

•Guest names and addresses (if provided)

•Order details

•Payment information (processed securely via third-party providers)

We do not store full card payment details.

3. How We Collect Your Data

We collect data when you:

•Place an order via our website

•Submit an enquiry form

•Complete a design questionnaire

•Contact us by email

•Subscribe to marketing communications (if applicable)

4. How We Use Your Data

We use your data to:

•Process and fulfil your order

•Communicate with you regarding your project

•Provide proofs and updates

•Arrange delivery

•Comply with legal and accounting obligations

•Improve our services

We only process personal data where we have a lawful basis to do so, including:

•Performance of a contract

•Legal obligation

•Legitimate interests

•Consent (where applicable)

5. Payment Processing

Payments are processed securely via Stripe and/or other payment gateways.

We do not store full payment card details on our servers.

Stripe processes payment data in accordance with its own privacy policy.

6. Third-Party Service Providers

We may share necessary data with trusted third parties for the purpose of fulfilling your order, including:

•WooCommerce (website platform)

•Stripe (payment processing)

•Dubsado (client management system)

•Printers and suppliers

•Courier and postal services

These providers process data only as required to perform their services.

7. Guest Address Information

Where guest names and addresses are provided for mailing services:

•Data is used solely to fulfil your order

•Data is not used for marketing

•Data is not retained longer than necessary

You confirm that you have the right to provide this data.

8. Data Retention

We retain order and accounting records for a minimum of six years for tax and legal compliance.

Other personal data is retained only as long as reasonably necessary to fulfil contractual obligations.

9. Your Rights

Under UK data protection law, you have the right to:

•Access your personal data

•Request correction of inaccurate data

•Request erasure (in certain circumstances)

•Restrict processing

•Object to processing

•Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO Website: www.ico.org.uk

10. Cookies

Our website uses cookies to:

•Enable website functionality

•Process orders

•Analyse website traffic

You may control cookies through your browser settings.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, alteration or disclosure.

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. The latest version will always be available on our website.