Last updated: 16 September 2026

1. Who we are

Makeitforme is the controller of personal data used to operate the online store at https://makeitforme.store. This means we decide why and how personal data is used.

• Website: https://makeitforme.store
• Email: support@makeitforme.store
• Telephone: +44 7537 130260
• Postal address: 10 Scott Ave, Liverpool L36 0TT, United Kingdom

For privacy questions or rights requests, email support@makeitforme.store with “Privacy Request” in the subject line.

2. Scope

This notice applies when you visit our website, create or use an account, place or receive an order, contact customer support, subscribe to marketing, submit a review, or otherwise interact with Makeitforme. It does not govern independent third-party websites or services that have their own privacy notices.

3. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity and contact data, such as your name, billing and delivery address, email address, and telephone number.
• Account data, such as username, encrypted password credentials, saved addresses, preferences, and account activity.
• Order and transaction data, such as products ordered, amount paid, discounts, payment status, delivery method, tracking information, returns, refunds, and correspondence. We normally receive payment confirmation and limited payment details, not your complete card number.
• Technical and usage data, such as Internet Protocol address, device and browser type, operating system, referral source, pages viewed, approximate location derived from the Internet Protocol address, identifiers, cookie choices, and website interactions.
• Marketing and communications data, such as subscription status, campaign interactions, preferences, survey responses, and competition entries.
• Customer-service and content data, such as emails, messages, call notes, photographs supplied for a claim, reviews, and other content you choose to provide.
• Fraud and security data, such as risk indicators, login history, suspicious-transaction information, and information needed to verify an order or rights request.

Please do not send sensitive personal data unless it is necessary and we specifically request it.

4. How we collect personal data

We collect data directly from you when you complete checkout, create an account, contact us, subscribe, or submit content. We collect technical data automatically through website logs, cookies, pixels, and similar technologies. We may also receive data from payment providers, fraud-prevention providers, couriers, website and hosting providers, analytics services, marketing platforms, authentication providers, and publicly available sources where lawful.

5. Why we use personal data and our lawful bases

We use personal data for the following purposes:

• To take steps at your request and perform our contract, including processing payment, accepting and fulfilling orders, arranging delivery, providing tracking, managing accounts, handling returns and refunds, and supplying customer support.
• To comply with legal obligations, including tax and accounting records, consumer-law duties, product-safety responsibilities, law-enforcement requests, sanctions requirements, and data-protection rights.
• For our legitimate interests, where those interests are not overridden by your rights. These interests include securing the website, preventing fraud, improving services, managing stock, responding to enquiries, keeping proportionate business records, understanding store performance, and establishing or defending legal claims.
• With consent, including non-essential cookies, certain analytics or advertising technologies, and electronic marketing where consent is required. You may withdraw consent at any time without affecting earlier lawful processing.

Where we rely on legitimate interests, you may ask us about the balancing assessment relevant to your data.

6. Orders and payment

We use order information to process your purchase, communicate about it, prevent fraud, deliver the goods, provide after-sales support, and meet record-keeping duties. Payment is processed by the methods displayed at checkout, which may include PayPal, card processors, Apple Pay, or Google Pay where enabled. Payment providers act under their own privacy notices for parts of their processing.

We do not intentionally store complete payment-card numbers or security codes on our own website systems. Payment providers may send us limited information such as payment status, card type, transaction reference, account email, or the last digits of a card.

7. Cookies, analytics, and advertising

We use necessary technologies to operate the cart, checkout, security, account, and preferences. With consent where required, we may use analytics and marketing technologies, including Google services, to understand website use, measure campaigns, and improve performance. Our Cookie Policy provides more detail and explains how to manage choices.

8. Marketing

We may send marketing if you asked to receive it or another lawful basis permits it. Marketing tools may include email services such as Mailchimp or Hostinger Reach where enabled. You can unsubscribe using the link in a message or by contacting support@makeitforme.store.

Opting out of marketing does not stop service messages about an order, account, security matter, return, or legal notice. We may keep minimal suppression data to respect an unsubscribe request.

