Privacy Policy
Last updated: 2 October 2026.
Who is responsible
Kamil Cherek, trading as LuckyTshirt, is responsible for personal data collected through luckytshirt.co.uk. Address: 6 Little Gull Close, Northampton, NN3 5BU, United Kingdom. Contact: sales@luckytshirt.co.uk.
Orders, accounts and personalised artwork
We use your name, email, billing and delivery address, telephone number where provided, order details and uploaded artwork to fulfil your purchase and provide support. Processing necessary to fulfil an order is based on our contract with you. WooCommerce stores shop and account records on our LH.pl-hosted website. Necessary accounting records are kept for six years, subject to applicable legal requirements; other information is kept only as long as needed for its purpose and legitimate dispute handling.
Custom artwork is used to prepare your print and handle related order queries. Do not upload unnecessary personal information or location metadata in images. Account information is kept while your account is active, subject to deletion requests and any records we must retain by law.
Payments and delivery
WooPayments and its payment partners process payments. Apple Pay and Google Pay may be available through that service. We receive payment status and transaction references, not your complete payment-card number. We share necessary delivery details with the postal or delivery service fulfilling your order, including Royal Mail where used. Their own privacy notices explain their processing. Hosting and email service providers also process data needed to operate the store.
Contact requests
Our contact form uses Contact Form 7. We use submitted contact details, message content and order references to reply, based on our legitimate interest in providing customer support or steps needed for your contract. Routine enquiries are normally retained for up to 12 months after resolution; order, legal or dispute records may need longer retention.
Lucky Drop newsletter
Brevo processes newsletter contact details, subscription preferences, delivery information and campaign interactions such as opens and clicks. New website subscriptions require email confirmation. We send marketing on the basis of your consent or, for eligible previous customers, the applicable existing-customer marketing rules where you were informed and could opt out. You can unsubscribe using the link in a marketing email or contact us. We keep a minimal suppression record after an opt-out so that we do not send further marketing, and retain evidence of preferences where necessary. Newsletter consent is not required to place an order. We do not enrol website newsletter subscribers in SMS or WhatsApp marketing.
Cookies, statistics and security
Essential WordPress, WooCommerce and payment cookies support login, shopping baskets and secure checkout. WordPress login cookies normally last two days, or two weeks with Remember Me. Newsletter-popup preferences are stored in your browser to avoid repeated prompts (normally 7 days after closing or 30 days after requesting signup).
Jetpack/Automattic supports site statistics and operation. Google for WooCommerce connects product listings to Google and can support measurement where configured. Non-essential statistics or advertising technologies require the applicable consent choice before use. You can manage cookie choices using the site’s cookie controls and your browser. Security services use technical information such as IP addresses and login attempts to protect the shop, based on our legitimate interest in security. We do not rely on this notice as permission to set optional cookies.
Reviews
If you submit a review or comment, its content and displayed author name may be public after approval. Technical information helps prevent spam. If a Gravatar image is used, an email hash may be shared with Automattic. Avoid including private information in public reviews.
Sharing and international processing
We share data only as needed with hosting, payment, email, delivery, statistics and security providers, or where required by law. Providers may process information outside the UK. Applicable safeguards, such as adequacy arrangements or approved contractual safeguards, are required where relevant. Provider information: Brevo, Automattic, Stripe and Google.
Your rights
Depending on the circumstances, you can request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent. Withdrawal does not affect earlier lawful processing. Contact sales@luckytshirt.co.uk; we may need to verify your identity. You can complain to the UK Information Commissioner’s Office at ico.org.uk. We do not use solely automated decisions producing legal or similarly significant effects about you.