Plain English summary: We collect your name, email, and address when you contact us or request a sample. We use it only to run your campaign and communicate with you. We never sell your data. You can ask us to delete it any time.
1. Who We Are
LumpyMailPens.co.uk is a direct mail service operated as a sole trader business based in Southport, Merseyside, England. We are the data controller for personal data collected through this website.
Contact us: hello@lumpymailpens.co.uk
2. What Data We Collect
Data you give us directly
- Your name and business name
- Email address and phone number
- Postal address (when requesting a sample or placing an order)
- Target postcode and campaign preferences
- Any other information you include in a contact form or email
Data we collect automatically
- IP address and browser type (via server logs)
- Pages visited and time on site
- QR code scan data if you are a recipient of one of our campaigns (postcode area and scan timestamp only — no personal identification)
Data about your campaign recipients
If you commission a direct mail campaign with us, we will use publicly available business data (Companies House, Royal Mail PAF, ONS, and other open government datasets) to build your mailing list. This data is sourced from public registers and is used solely to fulfil your campaign. We do not hold this data beyond what is needed to complete your order.
3. How We Use Your Data
- To respond to your enquiries and provide quotes
- To send you a free sample pack if requested
- To plan, produce, and dispatch your direct mail campaigns
- To send you campaign performance reports if you have opted in to QR tracking
- To improve our website and services
- To comply with legal obligations
4. Our Legal Basis (UK GDPR)
- Contract performance — to fulfil your order or service request
- Legitimate interests — to respond to enquiries and improve our services
- Legal obligation — where required by UK law
- Consent — for any optional marketing communications (you can withdraw consent at any time)
5. Who We Share Your Data With
We do not sell your personal data. We may share it with:
- Royal Mail — to process and deliver your campaign mailings
- Print suppliers — solely to fulfil your pen and letter printing order
- IT service providers — our web hosting provider (VPS based in the EU/UK)
All third parties are contractually required to keep your data secure and only use it for the specific purpose we share it for.
6. How Long We Keep Your Data
- Enquiry and contact form data: 2 years from last contact
- Order and campaign records: 6 years (UK tax and legal requirements)
- Sample request data: 1 year
- Website server logs: 90 days
7. Your Rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to legal retention requirements)
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — at any time where processing is based on consent
To exercise any of these rights, email us at hello@lumpymailpens.co.uk. We will respond within 30 days.
8. Cookies
Our website uses minimal cookies. We do not use advertising or tracking cookies. We may use a session cookie to remember your preferences during a visit. No personal data is stored in cookies.
We do not currently use Google Analytics or any third-party analytics that collect personal data.
9. Data Security
We take reasonable technical and organisational steps to protect your data, including HTTPS encryption on all pages, restricted access to our servers, and secure email practices. No method of transmission over the internet is 100% secure, but we take this seriously.
10. Transfers Outside the UK
We aim to keep all data within the UK or EEA. If any service provider processes data outside the UK, we ensure appropriate safeguards are in place (such as UK adequacy decisions or standard contractual clauses).
11. Complaints
If you believe we have not handled your data correctly, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address any concerns directly first.
12. Changes to This Policy
We may update this policy from time to time. The date at the top of this page shows when it was last updated. Continued use of our website after changes constitutes acceptance of the updated policy.
13. Contact
For any privacy-related questions: hello@lumpymailpens.co.uk
LumpyMailPens.co.uk, Southport, Merseyside, England.