Privacy policy

Last updated:  30 August 2026

Everhold Studio Ltd, trading as Everhold ("Everhold", "we", "us" or "our"), operates this store and website, including all related information, content, features, tools, products and services (the "Services"). Everhold is powered by Shopify, which enables us to provide the Services to you. 

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. 

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that has been anonymised so that an individual is no longer identifiable. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.

  • Payment and transaction information, including your payment method, payment status, payment confirmation and other transaction information made available to us by Shopify or our payment service providers. Payment service providers may collect additional payment information directly from you in accordance with their own privacy terms.

  • Transaction information including the items you view, put in your cart, or purchase, return, exchange or cancel and your past transactions.

  • Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.

  • Customer content including photographs, images and other files you upload to create personalised products, together with any customisation information you provide.

  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.

  • Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you including when you visit or use the Services, communicate with us, or otherwise provide us with your personal information;

  • Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;

  • From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;

  • From customers who provide photographs, images or other content containing personal information about another person.

Information Required to Provide the Services

Certain personal information is necessary for us to enter into or perform our contract with you. This may include your contact and delivery details, order information, information necessary to complete or confirm payment, and photographs, images or other content required to create a personalised product.

If you do not provide information that is necessary to process or fulfil your order, we may be unable to provide the relevant Services or complete your order.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfil your orders, including using photographs, images and other files you upload to create and produce personalised products, to remember your preferences and items you are interested in, to process purchases, returns, exchanges or other transactions, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customised shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.

  • Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications where permitted by applicable law, and to show you online advertisements for products or services. We do not use photographs, images or other files you upload to create personalised products for public advertising, social media or other promotional purposes unless you have actively consented to that use.

  • Security and Fraud Prevention. We use personal information where necessary to protect our Services and business, maintain security, and detect, prevent or investigate suspected fraud, misuse, security threats or other unlawful activity.

  • Customer Support and Service Communications. We use personal information to respond to enquiries, provide customer support, communicate with you about your order or the Services, and deal with complaints, requests or other service-related matters.

  • Legal and Business Protection. We may use personal information where necessary to comply with applicable law, court orders or other lawful requirements, respond to regulators or public authorities, establish, exercise or defend legal claims, resolve disputes, and protect or enforce our legal rights and applicable terms.

Lawful Bases for Processing

If you are in the United Kingdom or European Economic Area, we process your personal information under one or more of the following lawful bases, depending on the purpose for which the information is used:

  • Contract. We process personal information where it is necessary to take steps at your request before entering into a contract with you or to perform our contract with you. This includes processing information necessary to process and fulfil your order, create your personalised products, process payments, arrange delivery and provide order-related customer support.

  • Legitimate Interests. We may process personal information where it is necessary for our legitimate interests or those of a third party and those interests are not overridden by your rights and interests. These interests include operating and improving our Services, providing customer support, maintaining the security of our Services, preventing fraud, protecting our legal rights and processing photographs containing other individuals where necessary to create and fulfil personalised products requested by our customers.

  • Consent. Where we rely on your consent, we process your personal information only for the specific purposes covered by that consent. This may include using photographs or other customer content for public advertising, social media or promotional purposes, or marketing and tracking activities where consent is required and those activities are used by Everhold. You may withdraw your consent at any time.

  • Legal Obligation. We may process personal information where necessary to comply with legal obligations, including tax, accounting and other regulatory requirements, or to respond to legally valid requests from public authorities.

Use of Customer Photos for Promotional Purposes

Where you actively opt in, Everhold may use and publish photographs or other customer content from the relevant order on Everhold's social media channels and in other promotional or advertising content.

This consent is optional and is not required to place or fulfil an order. You may withdraw your consent at any time by contacting us at contact@everhold.uk. Withdrawal will not affect the lawfulness of any use or processing based on your consent before it was withdrawn. Following withdrawal, we will stop further promotional use based on that consent and take reasonable steps to remove the relevant content from promotional channels under our control.

