Privacy Policy — Time 2 Display Group

1. Who we are

This website is operated by Time 2 Display Group ("we", "us", "our"), a family of print, stationery and office supply brands headquartered in Fordingbridge, Hampshire, United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Time 2 Display Group is the data controller of personal data collected through this website.

If you have any questions about this policy or how we handle your personal data, you can contact us via the enquiry form on our homepage or by writing to us at our Fordingbridge office.

2. Information we collect

We collect and process the following categories of information:

Contact details you provide — name, business name, email address and (optionally) phone number when you complete our lead capture form.
Correspondence — any messages, quote requests or enquiries you send to us.
Technical data — IP address, browser type, device information, referring URLs and pages viewed, collected automatically through cookies and similar technologies.
Order & account data — where you become a customer of any of our brands, we hold details relating to the goods and services we supply, invoicing and delivery.

3. How we use your information

We use your personal data to:

Respond to your enquiries and provide quotes.
Fulfil orders and provide the services you have requested.
Send you service messages relating to work in progress.
Improve our website, services and customer experience.
Comply with our legal, regulatory and accounting obligations.
Where you have opted in, send marketing communications about our products and services. You can opt out at any time.

Our lawful bases for processing are: performance of a contract, our legitimate interests (running and improving our business), compliance with legal obligations, and — for marketing — your consent.

4. Sharing your information

We do not sell your personal data. We only share it with trusted third parties who help us operate our business, including:

Hosting and infrastructure providers.
Payment processors and accounting software (e.g. Xero).
Delivery and fulfilment partners.
Professional advisors (accountants, lawyers, insurers).
Regulatory bodies, law enforcement and government agencies where required.

All providers are contractually required to protect your data and only use it for the purposes we specify.

5. International transfers

Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement (IDTA).

6. How long we keep your data

We keep personal data only for as long as needed for the purposes set out above, or as required by law. Enquiry data is typically retained for up to 24 months; customer and financial records are retained for at least 6 years to meet HMRC requirements.

7. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of your data in certain circumstances.
Restrict or object to certain types of processing.
Request a copy of your data in a portable format.
Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details above. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, alteration and disclosure, including encryption in transit, access controls and regular reviews of our systems.

9. Cookies

For details of the cookies we use, please see our Cookie Policy.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of the page reflects the most recent revision.