Privacy policy

Privacy Policy

Last updated: 21 September 2026

STLIRA LTD (Company No. 17468454, registered office: Office 7556, 58 Peregrine Road, Hainault, Ilford, Essex, United Kingdom, IG6 3SZ), trading as Stelmag ("we", "our", "us"), operates stelmag.com and is the data controller for the purposes described in this policy, which is provided under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information we collect

  • Order information: name, email address, shipping address, phone number, order details and custom photos you upload for printing.
  • Payment information: processed securely by Shopify Payments and PayPal. We never see or store your full card details.
  • Device & usage data: IP address, browser type, pages visited and cookies — used to keep the site secure and improve your experience.
  • Communications: messages you send us via email or contact forms.

2. How we use your information

  • To process orders, print your custom items, and arrange delivery;
  • To send order confirmations, shipping notifications and after-sales support;
  • To detect fraud and keep our store secure;
  • To send marketing emails only with your consent — you can unsubscribe at any time via the link in any email.

3. Legal bases (UK GDPR)

We process your data based on: contract performance (fulfilling your order), legitimate interests (fraud prevention, site security), consent (marketing, cookies), and legal obligation (tax and consumer-law record keeping).

4. Sharing your information

We share data only with the partners needed to run our store:

  • Shopify — e-commerce platform (data hosting, checkout);
  • Payment providers — Shopify Payments, PayPal;
  • Shipping carriers & fulfilment partners — name, address and order contents, only to deliver your parcel;
  • Production partners — your uploaded photo, only to print your custom item.

We never sell your personal data to third parties.

5. Data retention

Order records are kept for 6 years (UK tax requirement). Custom photos used in production are deleted after 12 months unless you ask us to keep them for reorders.

6. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate data;
  • Request deletion ("right to be forgotten");
  • Object to or restrict processing;
  • Request data portability;
  • Withdraw consent for marketing at any time.

To exercise any right, email info@stelmag.com. We respond within 30 days.

You also have the right to complain to the Information Commissioner's Office (ICO) — ico.org.uk.

7. Cookies

Our store uses essential cookies (cart, checkout) and optional analytics/marketing cookies. You can manage preferences in the cookie banner shown on your first visit, or in your browser settings.

8. Security

All traffic is encrypted with HTTPS/TLS. Access to order data is restricted to authorised staff and vetted service providers.

9. Children

Our products are not directed at children under 13, and we do not knowingly collect their personal data.

10. Changes & contact

We may update this policy; the latest version is always on this page.

Data controller: Stelmag

Contact: info@stelmag.com