9. Who receives personal data

We share only what is reasonably necessary with recipients such as:

• website, ecommerce, hosting, storage, security, and technical-support providers, including WordPress, WooCommerce, Hostinger, and Jetpack features where enabled;
• payment, banking, fraud-prevention, and identity-verification providers, including PayPal and card-processing partners where selected;
• postal, courier, fulfilment, and delivery providers;
• email, customer-service, review, analytics, advertising, and marketing providers, including Google, Mailchimp, or Hostinger Reach where enabled and permitted;
• professional advisers such as accountants, insurers, auditors, and legal advisers;
• manufacturers, distributors, or authentication providers where needed to investigate an authenticity, warranty, or product issue; and
• courts, regulators, tax authorities, law-enforcement bodies, and other authorities where disclosure is required or legally permitted.

If our business or assets are reorganised, sold, financed, or transferred, relevant data may be disclosed under appropriate confidentiality and legal safeguards.

We do not sell personal data for money.

10. International transfers

Some providers may process personal data outside the United Kingdom. Where the destination does not have United Kingdom adequacy regulations, we use an approved safeguard where required, such as the United Kingdom International Data Transfer Agreement, the United Kingdom Addendum to approved standard contractual clauses, or another lawful transfer mechanism. You may contact us for information about the relevant safeguard.

11. Retention

We keep personal data only as long as reasonably necessary for the purpose collected, including legal, accounting, security, and dispute-resolution needs. Typical periods are:

• order, payment-status, return, and accounting records: up to six years after the transaction or the end of the relevant accounting period, unless a longer period is required;
• account data: while the account is active and normally up to two years after inactivity or closure, except data that must be retained with transaction records;
• customer-service records and claim evidence: normally up to two years after the matter closes, or longer where a dispute or legal duty requires it;
• marketing records: until you opt out, the purpose ends, or the data is no longer accurate, with minimal suppression information retained to respect an opt-out; and
• technical, security, analytics, and cookie data: for the period needed for security or the duration described in our Cookie Policy or the relevant provider settings.

We may anonymise data so it no longer identifies you and use the anonymous information for statistics or service improvement.

12. Security

We use proportionate technical and organisational safeguards designed to protect personal data, including access controls, encrypted connections, security monitoring, backups, provider due diligence, and payment processing by specialist providers. No online system is completely secure. Please use a strong unique password and contact us if you suspect account misuse.

13. Your data-protection rights

Depending on the circumstances, United Kingdom data-protection law may give you the right to:

• be informed about processing;
• request access to your personal data;
• ask us to correct inaccurate or incomplete data;
• ask us to erase data;
• ask us to restrict processing;
• object to processing based on legitimate interests or to direct marketing;
• receive certain data in a portable format and ask for transfer where technically feasible;
• withdraw consent at any time; and
• request safeguards relating to a decision based solely on automated processing that has legal or similarly significant effects.

These rights are not absolute and exceptions may apply. We may request proportionate information to verify your identity and authority. We normally respond within one month, although the law permits an extension for a complex or numerous request. We do not normally charge a fee, but the law permits a reasonable fee or refusal for a manifestly unfounded or excessive request.

14. Automated decision-making

Payment and fraud-prevention providers may use automated risk tools. We do not intend to make a solely automated decision that produces legal or similarly significant effects without appropriate safeguards. If an order is declined and you believe an automated assessment was involved, contact us and request a review.

15. Children

The store is not directed at children and a person must be at least 18 to place an order. We do not knowingly collect personal data directly from a child for independent use of the store. A parent or guardian who believes a child has provided data should contact us.

16. Third-party links

The website may link to independent websites, social networks, authentication services, or payment services. We do not control their processing. Please read their privacy notices before providing personal data.

17. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office, the United Kingdom supervisory authority:

• Information Commissioner’s Office website
• Telephone: 0303 123 1113
• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom

18. Changes to this notice

We may update this notice to reflect changes in law, technology, providers, or business practices. We will post the updated version and change the date at the top. Material changes may also be communicated through the website or by another appropriate method.