Privacy Policy

Effective Date: 01/02/2026
Last Updated: 26/02/2026

1. Introduction

This Privacy Policy explains how Bolt Uniforms (“we”, “us”, or “our”) collects, uses, discloses, and protects your personal data when you visit or make a purchase from www.boltuniforms.com or otherwise interact with our website and services (the “Services”).

Bolt Uniforms operates via the Shopify ecommerce platform.

For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR), we act as the data controller of your personal data.

Personal data means any information that identifies or can reasonably identify you as an individual.

2. What Personal Data We Collect

We collect personal data in the following ways:

A. Information You Provide Directly

When you place an order, request a quote, upload a logo, or contact us, we may collect:

Full name
Company name
Email address
Telephone number
Billing and delivery address
Order details (products, quantities, customisation options)
Uploaded logo files or artwork
Communication history (emails, support requests)
Payment-related information (processed securely by payment providers)

B. Information Collected Automatically

When you visit our website, we may automatically collect:

IP address
Device type and browser information
Operating system
Pages viewed and time spent
Referral source
Cookies and tracking identifiers

C. Information from Third Parties

We may receive data from:

Shopify (our ecommerce platform)
Payment processors (e.g., Shopify Payments, Stripe, PayPal)
Analytics providers (e.g., Google Analytics)
Advertising platforms (e.g., Meta/Facebook)

3. How We Use Your Personal Data

We use your personal data for the following purposes:

Contract Performance

To process and fulfil your orders
To personalise and produce embroidered or printed garments
To deliver products to you
To manage returns and refunds

Customer Support

To respond to enquiries
To provide order updates
To resolve complaints

Marketing (With Consent)

To send promotional emails
To provide offers, updates, or product announcements

You may opt out of marketing at any time.

Website Improvement & Analytics

To analyse website usage
To improve product offerings
To enhance user experience

Legal Compliance

To meet accounting, tax, and regulatory obligations
To respond to lawful requests from authorities

4. Legal Basis for Processing (UK GDPR & EU GDPR)

We rely on the following lawful bases:

Performance of a contract – when processing orders.
Legitimate interests – to improve our services and ensure security.
Consent – for marketing communications.
Legal obligation – where required by law (e.g., tax compliance).

5. How We Share Your Data

We do not sell your personal data.

We may share your data with:

Shopify (platform hosting and ecommerce services)
Payment processors
Shipping and courier providers
IT and hosting providers
Marketing and analytics providers
Professional advisors (legal, accounting)
Public authorities where legally required

All service providers are required to process data securely and lawfully.

6. International Data Transfers

Because Shopify and certain service providers operate internationally, your data may be transferred outside the UK or EEA.

Where this occurs, we rely on:

Standard Contractual Clauses (SCCs)
Shopify’s approved transfer mechanisms
Adequacy regulations (where applicable)

7. Data Retention

We retain personal data only as long as necessary:

Order records: up to 6 years (legal requirement)
Marketing consent records: until withdrawn
Customer service communications: as needed for dispute resolution
Account information: until account deletion or inactivity

Uploaded logo files may be retained for repeat orders unless you request deletion.

8. Security of Your Data

We implement appropriate technical and organisational measures to safeguard your personal data, including:

Secure Shopify hosting infrastructure
Encrypted payment processing
Restricted internal access controls

However, no system can guarantee absolute security.

9. Your Rights Under UK & EU GDPR

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion (“right to be forgotten”)
Restrict processing
Object to processing
Data portability
Withdraw consent at any time
Lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority