Last updated: August 2026
1. INTRODUCTION
This privacy notice provides details of how ID Cards and Lanyards collects and processes your personal data, including through your use of our website https://idcardsandlanyards.co.uk/. By providing us with your data, you warrant that you are over 13 years old.
ID Cards and Lanyards is the data controller responsible for personal data we collect about website visitors and customers (referred to as “we”, “us” or “our” in this privacy notice). Where a business or organisation supplies us with personal data about other people for printing, we act as a data processor on that organisation’s behalf – see section 3 below.
Contact Details
ID Cards and Lanyards
Email: hello@idcardsandlanyards.co.uk
Postal address: The Old Town Hall, 354 Mare Street, Hackney, E8 1HR
Telephone: 0203 026 0565
Please let us know if your personal information changes by emailing us at hello@idcardsandlanyards.co.uk
2. WHAT DATA WE COLLECT, PURPOSE AND LEGAL BASIS FOR PROCESSING
We may process the following categories of personal data about you:
- Communication Data: Any communication you send us. Processed to communicate with you, keep records and establish, pursue or defend legal claims. Our lawful ground is our legitimate interests to reply to communications, keep records and establish, pursue or defend legal claims.
- Customer Data: Data relating to purchases of goods/services such as your name, title, billing/delivery address, email, phone, contact details, purchase details and card details. Processed to supply goods/services purchased and keep records. Our lawful ground is performance of a contract and/or taking steps at your request to enter a contract.
- User Data: Data about how you use our website and online services. Processed to operate our website, provide relevant content, ensure security, maintain backups, and enable publication and administration. Our lawful ground is our legitimate interests to properly administer our website and business.
- Technical Data: Data about your use of our website and online services such as your IP, login data, browser details, page views, navigation paths, time zone settings and technology on devices used to access our website. Processed to analyse your website use, administer and protect our website and business, deliver relevant content and ads, and understand ad effectiveness. Our lawful ground is our legitimate interests to properly administer our website and business and grow our business and decide our marketing strategy.
- Marketing Data: Data about your preferences in receiving marketing from us and third parties and your communication preferences. Processed to enable participation in promotions, deliver relevant website content and ads, and measure ad effectiveness. Our lawful ground is our legitimate interests to study how customers use our products/services, develop them, grow our business and inform our marketing strategy.
- Reviews Data: Data relating to a specific order including your name and email. Processed to collect feedback on products and services to ensure customer satisfaction. Our lawful ground is our legitimate interests to ensure your order met your requirements.
We do not collect any Sensitive Data about you. We will only use your personal data for the purpose it was collected or a reasonably compatible purpose. We may process your personal data without your knowledge or consent where required or permitted by law. We do not carry out automated decision making or profiling.
3. BUSINESS AND ORGANISATIONAL ORDERS – CLIENT-SUPPLIED DATA
Where a business or organisation supplies us with personal data about its staff, members or service users (such as names, photographs, job titles or ID numbers) for the purpose of producing cards, that organisation is the data controller and we act as a data processor on its instructions.
We use this data only to produce the cards ordered and for no other purpose. Data may be submitted through our secure online portal or by email; we recommend the portal. Access to this data is restricted to staff involved in producing the order, all of whom are subject to obligations of confidentiality. Data is stored and processed in the United Kingdom.
Photographs and personal information supplied for printing are automatically deleted from our systems within 90 days of the order. Clients may instruct us in writing to delete data sooner, or to retain it for reprints, and we will act on that instruction.
We never use real cardholder photographs or names in our marketing. Where we show examples of card designs on our website or social media, all photographs, names and other personal details are replaced with placeholder images and fictional details.
If your card was ordered by an organisation on your behalf and you wish to exercise your data protection rights, please contact that organisation in the first instance. We will assist the organisation with any such request.
A data processing agreement setting out these terms in full is available to clients on request.
