Privacy Policy

Last updated: 19 August 2026

This Privacy Policy explains how Bar-Mats.co.uk ("we", "us", "our", "the Site") collects, uses, discloses, and protects your personal information when you visit bar-mats.co.uk, contact us, or make a purchase from us, whether directly on our website or through Etsy, Amazon, or TikTok Shop.

Who we are

Bar-Mats.co.uk is operated by Refresh Prints, trading as Bar-Mats.co.uk.

Registered/trading address: 7 Carrier Street, Halifax, HX1 1DH, United Kingdom Email: info@bar-mats.co.uk Phone: +44 (0)1422 255568 Hours: Monday to Friday, 9am to 5pm

If you have questions about this policy, want more detail on our privacy practices, or wish to make a complaint, contact us using the details above.

Personal information we collect

We collect the following categories of personal information:

Device and usage information

What: browser type and version, IP address, time zone, device identifiers, pages and products viewed, search terms, referring/landing pages, and how you interact with the Site. Why: to make the Site load and function correctly, to keep it secure, and to understand how visitors use it so we can improve it. How collected: automatically, via cookies, pixels, and similar tracking technology (see Cookies section below). Shared with: Shopify (our e-commerce platform), Google (Analytics), Meta (Facebook/Instagram pixel), TikTok (pixel), and Judge.me (our reviews provider).

Order and account information

What: name, billing and shipping address, email address, phone number, and payment details (processed by our payment providers, we do not store full card numbers ourselves). Why: to fulfil your contract with us: taking payment, arranging shipping (including international shipping), providing order confirmations and invoices, screening for fraud, and handling returns or queries. How collected: directly from you at checkout. Shared with: Shopify, our payment providers (Shopify Payments, PayPal, Apple Pay, Google Pay), and our couriers/delivery partners.

Personalisation and design content

What: any images, photos, logos, or text you upload or send us to personalise a product, for example through our online Design Studio, by email, or via WhatsApp.

If you use the Design Studio, we also store the design itself, a print-ready file and a small preview image made from it, the size and quantity you chose, anything you type into the notes box, and a reference number such as BM-260819-K4RQ that links your design to your order.

Why: solely to create and produce your personalised order, to let you return to an unfinished design, and, only with your separate agreement, to show as an example of our work, for example on our website or social media.

How collected: directly from you.

Shared with: Cloudflare, who provide the storage the Design Studio uses. Designs are held separately from the shop, are not published anywhere, and are not searchable. Any link to your artwork that appears on your order can only be opened with a code unique to that design. Beyond that, your artwork stays within our production process unless you have agreed we can use it publicly.

Note: please do not upload images containing other identifiable people unless you have their permission to do so.

Generated pictures in the Design Studio

What: the description you type into the picture generator. Why: to create the picture you have asked for. Shared with: Google, whose service generates the image. Your description is processed under a paid business account, which means Google does not use it to improve its products. Note: any photo or artwork you upload yourself is never sent to Google, or to any other outside service. Please do not type personal information into the picture description box, it only needs to describe the picture you want.

Customer support and communications

What: the content of your enquiries and any information you choose to share with us, including via email, phone, or WhatsApp. Why: to respond to your questions, resolve issues, and provide quotes or proofs. How collected: directly from you. Shared with: WhatsApp/Meta (if you contact us that way, see their own privacy policy for how they handle messages), and not otherwise shared beyond our team.

Marketing information

What: your email address and engagement with our marketing emails (opens, clicks). Why: to send you order updates and, where you have opted in, offers and new product news. How collected: directly from you when you subscribe, or at checkout if you opt in. Shared with: Shopify Email (our email marketing tool). You can unsubscribe at any time using the link in any marketing email, or by contacting us.

Reviews

What: your name and the content of any product review you leave. Why: to display reviews on our Site. Shared with: Judge.me, our reviews provider.

