Privacy Policy

Last updated: 15 July 2026

This Privacy Policy explains how NomadUK Limited, trading as NomadUK Designs (“NomadUK”, “we”, “us” or “our”), collects, uses, stores and shares personal information when you:

  • visit https://www.nomaduk.com;
  • create an account;
  • use our online design tools;
  • upload photographs, artwork or other content;
  • contact us;
  • place an order; or
  • otherwise use our products and services.

1. Who we are

NomadUK Limited is the data controller responsible for the personal information covered by this Privacy Policy.

Legal name: NomadUK Limited
Trading name: NomadUK Designs
Company number: 15676372
Registered office: 143 Henthorn Road, Clitheroe, BB7 2QF
Email: contact@nomaduk.com
Website: https://www.nomaduk.com

For questions about this Privacy Policy or how we use your personal information, please contact us using the email address above.

2. Personal information we collect

Depending on how you use our website and services, we may collect the following information.

Identity and contact information

This may include:

  • your name;
  • email address;
  • telephone number;
  • billing address;
  • delivery address;
  • account login and profile information.

Order and transaction information

This may include:

  • products ordered;
  • quantities and sizes;
  • personalisation details;
  • prices and discounts;
  • delivery choices;
  • order status;
  • payment status;
  • refund and transaction records;
  • customer service and complaint records.

Customer-uploaded content

This may include:

  • photographs;
  • images;
  • logos;
  • artwork;
  • text;
  • names and dates;
  • design files;
  • designs created using our online design tool;
  • proof and mock-up approval records.

Communications

This may include:

  • messages and enquiries;
  • emails;
  • customer service correspondence;
  • design or mock-up requests;
  • complaints and refund requests;
  • feedback or reviews sent directly to us.

Technical and usage information

This may include:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • approximate location derived from an IP address;
  • pages visited;
  • website activity;
  • login and security information;
  • cookie identifiers;
  • analytics information, where permitted.

Marketing information

This may include:

  • your marketing preferences;
  • newsletter subscription status;
  • records of consent;
  • unsubscribe and opt-out requests.

3. How we collect personal information

We may collect personal information:

  • directly from you when you create an account, place an order, upload a design, contact us or subscribe to marketing;
  • automatically when you use our website, subject to your cookie choices;
  • from payment providers when they confirm or process a transaction;
  • from postal operators and delivery providers in connection with tracking, delivery or returned parcels;
  • from marketplaces or sales platforms where you place an order through one of our authorised sales channels;
  • from fraud-prevention, website-security or technical service providers;
  • from publicly available sources where this is necessary and lawful.

4. How and why we use personal information

We will only use personal information where we have a lawful basis for doing so.

Processing and fulfilling orders

We use your identity, contact, order, delivery and personalisation information to:

  • accept and process your order;
  • produce personalised products;
  • prepare proofs or mock-ups;
  • take or confirm payment;
  • package and dispatch products;
  • provide delivery updates;
  • issue refunds or replacements.

Our lawful basis is that this processing is necessary to enter into or perform a contract with you.

Providing our design tools

We use photographs, artwork, wording and other content you upload or create through our website and Lumise design tool to:

  • display your design;
  • save your design where the tool allows;
  • generate previews or proofs;
  • produce your personalised product;
  • provide related customer support;
  • arrange a replacement or reprint.

Our lawful basis is performance of our contract with you.

Customer service

We use your contact details, correspondence, order records and uploaded content to:

  • respond to enquiries;
  • help with designs;
  • investigate delivery problems;
  • resolve complaints;
  • process refunds, replacements or reprints;
  • defend or respond to payment disputes and chargebacks.

Our lawful basis is performance of our contract with you and our legitimate interests in providing customer service, resolving disputes and protecting our business.

Payments

Payments are handled by third-party payment providers such as Stripe, PayPal or other gateways available at checkout.

We receive payment confirmation and may receive limited transaction information, but we do not store your full payment-card details on our servers.

Our lawful bases are:

  • performance of our contract with you;
  • compliance with legal obligations; and
  • our legitimate interests in processing payments and preventing financial loss.

Fraud prevention and website security

We may use account, transaction, device and technical information to:

  • identify suspicious transactions;
  • prevent fraud and misuse;
  • secure customer accounts;
  • detect malicious activity;
  • protect our website and systems;
  • investigate security incidents.

Our lawful bases are our legitimate interests in protecting customers, maintaining website security and preventing fraud, together with compliance with any applicable legal obligations.

Legal, tax and accounting requirements

We use and retain relevant order, invoice, transaction and communication records to comply with:

  • tax requirements;
  • accounting requirements;
  • consumer protection law;
  • legal claims;
  • regulatory obligations;
  • lawful requests from public authorities.

Our lawful basis is compliance with a legal obligation.

Improving our website and services

Where permitted, we may analyse website use, technical performance, orders and customer feedback to:

  • understand how our website is used;
  • identify errors;
  • improve website performance;
  • improve our products and services;
  • understand general customer demand.

Our lawful basis is our legitimate interests in operating and improving our business.

Where consent is required for analytics cookies or similar technology, we will rely on your consent before using those technologies.

Marketing

We may use your name, email address and marketing preferences to send information about our products and services where:

  • you have agreed to receive marketing; or
  • the law otherwise permits us to contact existing customers about similar products and services.

You can unsubscribe at any time by:

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

5. Information required to place an order

Some personal information is required for us to accept and fulfil an order.

This normally includes:

  • your name;
  • contact details;
  • delivery address;
  • order information;
  • personalisation details;
  • payment confirmation.

If you do not provide this information, we may be unable to process your order or provide the requested product or service.

6. Customer photographs, designs and artwork

Our website may allow you to upload photographs, artwork, logos, text and other material or to create a design using the Lumise design tool.

We may use this content to:

  • display and save your design;
  • create a preview, proof or mock-up;
  • produce your personalised product;
  • perform necessary image preparation or adjustment;
  • answer questions about your design;
  • investigate complaints;
  • arrange replacements or reprints;
  • respond to payment disputes or legal claims.

You must only upload material that you have the right and permission to use.

Where an image contains identifiable people, you should ensure that you have their permission to provide and use the image where appropriate.

You should avoid uploading highly sensitive material unless it is necessary for the product you are ordering.

We do not claim ownership of your photographs, designs or artwork merely because they are uploaded to our website.

You give us limited permission to store, copy, resize, adjust, reproduce and print the submitted content only where reasonably necessary to provide the requested service, fulfil your order, provide support or resolve a related dispute.

We will not use a customer’s personal photographs or designs for advertising, social media, product listings or unrelated promotional purposes without separate permission.

7. Sensitive information contained in images

We do not normally ask customers to provide special-category personal information.

However, a photograph, design or message may sometimes reveal information about a person’s:

  • health;
  • racial or ethnic origin;
  • religious beliefs;
  • sexual orientation;
  • political opinions;
  • disability;
  • other sensitive personal circumstances.

Please only provide this information where it is necessary for your order and where you have the authority or permission to do so.

We will use such content only as reasonably necessary to produce the requested item, provide related support or comply with legal obligations.

8. Children’s information

Our website and purchasing services are intended for adults who are able to enter into a purchase contract.

A parent, guardian or other authorised adult should place any order involving photographs, names or other personal information relating to children.

We do not knowingly use photographs of children for advertising, social media or promotional purposes without appropriate permission.

9. Cookies and similar technologies

Our website uses cookies and similar technologies to:

  • operate the website;
  • remember shopping baskets;
  • support customer accounts;
  • provide checkout functionality;
  • operate the design tool;
  • maintain website security;
  • remember cookie preferences;
  • measure website usage, where permitted;
  • support advertising or marketing, where permitted.

Strictly necessary cookies may be used without consent where they are required to provide a service requested by you or to maintain website security.

Where required by law, we will request your consent before using non-essential cookies or similar technologies, including certain analytics and marketing technologies.

You can accept, reject or manage non-essential cookies through the cookie controls provided on our website.

You can also control cookies through your browser settings. However, disabling essential cookies may prevent parts of the website, account system, basket, checkout or design tool from working correctly.

Further details are provided in our Cookie Policy. You can manage non-essential cookies using the cookie banner or the Cookie settings control on the website.

10. Who we share personal information with

We may share personal information with trusted organisations that help us operate our business and fulfil orders.

These may include:

  • website hosting providers;
  • WordPress and WooCommerce service providers;
  • website plugin and technical providers;
  • the Lumise design platform and related service providers;
  • payment processors such as Stripe and PayPal;
  • banks and financial service providers;
  • Royal Mail, couriers and other delivery providers;
  • email and communication service providers;
  • customer support providers;
  • analytics providers, where permitted;
  • website security and fraud-prevention providers;
  • cloud storage and backup providers;
  • accountants, insurers, legal advisers and IT specialists;
  • HM Revenue & Customs;
  • courts, regulators, law-enforcement organisations and public authorities where required by law.

We provide these organisations only with the information reasonably necessary for them to perform their services.

Some providers process information on our behalf. Other organisations, including payment processors and delivery companies, may act as separate data controllers for some of the information they receive. Their own privacy policies may apply to their use of that information.

We do not sell personal information.

11. International transfers

Some of our service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that a lawful transfer mechanism and appropriate safeguards are in place.

