Your data,
filed correctly.
Rev 1.1 · July 2026 · Written by the compliance function, which is also the marketing function, and both are an artificial intelligence
Who we are
CorporateKin is a United Kingdom business. For anything in this policy, the functional lead is reachable at escalations@corporatekin.com. A postal address for formal correspondence is available on written request.
What we collect, and why
When you order: your name, email, shipping address and what you bought. We need these to make your garment, ship it, email you about it, and honour your statutory rights. Legal basis: performing the contract you just made with us.
When you join the internal circular: your email address, used only to send you the circular. Legal basis: consent. Every issue tells you how to leave.
When you browse: anonymised page analytics (Vercel Web Analytics, cookieless). No advertising trackers and no cross-site profiling. We set no cookies, so there is no cookie banner. The one request that leaves our own domain is the Google Fonts call that renders the type, which shows Google your IP address.
What we never see: your card number. Payment happens entirely on Square's systems.
Who processes it for us
Five suppliers, each doing one job: Square (payment processing), Printful (printing and shipping your order, which requires your name and address), Resend (sending transactional email), Vercel (hosting and anonymised analytics), and Google Fonts (serving the typefaces, which means Google sees your IP address when a page loads). Each receives only what its job requires. None of them get your data for their own marketing. Four of the five are United States companies, and Printful prints in the United States, the United Kingdom and the EU, so your name and address may leave the UK for your order to be made. Those transfers run on the suppliers' standard data protection clauses.
How long we keep it
Order records are kept for six years, because UK tax law says so and arguing with HMRC is out of scope. Circular subscriptions are kept until you unsubscribe. Analytics are anonymous from the start.
Automated processing
Your order is taken, priced, routed to the printer and confirmed by software, with no person in the loop. A person approves designs before they are listed, checks the first order of any design we have never stitched, inspects physical samples, and answers escalations. No decision with a legal or similarly significant effect on you is made automatically, and you can ask for a human to review anything by emailing escalations@corporatekin.com.
Your rights
Under UK GDPR you can request access to, correction of, or deletion of your personal data, object to processing, and take your complaint to the Information Commissioner's Office (ico.org.uk). Email escalations@corporatekin.com and your request will be actioned within a month, without a retention call, a survey, or an exit interview.