Privacy Policy

Rebel Creative

Last updated: 17/08/2026

Rebel Creative ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website www.rebelcreativeltd.co.uk (the "Site") or place an Order with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, please contact us using the details in Section 11.

1. Who We Are

Rebel Creative is the "data controller" of the personal data we collect through the Site.

Company name: Rebel Packaging Ltd T/A Rebel Creative Ltd
Company registration number: 16727641
Email: sales@rebelcreativeltd.co.uk

2. What Personal Data We Collect

Depending on how you interact with us, we may collect:

Identity and contact data: name, billing/delivery address, email address, phone number, company name.
Order data: details of Products purchased, order history, custom Artwork you upload for printing.
Payment data: payment card details are processed directly by our payment provider, Wix Payments, we do not store full card details ourselves.
Account data: username and password, if you create an account.
Communications data: records of emails, phone calls, or messages between you and us, including customer service enquiries.
Marketing preferences: whether you've opted in or out of marketing communications.
Technical data: IP address, browser type and version, device information, and other data collected automatically when you use the Site.
Usage data: information about how you browse and use the Site, collected via cookies and similar technologies (see Section 6).

We do not knowingly collect special category data (e.g. health, religion) or data relating to children.

3. How We Collect Your Data

Directly from you: when you place an Order, create an account, contact us, upload Artwork, or sign up for marketing.
Automatically: through cookies and similar technologies when you use the Site (see Section 6).
From third parties: for example, our payment processor confirming a transaction, or delivery couriers providing tracking updates.

4. How We Use Your Data and Our Legal Basis

We use your personal data for the following purposes, relying on the legal bases shown:

Purpose Legal basis

Processing and fulfilling your Order, including custom printing Performance of a contract

Managing payments, refunds, and invoicing Performance of a contract / legal obligation

Customer service and responding to enquiries Performance of a contract / legitimate interests

Sending order confirmations, delivery updates, and important account notices Performance of a contract

Sending marketing communications (where you have opted in)Consent

Improving the Site, our Products, and customer experience Legitimate interests

Preventing fraud and misuse of the Site Legitimate interests / legal obligation

Complying with tax, accounting, and other legal obligations Legal obligation

You can withdraw consent for marketing at any time — see Section 8.

5. Sharing Your Data

We do not sell your personal data. We may share it with:

Service providers who help us operate the business, such as payment processors, website hosting providers, email/marketing platforms, printing/production partners, and delivery couriers. These providers only receive the data they need to perform their function and are bound by contractual obligations to protect it.
Professional advisers, such as accountants or solicitors, where necessary.
Regulatory or law enforcement bodies, where we are legally required to disclose data.
A buyer, if we sell or transfer part or all of our business, subject to appropriate protections.

Where a service provider is based outside the UK/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data in line with UK GDPR requirements.

6. Cookies and Similar Technologies

Our Site uses cookies and similar technologies to:

Enable core Site functionality (e.g. shopping basket, checkout).
Remember your preferences.
Analyse how the Site is used, so we can improve it (e.g. via analytics tools such as Google Analytics).
Support marketing, where applicable (e.g. tracking pixels for advertising platforms).

You can control or disable cookies through your browser settings, and via the cookie consent banner/preferences tool on our Site. Disabling some cookies may affect the functionality of the Site.

7. How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes it was collected, including to satisfy legal, accounting, or reporting requirements. As a general guide:

Order and transaction records: 6 years, to meet UK tax and accounting obligations.
Account data: for as long as your account is active, plus a reasonable period afterward.
Marketing data: until you unsubscribe or withdraw consent.
Enquiry/customer service records: 2 years from last contact.

8. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data in certain circumstances ("right to be forgotten").
Restrict processing of your data in certain circumstances.
Object to processing based on legitimate interests or for direct marketing.
Data portability — receive your data in a portable format, where applicable.
Withdraw consent at any time, where processing is based on consent (e.g. marketing emails — you can also unsubscribe via the link in any marketing email).

To exercise any of these rights, contact us using the details in Section 11. We may need to verify your identity before responding. We will respond within one month, as required by law.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly, though we'd appreciate the chance to resolve any concerns directly first.

9. How We Protect Your Data

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure hosting, access controls, and working only with reputable third-party processors. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page with a revised "Last updated" date. We encourage you to review this page periodically.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at: sales@rebelcreativeltd.co.uk