Privacy Policy
David Asch Design
Last updated: 29 August 2026
1. Introduction
David Asch Design (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, make a purchase, or otherwise interact with us, and explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies to customers in the United Kingdom, United States, Canada, Australia, New Zealand, and any other territory we serve.
2. Who We Are — The Data Controller
David Asch Design is the data controller responsible for your personal data.
- Business name: David Asch Design
- Location: United Kingdom
- Contact email: david@davidaschdesign.com
- Postal address: 7a Bishopric, Horsham, West Sussex, UK, RH12 1QA
If you have any questions about this policy or how we handle your data, please contact us using the details above.
3. What Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity data: name, title, username
- Contact data: billing address, delivery address, email address, telephone number
- Order data: details of products purchased, order value, order history
- Financial data: payment card details or payment confirmation (processed securely by our payment provider — we do not store full card details ourselves)
- Technical data: IP address, browser type and version, device information, time zone setting, operating system
- Usage data: information about how you use our website, products, and services
- Marketing and communications data: your preferences in receiving marketing from us and your communication preferences
- Account data: login details, if you create an account with us
4. How We Collect Your Data
We collect data directly from you when you:
- Browse our website
- Create an account
- Place an order
- Contact us with an enquiry
- Subscribe to a newsletter or marketing communications
- Complete a survey or provide feedback
We may also collect technical data automatically through cookies and similar technologies (see Section 10).
5. Legal Basis and Purposes for Processing
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Processing and fulfilling your order | Identity, contact, order, financial data | Performance of a contract |
| Managing your account | Identity, contact, account data | Performance of a contract |
| Responding to enquiries or customer service requests | Identity, contact data | Legitimate interests / Contract |
| Sending marketing communications (where you have opted in) | Identity, contact, marketing data | Consent |
| Improving our website and services | Technical, usage data | Legitimate interests |
| Preventing fraud and ensuring website security | Technical, identity data | Legitimate interests / Legal obligation |
| Complying with legal and tax obligations (e.g. accounting records) | Identity, contact, financial data | Legal obligation |
You may withdraw consent for marketing at any time (see Section 8).
6. International Sales
We sell our products to customers in the United Kingdom, United States, Canada, Australia, and New Zealand. Where you place an order from outside the UK, we will process your personal data (such as name, delivery address, and order details) in order to fulfil and ship your order, handle customer service, and comply with any applicable customs or export requirements.
By providing your information when ordering from one of these territories, you acknowledge that your data will be transferred to and processed in the UK, where our servers and business operations are based.
7. Where Your Data Is Stored — Hosting and Security
Our website and the personal data we collect are hosted on servers located in the United Kingdom, provided by Hostinger. This means your personal data is processed and stored within the UK, and is therefore protected under UK GDPR and the Data Protection Act 2018.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:
- Secure, encrypted connections (HTTPS/SSL) across our website
- Restricted access to personal data on a need-to-know basis
- Secure payment processing through our third-party payment provider
- Regular review of our data security practices
While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
8. Data Sharing and Third Parties
We do not sell your personal data. We may share your data with trusted third parties who help us operate our business, including:
- Hosting provider: Hostinger (UK-based servers)
- Payment processors: to securely process your payments
- Delivery and courier companies: to fulfil and deliver your orders, including to international destinations (US, Canada, Australia, New Zealand)
- Email/marketing platforms: if you have opted in to marketing communications
- Professional advisers: such as accountants, auditors, or legal advisers, where necessary
- Regulators or law enforcement: where required by law
Any third party we share data with is required to keep your data secure and use it only for the purposes we specify.
9. How Long We Keep Your Data
We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically:
- Order and transaction data: retained for 6 years (to meet UK tax and accounting obligations)
- Account data: retained while your account remains active, plus a reasonable period afterwards
- Marketing data: retained until you withdraw consent or unsubscribe
10. Cookies
Our website uses cookies and similar technologies to improve your browsing experience, remember your preferences, and analyse site traffic. You can control or disable cookies through your browser settings. For more details, please see our separate Cookie Policy [insert link if available].
11. Your Rights Under UK GDPR
If you are located in the UK (and equivalent rights may apply if you are located elsewhere), you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate or incomplete data
- Erasure — request deletion of your personal data in certain circumstances
- Restriction — request that we limit how we use your data
- Object — object to our processing of your data, including for direct marketing
- Data portability — request your data be transferred to you or another provider in a structured, machine-readable format
- Withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, please contact us at [insert contact email]. We will respond within one month, as required by UK GDPR.
You also have the right to lodge a complaint with the UK’s supervisory authority:
Information Commissioner’s Office (ICO) Website: https://ico.org.uk Telephone: 0303 123 1113
12. Customers Outside the UK
If you are ordering from the United States, Canada, Australia, or New Zealand, please note:
- Your personal data is transferred to and processed in the UK, and is protected under UK GDPR regardless of where you are located.
- We handle your data with the same standard of care and security as we do for UK customers.
- Depending on your location, you may have additional rights under local privacy laws (for example, the CCPA in California, PIPEDA in Canada, the Privacy Act 1988 in Australia, or the Privacy Act 2020 in New Zealand). If applicable local law grants you rights beyond those set out in this policy, we will honour those rights on request.
13. Children’s Privacy
Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated “Last updated” date.
15. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
David Asch Design Email: [insert contact email] Address: [insert business address]
You can also contact the ICO if you have concerns about how your data has been handled: https://ico.org.uk