Privacy Policy

Last updated: August 2026  |  Street Icon Studio Ltd  |  streeticon.co.uk

1. Who We Are

Street Icon™ is a registered trademark brand operated by Street Icon Studio Ltd, a company registered in England and Wales.

• Registered address: Unit 117, Bradley Fold Trading Estate, Bolton BL2 6RT
• Email: office@streeticon.co.uk
• Website: streeticon.co.uk

Street Icon Studio Ltd is the data controller responsible for your personal information. We are committed to protecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We collect personal data when you interact with our website or purchase from us. This includes:

3. How We Collect Your Data

• Directly from you — when you place an order, create an account, contact us, or subscribe to our emails.
• Automatically — through cookies and similar technologies when you browse our website (see our Cookie Policy).
• From third parties — such as payment processors and analytics providers.

4. Legal Basis for Processing

We process your personal data on the following legal grounds under UK GDPR:

• Contract performance — processing your order, arranging delivery, and handling returns.
• Legal obligation — retaining financial records for HMRC compliance (minimum 6 years).
• Legitimate interests — preventing fraud, improving our website, and communicating about your orders.
• Consent — sending marketing emails where you have opted in. You may withdraw consent at any time.

5. How We Use Your Data

• Process, fulfil, and deliver your orders
• Send order confirmations, shipping updates, and receipts
• Handle returns, refunds, and customer service queries
• Comply with legal and regulatory obligations
• Detect and prevent fraud and security incidents
• Improve our website, products, and services
• Send marketing communications (only with your consent)
• Run remarketing and advertising campaigns (where consent given)

6. Sharing Your Data

We do not sell your personal data. We share it only where necessary with:

All third-party processors are required to handle your data securely and only for the specified purpose.

7. International Transfers

Some of our third-party service providers (such as Google and Meta) are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including the UK’s International Data Transfer Agreement (IDTA) or adequacy decisions, in compliance with UK GDPR Chapter V.

8. Data Retention

• Order and transaction records: retained for 6 years (HMRC legal requirement)
• Account data: retained while your account is active, plus 2 years after last activity
• Marketing data: retained until you unsubscribe or withdraw consent
• Analytics data: retained in line with the provider’s retention settings (typically 14–26 months)

9. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right to access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — request deletion of your data where we have no lawful basis to retain it.
• Right to restrict processing — ask us to pause processing in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or direct marketing.
• Rights related to automated decision-making — we do not use solely automated decisions that have a legal or significant effect on you.

To exercise any of these rights, contact us at office@streeticon.co.uk. We will respond within one calendar month. We may need to verify your identity before processing your request.

10. Marketing and Opt-Out

We will only send you marketing emails if you have opted in. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by emailing office@streeticon.co.uk. Opting out of marketing does not affect the sending of transactional emails related to your orders.

11. Cookies

We use cookies and similar tracking technologies on our website. For full details of what cookies we use and how to manage them, please see our Cookie Policy.

12. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure. These include SSL/TLS encryption, secure hosting infrastructure, access controls, and regular security reviews. However, no internet transmission is completely secure and we cannot guarantee absolute security.

13. Children’s Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Continued use of our website after any changes constitutes acceptance of the updated policy. For significant changes, we will notify you by email or prominent notice on the website.

15. How to Complain

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK’s data protection authority: