Privacy Policy

MegaSliders ("we", "us", "our") makes personalised, laser-cut wooden medal sliders, sold at megasliders.co.uk (the "Site"). We are the data controller for the personal data described in this policy.

Contact: hello@capitalwebsystems.co.uk.

We collect the personal data you give us directly, and a small amount collected automatically:

• Contact details: name, email address, delivery address, phone number if you give one.
• Order details: the design you create — shape, colour, the name/text you ask us to engrave, and any logo image you upload.
• Payment information: handled entirely by our payment processor, Stripe. We never see or store your card details.
• Account details, if you create one: your email and authentication data, handled by our database provider, Supabase.
• Technical data: IP address, browser type and pages visited, collected automatically for security and to keep the Site working.

• To fulfil your order — to make, engrave, package and deliver your slider, and to contact you about it. (Necessary to perform our contract with you.)
• To take payment — passed securely to Stripe to process. (Necessary to perform our contract with you.)
• Customer service — responding to questions or issues about an order. (Legitimate interest in supporting our customers.)
• Security and fraud prevention — keeping the Site and our systems safe. (Legitimate interest.)
• Order confirmation and receipt emails — sent automatically when you place an order. (Necessary to perform our contract.)

We do not use your data for marketing emails unless you separately opt in, and we do not sell your personal data.

If you upload a club, charity or company logo to be engraved, we store it only for as long as needed to produce and dispatch your order (and briefly afterwards for order records), and use it solely to make your product. You confirm you have the right to use any image you upload — see our Terms of Service.

We share personal data only with the services that help us run MegaSliders, each acting as our processor:

• Stripe — payment processing.
• Supabase — our database and account authentication provider.
• Resend — sends order confirmation emails.
• Our hosting provider — runs the Site.
• Delivery couriers — receive your name and delivery address to get your order to you.

We do not share your data with anyone else, and we never sell it.

We keep order records, including the design and delivery details, for as long as needed to fulfil the order, handle any warranty or dispute, and meet our accounting and tax obligations (in the UK, typically up to 6 years after the end of the relevant tax year). If you create an account and don't use it, we may delete it after a period of inactivity.

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you, and get a copy of it.
• Ask us to correct inaccurate data.
• Ask us to delete your data, where we're not required to keep it (e.g. for accounting).
• Ask us to restrict or object to certain processing.
• Ask for your data in a portable format.

To exercise any of these, email hello@capitalwebsystems.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've mishandled your data.

The Site uses only the cookies/local storage strictly needed to make it work — for example, remembering your design while you build it and keeping you signed in. We don't currently use advertising or tracking cookies.

MegaSliders is intended for adults placing orders. We don't knowingly collect data from children, though a runner's first name may appear in a design a parent or guardian creates on their behalf.

We may update this policy from time to time — for example, if we add a new supplier or feature. We'll update the date at the top when we do.