4. HOW WE COLLECT YOUR PERSONAL DATA
We may collect data by you providing it directly (e.g. filling in forms or sending emails). We may collect data automatically as you use our website via cookies and similar technologies (see our cookie policy for details). We may receive data from third parties such as analytics providers, ad networks, search information providers, technical/payment/delivery services, and public sources.
5. MARKETING COMMUNICATIONS
Our lawful ground for processing your personal data to send marketing communications is either your consent or our legitimate interests to grow our business. Under Privacy and Electronic Communications Regulations, we may send you marketing communications if (i) you made a purchase or requested information from us about our goods or services or (ii) you agreed to receive marketing communications and have not opted out. We will get your express consent before sharing your personal data with third parties for marketing. You can opt-out of marketing by following opt-out links on any marketing message or emailing us at hello@idcardsandlanyards.co.uk. Opting out does not apply to personal data provided as part of other transactions like purchases.
6. DISCLOSURES OF YOUR PERSONAL DATA
We may share your personal data with:
- Service providers for IT and system administration
- Professional advisers including lawyers, bankers, auditors and insurers
- Government bodies that require reporting of processing activities
- Marketing, website and online support services
- Couriers to deliver orders
- Third parties to whom we sell, transfer, or merge parts of our business or assets
We require all third parties to respect the security of your personal data and treat it in accordance with the law. We only allow them to process your data for specified purposes and in accordance with our instructions. We do not pass client-supplied print data (see section 3) to any third-party printer or supplier.
7. INTERNATIONAL TRANSFERS
Client-supplied print data (see section 3) is stored and processed in the United Kingdom.
Some of the service providers we use for our website, email and business administration may be based outside the United Kingdom. Whenever we transfer personal data outside the UK, we ensure a similar degree of protection by ensuring at least one of the following safeguards is in place:
- The transfer is to a country covered by UK adequacy regulations, which the UK Government has determined provides an adequate level of protection for personal data
- The transfer is made under the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, which give personal data the same protection it has in the UK
- Where we use providers based in the US, the provider is certified under the UK Extension to the EU-US Data Privacy Framework
If none of these safeguards are available, we may request your explicit consent to the transfer. You can withdraw this consent at any time.
8. DATA SECURITY
We have security measures in place to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. Client-supplied print data is held on our secure online portal, hosted in the United Kingdom, and is subject to the access restrictions and automatic deletion described in section 3. We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if legally required.
9. DATA RETENTION
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. To determine the retention period, we consider the amount, nature, and sensitivity of the personal data; the potential risk of harm from unauthorised use or disclosure; the purposes for which we process your personal data and whether we can achieve those purposes through other means; and the applicable legal requirements.
Client-supplied print data (photographs and personal information supplied for producing cards) is automatically deleted within 90 days of the order unless the client instructs us otherwise in writing, as described in section 3.
For tax purposes, the law requires us to keep basic customer information for six years after they stop being customers. In some circumstances we may anonymise your personal data for research or statistical purposes, in which case we may use it indefinitely without further notice to you.
10. YOUR LEGAL RIGHTS
Under data protection laws you have rights including:
- Right of access to your personal data
- Right to rectification if data is inaccurate
- Right to erasure (‘right to be forgotten’)
- Right to restrict processing
- Right to data portability
- Right to object to processing
To exercise any of your rights, please email us at hello@idcardsandlanyards.co.uk. If your card was ordered by an organisation on your behalf, please contact that organisation first; we will assist them with your request.
You will not have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. We may need specific information from you to confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure. We may also contact you for more information to speed up our response.
We try to respond to all legitimate requests within one month. It may take us longer if your request is particularly complex or you have made multiple requests. We will notify you in this case.
If you are not satisfied with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would appreciate the chance to address your concerns before you approach the ICO, so please contact us first.
11. THIRD-PARTY LINKS
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
12. COOKIES
You can set your browser to refuse some or all browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see our Cookie Policy on our website.