Content published through third-party social media or advertising platforms may also be processed by those platforms in accordance with their own terms and privacy notices. Copies that have already been downloaded, reposted, shared, cached or otherwise retained by third parties may remain outside Everhold's control. Where removal is outside our control, you may need to contact the relevant third party directly. Where required by applicable law, we will take reasonable steps to notify relevant third parties of an applicable erasure request.

We may retain records showing when, how and to what you consented, together with any subsequent withdrawal, where reasonably necessary to demonstrate compliance, resolve disputes or establish, exercise or defend legal claims.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).

  • With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites. .

  • When you direct, request us or otherwise consent to our disclosure of certain information to third parties or through your use of social media widgets.

  • With our affiliates or otherwise within our corporate group.

  • In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

  • Where you have actively consented to promotional use, with social media or advertising platforms and the public to the extent necessary to publish the agreed content.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. 

Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services. 

In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. 

To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances,

Where Shopify acts as an independent controller of personal information, Shopify is responsible for that processing and for responding to applicable requests relating to that processing.

To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy . Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal Link.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

Our Services are not specifically directed at children. We may process personal information relating to children where it is provided in connection with an order, customer enquiry or personalised product, including where a child appears in a photograph or image supplied to us.

We process such information only where necessary for the relevant purpose and in accordance with applicable data protection law.

Customers should not authorise promotional use of content featuring a child unless they have the authority to provide the relevant permission.

If you have concerns about personal information relating to a child that we process, please email us at contact@everhold.uk.

Photos and Personal Information of Other People

Photographs, images or other content you upload may contain personal information about people other than you, including family members, friends or other individuals.

Where personal information about another individual is included in content you provide to us, we process that information only as necessary to create and fulfil the personalised product you have requested, provide related customer support or otherwise as described in this Privacy Policy.

Where those individuals are not our customers, we may rely on our legitimate interests in providing personalised products requested by our customers. We do not process uploaded photographs for the purpose of identifying the individuals shown in them.

You should ensure that you are entitled to provide photographs or other personal information relating to other individuals and, where applicable, to authorise the relevant promotional use. You should not provide or authorise the use of content where you know that an individual objects to that use.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Photographs, images and other files uploaded solely to create personalised products are retained only for as long as reasonably necessary to create and fulfil the order and deal with related order issues, complaints or replacements, unless we reasonably need to retain them for longer to comply with a legal requirement or for another lawful purpose.

Where you have separately consented to promotional use, relevant copies may be retained while that consent remains in effect and while reasonably necessary for the authorised promotional use.

Records demonstrating consent, withdrawal of consent or other matters relevant to compliance or legal claims may be retained for longer where reasonably necessary for those purposes.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

  • Right to Access. You may have a right to request access to personal information that we hold about you.

  • Right to Erasure. You may have a right to request that we delete personal information we maintain about you.

  • Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.

  • Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

  • Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about orders that you have made.

  • You have the right to object at any time to the processing of your personal information for direct marketing purposes.

If you reside in the UK or European Economic Area, and subject to exceptions and limitations provided by local law, you may exercise the following rights in addition to the rights outlined above:

  • Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information for certain purposes.

  • Withdrawal of Consent: Where we rely on consent to process your personal information, you have the right to withdraw this consent. If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent before its withdrawal.

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Complaints

If you have a complaint about how we process your personal information, you can contact us by emailing contact@everhold.uk. 

We will acknowledge receipt of a data protection complaint within 30 days.

Without undue delay, we will take appropriate steps to investigate the complaint, make enquiries where appropriate, keep you informed of relevant progress and communicate the outcome.

If you are not satisfied with our response, depending on where you live, you may have the right to lodge a complaint with your local data protection authority. If you are in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. For the EEA, you can find a list of the responsible data protection supervisory authorities here.

International Transfers

Personal information may be transferred, stored or processed outside the country in which you live.

Where a restricted transfer is not covered by applicable UK adequacy regulations, we will rely on an appropriate safeguard or other transfer mechanism permitted under UK data protection law. You may contact us for information about the safeguard applying to a particular transfer and how to obtain a copy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at contact@everhold.uk.

For the purpose of applicable data protection laws, Everhold Studio Ltd is the data controller of your personal information.