Privacy policy

SteadyFrame Privacy Policy

Last updated: 28th August 2026

SteadyFrame ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you visit steadyframe.co.uk (the "Site") or make a purchase from us, and sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Site, you agree to the collection and use of information in accordance with this policy.

1. Who we are

SteadyFrame is a sole trader business based in the United Kingdom, trading through steadyframe.co.uk. For the purposes of data protection law, SteadyFrame is the "data controller" of the personal data described in this policy.

Contact details:

Email: info.steadyframe@gmail.com

2. What personal data we collect

We collect the following categories of personal data:

Information you give us directly:

Name

Email address

Postal/delivery address

Phone number (where provided)

Payment information, processed securely by our payment provider (see Section 5). We do not store your full card details ourselves

Order history and purchase details

Any information you provide when contacting us (e.g. via email or a contact form), including the content of your message

Information collected automatically:

IP address

Browser type and device information

Pages visited, time spent on the Site, and referring website

Cookie data (see Section 7)

Information from third parties:

Order and delivery status updates from our fulfilment partners

Payment confirmation from our payment processor

We do not knowingly collect any special category data (such as health data, racial or ethnic origin, or religious beliefs) about you.

3. How we use your personal data

We use your personal data for the following purposes, and only where we have a valid legal basis to do so:

We process and fulfil your order, and communicate with you about it (confirmations, shipping updates, customer service), on the legal basis that this is necessary to perform our contract with you. We process payments and take steps to prevent fraud on the same basis, and where required, to comply with our legal obligations. Where you have given us your consent, we send you marketing emails about products, offers, or promotions, and you can withdraw this consent at any time by clicking "unsubscribe" in any email we send you, or by emailing us directly. We rely on our legitimate interests to improve our Site, products, and customer experience. Where you have given consent through our cookie preferences, we analyse Site traffic and advertising performance. Finally, we process personal data where necessary to comply with our legal and tax obligations.

4. How we collect your data

We collect data when you:

Browse our Site

Create an account or place an order

Sign up to our email list

Contact us by email or through the Site

Interact with our marketing emails (opens, clicks)

Interact with our advertising on third-party platforms (see Section 8)

5. Who we share your data with

We share your personal data with the following categories of third party, only to the extent necessary for them to provide their service to us:

Shopify: our e-commerce platform provider, which hosts the Site and processes orders on our behalf.

Payment processors (including Shopify Payments): to process your payment securely. We do not see or store your full card details.

Fulfilment and dropshipping partners (including EPROLO and other suppliers): to pack and ship your order directly to you. This means your name, delivery address, and order details are shared with the relevant supplier for the purpose of fulfilling your order.

Email marketing platform (Klaviyo): to send order confirmations and, where you have consented, marketing emails.

Advertising platforms (such as Meta/Facebook and TikTok): where you have consented to marketing cookies, to measure and improve the performance of our advertising.

Analytics providers (such as Google Analytics): to help us understand how visitors use our Site.

Professional advisers and authorities: such as our accountant, or law enforcement/regulatory bodies, where we are legally required to do so.

We do not sell your personal data to third parties.

6. International data transfers

Some of our fulfilment partners and suppliers are located outside the UK and European Economic Area, including in Hong Kong and mainland China. Where your personal data is transferred to a country outside the UK, we take steps to ensure it is protected to a standard consistent with UK data protection law, including relying on the service providers' own compliance frameworks and, where applicable, standard contractual clauses.

By placing an order with us, you understand that your name, delivery address, and order details will be shared internationally with the supplier fulfilling your specific order, as this is necessary to deliver your product to you.

7. Cookies

Our Site uses cookies and similar technologies to:

Enable core Site functionality (such as your shopping cart)

Remember your preferences

Understand how visitors use the Site (analytics cookies)

Deliver and measure the performance of our advertising (marketing cookies)

You can control or disable non-essential cookies through the cookie banner on our Site, or through your browser settings. Disabling essential cookies may affect the Site's functionality, such as your ability to complete a purchase.

8. Advertising and tracking technologies

We use advertising pixels (such as the Meta Pixel and TikTok Pixel), where you have consented to marketing cookies, to understand which of our adverts led you to our Site and to show you relevant adverts on those platforms. These platforms may combine information from our Site with other information they hold about you in accordance with their own privacy policies. We encourage you to review Meta's and TikTok's respective privacy policies for further detail on how they process this data.

9. Data retention

We retain your personal data for as long as necessary to fulfil the purposes set out in this policy, including:

Order and transaction data: retained for as long as required by UK tax law (currently six years from the end of the relevant accounting period).

Marketing data: retained until you unsubscribe or withdraw consent.

Account data: retained for as long as your account remains active, or as required to resolve disputes or enforce our agreements.

When personal data is no longer needed, we securely delete or anonymise it.

10. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you.

Right to rectification: to have inaccurate or incomplete data corrected.

Right to erasure: to request that we delete your personal data, in certain circumstances.

Right to restrict processing: to request that we limit how we use your data, in certain circumstances.

Right to data portability: to request your data in a portable, machine-readable format.

Right to object: to object to our processing of your data, including for direct marketing purposes.

Right to withdraw consent: where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at info.steadyframe@gmail.com. We will respond within one month, as required by law.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

11. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. This includes relying on Shopify's PCI-DSS compliant infrastructure for payment processing and using secure connections (HTTPS) across the Site. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Children's privacy

Our Site and products are intended for adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. The "Last updated" date at the top of this page will indicate when the policy was last revised. We encourage you to review this policy periodically.

14. Contact us

If you have any questions about this policy or how we handle your personal data, please contact us at:

Email: info.steadyframe@gmail.com