index

Privacy policy

Last updated: 26 February 2026

This Privacy Policy explains how ALP Creations (“we”, “us”, “our”) collects, uses and protects your personal information when you visit alpcreations.co.uk, place an order, contact us, or otherwise interact with our services.

We are committed to protecting your privacy and handling your data transparently and responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


1. Who We Are

ALP Creations


203 Copperfield

Chigwell

IG7 5NJ

United Kingdom

Email: hello@alpcreations.co.uk

For the purposes of data protection law, we are the data controller of your personal information.


2. The Personal Information We Collect

The personal information we collect depends on how you interact with us.

Information You Provide Directly

  • Full name

  • Billing and delivery address

  • Email address

  • Telephone number

  • Order details

  • Personalisation details submitted with orders

  • Messages sent via email or contact forms

Payment Information

Payments are processed securely through Shopify and associated payment providers. We do not store your full card details.

Automatically Collected Information

When you visit our website, we may collect:

  • IP address

  • Device type and browser

  • Pages viewed and time spent on site

  • Referral source

  • Cookie and tracking data

This information helps us improve our website and services.


3. How We Use Your Information

We use your personal data to:

  • Process and fulfil your orders

  • Deliver personalised products

  • Communicate about your order

  • Provide customer support

  • Improve our website and customer experience

  • Prevent fraud or misuse

  • Comply with legal and tax obligations

  • Send marketing communications (where you have opted in)

We only use your information for legitimate business purposes and never for anything unrelated to your interaction with us.


4. Lawful Bases for Processing (UK GDPR)

Under UK data protection law, we rely on the following lawful bases:

Contract – To process and deliver your orders.
Legal Obligation – To comply with tax, accounting and regulatory requirements.
Legitimate Interests – To improve our services, prevent fraud, and operate our business effectively.
Consent – For sending marketing emails or non-essential cookies (you may withdraw consent at any time).


5. Marketing Communications

If you opt in to receive marketing emails, we may send you updates, offers or product news.

You can unsubscribe at any time by:

  • Clicking the “unsubscribe” link in any email, or

  • Contacting us directly.

We will never send marketing communications without your consent.


6. Cookies and Tracking Technologies

We use cookies to:

  • Ensure our website functions properly

  • Remember your preferences

  • Analyse website traffic

  • Improve performance and user experience

Non-essential cookies (such as analytics or advertising cookies) are only placed after you provide consent through our cookie banner.

You can adjust your cookie preferences at any time through your browser settings.

For more information about Shopify cookies, please visit:
https://www.shopify.com/legal/cookies


7. Sharing Your Information

We only share your data where necessary, including with:

  • Shopify (our website platform)

  • Payment processors

  • Delivery and courier services

  • Accountants or legal advisors (where required)

  • IT and website support providers

All third parties are required to handle your data securely and lawfully.

We do not sell your personal data.


8. International Transfers

Some of our service providers (such as Shopify) may process data outside the UK.

Where data is transferred internationally, we ensure appropriate safeguards are in place, such as:

  • UK-approved Standard Contractual Clauses, or

  • Transfers to countries recognised as providing adequate protection.


9. Data Retention

We retain personal data only as long as necessary:

  • Order and financial records: retained for 6 years (for HMRC compliance).

  • Customer accounts: retained until you request deletion or after prolonged inactivity.

  • Marketing data: retained until you withdraw consent.

  • Customer service correspondence: retained for up to 2 years.

After this period, data is securely deleted or anonymised.


10. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request deletion of your data (where applicable)

  • Restrict or object to certain processing

  • Withdraw consent at any time (for marketing)

  • Request data portability

To exercise your rights, please email us at hello@alpcreations.co.uk.

We may request verification of identity before processing your request.


11. Children’s Data

Our website and services are not intended for children under 16. We do not knowingly collect personal data from children.

If you believe a child has provided us with personal data, please contact us so we can delete it.


12. Data Security

We take appropriate technical and organisational measures to protect your data. However, no online system can guarantee complete security.

We encourage you to use secure passwords and avoid sharing login information.


13. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can resolve the issue.

If you are not satisfied with our response, you have the right to lodge a complaint with:

Information Commissioner’s Office (ICO)
Website: www.ico.org.uk


If you have any questions about this Privacy Policy, please contact:

ALP Creations
Email: hello@alpcreations.co.uk