Sharing your information

We share personal information with service providers who help us run the Site and fulfil orders, including:

• Shopify, our e-commerce platform: www.shopify.com/legal/privacy
• Etsy, Amazon, and TikTok Shop, if you buy through those channels. Your order there is also subject to their own privacy policies
• Payment providers (Shopify Payments, PayPal, Apple Pay, Google Pay)
• Couriers and delivery partners, to get your order to you
• Cloudflare, who store designs created with our Design Studio
• Google, both for site analytics and, separately, for generating pictures in the Design Studio
• Meta (Facebook/Instagram) and TikTok, for site analytics and advertising
• Judge.me, for product reviews
• WhatsApp/Meta, only if you choose to contact us via WhatsApp

We may also disclose information where required by law, to respond to a valid legal request (such as a court order or subpoena), or to protect our rights, property, or safety, or that of our customers.

We do not sell your personal information to third parties.

Cookies and tracking

Cookies are small files stored on your device when you visit the Site. We use them to make the Site work, understand how it is used, and, where you consent, for advertising.

Strictly necessary (store, checkout, cart, login, security): these keep the Site and checkout functioning and cannot be switched off if you want to browse or buy.

Analytics and performance (Shopify Analytics, Google Analytics): help us understand traffic and improve the Site.

Advertising (Meta/Facebook pixel, TikTok pixel): help us show you relevant ads on those platforms and measure how well they work.

Most cookies expire automatically between 30 minutes and 2 years. When you first visit, you can choose which non-essential cookies to accept via our cookie banner. You can also control cookies through your browser settings, though blocking them may affect how well the Site works.

The Design Studio does not require an account and does not set advertising cookies of its own. If you save an unfinished design, the link we give you is the only way back to it, so please keep it safe and do not share it with anyone you would not want to see your design.

We do not currently respond differently to browser "Do Not Track" signals, as there is no consistent industry standard for how to interpret them.

Legal basis for processing (UK GDPR)

As a UK business, we process your personal information under the UK General Data Protection Regulation. Our legal bases are:

• Contract: to process your order and deliver what you have bought, including storing and producing the design attached to it
• Consent: for marketing emails and non-essential cookies (which you can withdraw at any time)
• Legal obligation: for example keeping records for tax purposes
• Legitimate interests: for things like fraud prevention, Site security, responding to design enquiries, and improving our service, balanced against your rights

Automated decision-making

We do not use fully automated decision-making that has a legal or similarly significant effect on you. Shopify uses limited automated fraud-prevention checks (for example temporarily flagging IP addresses or cards linked to repeated failed transactions), but these do not have that kind of effect.

International transfers

Some of our service providers (including Shopify, Cloudflare, Google, Meta, and TikTok) may store or process data outside the UK, including in the United States. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms required under UK data protection law. More detail on Shopify's approach is here: Shopify's GDPR Whitepaper.

How long we keep your information

We keep order and account information for as long as needed to fulfil our contract with you, meet legal and tax obligations, and resolve disputes, generally for 6 years after your last order, in line with UK record-keeping requirements.

Designs created with the Design Studio are kept as follows:

• Unfinished designs, saved using the "Save and get a link" button, are deleted automatically after 90 days
• Designs sent to us as an enquiry that do not lead to an order are deleted automatically after 12 months
• Designs attached to an order are kept for a minimum of 6 years alongside the order itself, so that we can reprint, deal with a query or a return, and meet our record-keeping obligations

You can ask us to erase your information sooner. To have a design removed, email info@bar-mats.co.uk quoting your design reference or order number. If the design belongs to an order we may still need to keep the order record itself, but the artwork can be deleted. See "Your rights" below for when erasure applies.

Your rights

As a UK resident, you have the right to:

• Ask what personal information we hold about you and get a copy of it
• Ask us to correct inaccurate information
• Ask us to delete your information (this is not absolute, for example we may need to keep order records for tax purposes)
• Ask us to restrict or object to certain processing
• Ask for your information in a portable format
• Withdraw consent at any time, where we rely on consent

To exercise any of these, contact us at info@bar-mats.co.uk. We will respond within one month.

If you are not satisfied with our response, you have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO) ico.org.uk/make-a-complaint

Children's privacy

The Site is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. We will update the date at the top of this page when we do.