Privacy Policy

The controller is SIGNRIGHT (HIGHLAND) LIMITED at 8 Essich Meadows, Scotland, IV2 6EW, United Kingdom. Privacy questions and complaints can be sent to support@signrighthighe.shop or raised by telephone at +44 7503087654.

We collect the information needed to sell, make, dispatch and support physical signs and memberships.

• Identity and contact data: name, email, telephone, billing address and shipping address.
• Order and fulfilment data: SKU, quantity, material, size, font, customer-supplied wording, production notes, order fulfilment status, carrier tracking, dispatch and return history.
• Membership and support data: plan, renewal status, quote requests, correspondence, complaint and resolution records.
• Technical data: IP address, device and browser information, security events, cookie choices and essential session identifiers.
• Payment boundary: Stripe or PayPal processes billing and card data. Markwell receives transaction references, status, amount and limited billing details, but never receives or stores a complete card number or security code.

We collect personal information directly from you when you place an order, enter a shipping address, join a membership, use the Sign Builder, submit the contact or bulk quote form, request a return, or contact support. We automatically collect limited device, browser, security and cookie-choice data when you use the store. Stripe or PayPal sends us payment status and limited billing references, while postal and courier carriers send tracking and delivery events. We may also receive authorised updates from a person placing an order on your behalf.

We process order, shipping address, order fulfilment, delivery, return and membership data because it is necessary to perform our contract with you. We use contact data to answer requests and take pre-contract steps. We keep tax, accounting, fraud and dispute records to meet legal obligations and protect legitimate interests. Optional analytics or marketing requires consent where the law requires it.

• Fulfil and ship made-to-order signs, including checking wording and preparing carrier labels.
• Take payment, administer subscriptions, refunds, disputes, returns and customer support.
• Prevent abuse, enforce content limits and protect our systems.
• Improve store reliability using aggregated or consent-based analytics.

We disclose only the information needed for each provider to perform its role. Processors may include our website host, Supabase for lead/order storage, Stripe or PayPal for payments, Resend or Postmark for email, Cloudflare for anti-spam/security, and postal or courier carriers for delivery. Professional advisers and authorities may receive records when lawfully required.

• Delivery carriers receive recipient name, address, telephone where required and parcel details.
• Payment providers receive billing and transaction details directly through their hosted payment interfaces.
• We do not sell personal information and do not share it for cross-context behavioural advertising.

Because orders ship worldwide and some processors operate internationally, information may be processed outside the United Kingdom or European Economic Area. Where required, we rely on adequacy regulations, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, and appropriate technical safeguards.

Unconverted form and checkout-lead records are kept for no more than 24 months. Order, payment, refund and tax records are normally kept for up to seven years where accounting or legal rules require it. Customer-supplied wording and production files are removed or de-identified when no longer needed for fulfilment, defect claims or repeat-order support. Security logs are kept for a proportionate, shorter period.

We use access controls, encrypted transport, restricted service credentials, signed admin sessions, provider-hosted payment pages and monitored server logs. No system can be guaranteed perfectly secure; suspected incidents are investigated and notified where the law requires.

Depending on where you live, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier processing. California residents may request categories, sources, purposes and recipients, correction or deletion, and may opt out of sale or sharing. Markwell does not sell or share personal information as those terms are defined by the CCPA. We do not discriminate for exercising privacy rights.

• Send a request to support@signrighthighe.shop; we may verify identity before releasing records.
• UK residents may complain to the Information Commissioner's Office; EEA residents may contact their local supervisory authority; California residents may contact the California Privacy Protection Agency.

Essential storage keeps the cart, admin security and cookie choice functioning. Optional analytics or advertising cookies are used only after the required consent. See the Cookie Policy for categories, durations and controls.

We do not make decisions with legal or similarly significant effects solely by automated means. Basic content filters may flag wording for human review. The store is not directed to children under 13. People aged 13–17 may use it only with a parent or guardian's consent, and order correspondence should use the guardian's email.

Contact SIGNRIGHT (HIGHLAND) LIMITED at support@signrighthighe.shop, +44 7503087654, or 8 Essich Meadows, Scotland, IV2 6EW, United Kingdom. We aim to acknowledge privacy requests within five business days and respond within the applicable legal period.