1. Who We Are
Eco Cups ("we", "us", "our") manufactures and supplies reusable, custom-printed cups in the UK. We are the data controller for personal data processed via festival-cup.co.uk and associated services.
Contact: sales@festival-cup.co.uk
2. What This Policy Covers
This policy explains how we collect, use, disclose, store, and protect your personal data when you:
- Browse our website or view our content
- Request a quote or place an order
- Sign up for marketing or contact our team
- Interact with our social channels or ads
3. Personal Data We Collect
- Identity & Contact: name, company, role, email, phone, billing and delivery address
- Order & Artwork: product selections, quantities, proofs, approval logs
- Payment: payer details and transaction references (processed by secure payment providers)
- Device & Usage: IP address, device type, browser, pages viewed, interactions, referral source
- Marketing Preferences: consent choices, unsubscribe status
4. How We Collect Data
- Directly from you via forms, quotes, emails, calls
- Automatically via cookies, analytics, and similar technologies
- From third-party tools used for payments, delivery, security, or analytics
5. How We Use Your Data
- Provide quotes, take and fulfil orders, arrange delivery
- Create, proof, and approve artwork; manage customer service
- Process payments and handle invoicing
- Operate, secure, and improve our website and services
- Send service communications about your orders
- Send marketing where permitted and manage your preferences
- Comply with legal, tax, and regulatory obligations
6. Lawful Bases (UK GDPR)
- Contract: to provide quotes, accept orders, supply goods and support
- Legitimate Interests: site security, fraud prevention, service improvement, B2B marketing relevance checks
- Consent: email marketing where required, optional cookies
- Legal Obligation: tax, accounting, and compliance records
7. Cookies & Similar Technologies
We use essential cookies to make the site work and optional analytics/marketing cookies to understand performance and improve user experience.
- Essential: security, session, cart, and preference storage
- Analytics: aggregated usage metrics (e.g., pages, conversions)
- Marketing: measuring campaign effectiveness
You can manage non-essential cookies via our cookie banner or your browser settings. For more detail, see our Cookie settings on the site.
8. Analytics & Marketing
We may use privacy-respecting analytics and advertising tools to understand site performance and the effectiveness of campaigns. Marketing emails are sent only with a valid lawful basis. You can opt out at any time via the unsubscribe link or by contacting us.
9. Sharing Your Data
We share personal data only with trusted providers to deliver our services, for example:
- Payment processors for secure transactions
- Couriers and logistics partners for delivery
- Printing and production partners for fulfilment
- IT, hosting, and analytics providers for secure operations
- Professional advisers and auditors for legal compliance
We do not sell your personal data.
10. International Transfers
Where data is transferred outside the UK/EEA, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.
11. Data Retention
We keep data only as long as necessary:
- Order and invoicing records: typically 6–7 years for tax and accounting
- Artwork and proofs: retained for reorders and quality records, then securely deleted or anonymised
- Marketing data: until you opt out or after a reasonable period of inactivity
12. Your Rights
Under UK GDPR you may have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase data where applicable
- Restrict or object to processing
- Data portability
- Withdraw consent for marketing at any time
To exercise your rights, contact sales@festival-cup.co.uk. You can also complain to the ICO (ico.org.uk).
13. Security
We implement technical and organisational measures to protect personal data, including access controls, encryption in transit where appropriate, least-privilege practices, and staff confidentiality obligations.
14. Children
Our services are not directed to children and we do not knowingly collect personal data from children.
15. Third-Party Links
Our website may link to third-party sites. We are not responsible for their privacy practices. Please review their policies.
16. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on this page with the effective date.
17. Contact Us
If you have any questions about this policy or how we handle your data, contact:
Email: sales@festival-cup.co.uk
Website: www.festival-cup.co.uk
