Who we are
Underground Patch is a small business that makes custom patches and apparel for customers in the United Kingdom and Canada. In this policy, "we" and "us" means Underground Patch. You can reach us using the details on our Contact page.
What we collect
We only collect what you choose to send us:
- Order, quote and contact forms: your name, email address, phone or WhatsApp number, your message and the items or service you are asking about. When you send a form, these details are emailed to us.
- WhatsApp: if you order or ask a question by WhatsApp, the message is sent from your own WhatsApp app to ours. WhatsApp's own privacy terms apply to that conversation.
- Designs and files you send us so we can make your order.
There is no online payment on this website, so we never collect card or bank details here.
Your cart stays in your browser
The items in your cart are saved only in your own browser (using "local storage") so they are still there when you come back. They are not sent to us until you choose to send your order. You can empty your cart at any time, or clear your browser data to remove it.
Cookies
This website does not use advertising, tracking or analytics cookies. The only cookie we use is an essential login cookie for our own admin area, which is set only when the shop owner logs in. Visitors and customers don't receive it.
How we use your details
- To reply to your questions and send you quotes and mockups.
- To make, ship and follow up on your order.
- To keep simple records of orders, for example for accounting.
We don't sell or rent your details, and we don't use them for marketing unless you ask us to.
Who we share it with
We only share your details when it is needed for your order, for example with a delivery company so your parcel can reach you, or with our email and messaging providers that carry our messages. They may only use your details for that purpose.
How long we keep it
We keep messages and order details for as long as we need them to handle your order and any questions afterwards, and for as long as the law requires us to keep business records. After that, we delete them.
Your rights (UK GDPR and PIPEDA)
If you are in the UK, the UK GDPR gives you rights over your personal data. If you are in Canada, PIPEDA gives you similar rights. In plain words, you can ask us to:
- tell you what details we hold about you and give you a copy;
- correct anything that is wrong;
- delete your details, unless we must keep them by law;
- stop using your details for a particular purpose.
How to ask for your data to be deleted
Email us at the address on our Contact page with the subject "Delete my data" and tell us the name, email or phone number you used. We will confirm and reply within one month.
If you are not happy with how we handled your request, you can complain to the Information Commissioner's Office (ICO) in the UK, or to the Office of the Privacy Commissioner of Canada.
Changes to this policy
If we change this policy, we will update this page and the "Last updated" date at the top.