Privacy policy

Last updated: October 2026

1. Who we are

This website, redfrogblack.co.uk ("RedFrogBlack Shop"), is operated by REDFROGBLACK LIMITED, a company registered in England and Wales under company number 16557982, with its registered office at Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole, England, BH16 6FA.

We are the controller of the personal information described in this policy. If you have any question about it, email us at info@redfrogblackart.com.

2. The short version

We collect what we need to take your order, deliver it, look after you afterwards and — only if you ask — send you our newsletter.
We never sell your personal information.
We share it only with the companies that help us run the shop (for example Shopify, which hosts the store, and Printful, which prints and posts your order).
You can ask to see, correct or delete your information at any time.

3. What we collect

Category	Examples	Where it comes from
Contact and delivery details	Name, email, phone, billing and delivery address	You, at checkout or when you contact us
Order details	What you bought, when, order value, returns	Your use of the shop
Payment details	Card type, last four digits, payment status. We never see or store your full card number — payments are processed by our payment providers	Payment providers
Account details (if you create an account)	Login email, saved addresses, order history	You
Communications	Emails and contact-form messages	You
Marketing preferences	Whether you've subscribed to our newsletter	You
Device and usage information	IP address, browser, device type, pages viewed, approximate location, referral source — collected through cookies and similar technologies (see section 9)	Your device, with your consent where required

We don't knowingly collect information from children under 13. Our products are suitable for children, but orders should be placed by an adult.

4. How we use it, and our legal basis (UK GDPR)

Purpose	Legal basis
Processing and delivering your order, handling returns and refunds	Contract — we need it to do what you've asked
Customer service and answering your messages	Contract / legitimate interests (looking after customers properly)
Preventing fraud and keeping the shop secure	Legitimate interests and legal obligation
Keeping accounting and tax records	Legal obligation
Sending our newsletter and marketing emails	Consent — you can withdraw at any time with the unsubscribe link
Analytics to understand how the site is used	Consent where required by law

5. Who we share it with

We share personal information only with service providers who help us run the shop, under contracts that require them to protect it:

Shopify — e-commerce platform, hosting, checkout and payments (Shopify Payments). See shopify.com/legal/privacy.
Printful — prints, packs and ships your order. They receive your name, delivery address, order contents and, where needed for delivery, your email or phone. See printful.com/policies/privacy.
Delivery carriers (e.g. Royal Mail, DPD, Evri or others chosen by Printful) — to deliver your parcel.
Payment providers — Shopify Payments (cards, Shop Pay, Apple Pay and Google Pay) and Klarna, if you choose to pay with Klarna.
Email marketing — Shopify Messaging (Shopify Email), only if you subscribe to our newsletter.
Analytics — Shopify's built-in store analytics. We don't use Google Analytics or any advertising pixels (such as Meta or TikTok). Printful also runs a Shopify web pixel to support order fulfilment.
Professional advisers and authorities — accountants, lawyers, HMRC or law enforcement where the law requires it.

We never sell your personal information.

6. International transfers

Some of our providers process data outside the UK (for example Shopify in Canada and the US, and Printful in the US and the EU). Where that happens, transfers are protected by UK adequacy regulations, the UK International Data Transfer Agreement/Addendum, or equivalent safeguards.

7. How long we keep it

Order and accounting records: 6 years from the end of the financial year they relate to (HMRC requirement).
Customer-service messages: for as long as we need to deal with your message and any follow-up.
Newsletter data: until you unsubscribe, then a minimal suppression record so we don't email you again.
Cookie data: see section 9.

8. Your rights

Under UK data-protection law you have the right to: access the information we hold about you; correct it; ask us to delete it; restrict or object to how we use it; data portability; and withdraw consent at any time (this doesn't affect anything we did before you withdrew).

To use any of these rights, email info@redfrogblackart.com. We'll respond within one month. There's no charge.

If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113.

9. Cookies

We use cookies and similar technologies. Essential cookies keep the shop and checkout working. Analytics cookies are used only with your consent where the law requires it. We don't use advertising cookies. You can delete or block cookies in your browser settings, but blocking essential cookies will stop the bag and checkout working.

10. Security

The shop runs on Shopify, which is certified PCI DSS Level 1 for card payments and encrypts data in transit. Access to customer data on our side is limited to the people who need it.