These safeguards may include:

  • transferring information to a country covered by UK adequacy regulations;
  • using the UK International Data Transfer Agreement;
  • using the UK Addendum to approved contractual clauses;
  • relying on another transfer mechanism permitted under UK data protection law.

You may contact us for more information about the safeguards used for relevant international transfers.

12. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, customer service, fraud-prevention and dispute-resolution purposes.

Our normal retention periods are set out below.

Order, invoice and accounting records

We normally retain order, invoice, payment and accounting records for at least six years after the end of the relevant financial year, or for longer where required by law.

Customer photographs, artwork and completed order designs

Customer-uploaded photographs, artwork, designs and associated production files connected to a completed order are normally retained for up to six years after the order is completed.

We retain these files so that we can:

  • provide customer support;
  • identify what was ordered and approved;
  • arrange repeat orders, replacements or reprints;
  • investigate complaints;
  • respond to payment disputes and chargebacks;
  • establish, exercise or defend legal claims.

Keeping a file does not give us permission to use it for advertising, social media or unrelated promotional purposes.

A customer may ask us to delete a reusable image or artwork file earlier. We will consider the request and delete the file where we no longer have a valid legal or business reason to retain it.

We may still retain limited order records, proof records or evidence necessary to meet legal, accounting or dispute-resolution requirements.

Draft designs and abandoned uploads

Designs and files not connected to a completed order are normally deleted within 12 months of the last meaningful activity.

They may be deleted sooner where they are no longer required.

Customer service correspondence

Customer service messages, order correspondence, proof approvals and complaint records are normally retained for up to six years after the relevant order or issue is completed.

Customer accounts

Account information is normally retained while the account remains active and for a reasonable period afterwards.

You may ask us to close your account. We may retain information linked to completed orders where this is required for accounting, legal, fraud-prevention or dispute-resolution purposes.

Marketing records

Marketing contact information is retained until you unsubscribe, withdraw consent or we determine that it is no longer appropriate to contact you.

We may retain a limited suppression record after you unsubscribe so that we can ensure that we do not send further marketing messages to that address.

Technical and security logs

Technical, login, fraud-prevention and security records are retained for a period appropriate to their purpose.

They may be kept longer where they are relevant to an active security incident, fraud investigation, legal claim or regulatory matter.

Complaints, chargebacks and legal claims

Information relevant to an active complaint, payment dispute, chargeback, investigation or legal claim may be retained until the matter is fully resolved and for any additional period reasonably required by law.

Backups

Deleted information may remain temporarily within secure backups until those backups are overwritten or reach the end of their normal retention cycle.

We will not normally restore deleted information from a backup except where required for disaster recovery, security or legal reasons.

We will periodically review the information we hold and delete or anonymise it where it is no longer required.

13. Your data protection rights

Depending on the circumstances, you may have the right to:

  • request access to personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete personal information;
  • ask us to restrict how we use personal information;
  • object to processing based on legitimate interests;
  • object to direct marketing at any time;
  • request certain information in a portable, machine-readable format;
  • withdraw consent where processing is based on consent;
  • complain about how we have handled your information.

These rights are not absolute and may be subject to legal exceptions.

For example, we may need to retain order, tax and accounting records even after receiving a deletion request.

To exercise your rights, email contact@nomaduk.com.

Please describe your request clearly. We may ask for reasonable information to confirm your identity before acting on it.

We will normally respond within one month. The law may allow us additional time where a request is particularly complex or where several requests have been made.

14. Complaints

Please contact us first if you have concerns about how we use your personal information. We will try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

15. Automated decision-making

We do not currently make decisions that have legal or similarly significant effects on customers solely through automated processing.

Automated systems may help us, our payment providers or our security providers identify transactions or activity that appear fraudulent, abusive or suspicious.

Where appropriate, an order or account may be reviewed before further action is taken.

16. Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • accidental loss;
  • unauthorised access;
  • misuse;
  • alteration;
  • destruction;
  • unlawful disclosure.

These measures may include access controls, account security, secure hosting, encrypted connections, software updates, backups and monitoring.

However, no website, storage system or internet transmission can be guaranteed to be completely secure.

You are responsible for keeping your account password confidential and should contact us if you believe that your account has been accessed without permission.

17. Third-party websites

Our website may contain links to third-party websites, payment providers, social media platforms or other services.

We are not responsible for the privacy practices of those third parties.

You should review the relevant third-party privacy policy before providing personal information to them.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • our website;
  • our products and services;
  • our service providers;
  • our business practices;
  • legal or regulatory requirements.

The current version will be published on this page with the date it was last updated.

Where appropriate, significant changes may also be communicated through the website or by email.