Privacy policy

1. Who I am
I'm Designed By TC, based in England, United Kingdom. I run designedbytc.xyz. For the purposes of UK data protection law, I'm the data controller for the personal information described in this policy.

You can contact me about your data at toby@designedbytc.xyz.

2. What information I collect
When you use my site or buy from me, I may collect:

  • Order details: your name, email address, billing address, and what you bought.
  • Payment information: payments are processed by Shopify Payments and other payment providers you choose at checkout (for example PayPal). I never see or store your full card details.
  • Account details: if you create an account, your login details and order history.
  • Communications: messages you send me, such as support emails.
  • Marketing preferences: whether you've agreed to receive marketing emails.
  • Technical information: your IP address, device and browser type, pages visited and how you arrived at my site, collected through cookies and similar technologies.
  • Abandoned checkout information: if you enter your email at checkout but don't complete your purchase, I may store what was in your cart.

3. How I use your information, and why

  • To fulfil your order (delivering downloads, processing payment, giving support). This is necessary to carry out our contract.
  • To send order emails and product updates you need (receipts, download links, subscription notices). This is necessary to carry out our contract.
  • To send marketing emails, including reminders about items left at checkout, only if you've agreed to receive them. You can withdraw consent at any time.
  • To prevent fraud and keep my site secure. This is my legitimate interest.
  • To improve my site and products through analytics. This is my legitimate interest, or your consent where cookies require it.
  • To meet legal and tax obligations, such as keeping financial records.

4. Who I share your information with
I only share information with services that help me run my business, and only what they need to do their job:

  • Shopify, which hosts my store and processes orders and payments.
  • Payment providers, such as Shopify Payments and PayPal, to take payment.
  • Klaviyo, which I use to send emails, including abandoned checkout reminders and marketing you've opted in to.
  • Meta
  • Professional advisers, such as my accountant, where needed.
  • Authorities, where I'm legally required to.

I don't sell your personal information.

5. International transfers
Some of these providers are based outside the UK, including in the United States. Where your data is transferred abroad, I rely on appropriate safeguards, such as the UK's approved data transfer arrangements or standard contractual clauses that these providers put in place.

6. Cookies
My site uses cookies and similar technologies to make the store work (such as keeping items in your basket), to remember your preferences, and, where you agree, to measure how the site is used and to show relevant marketing. You can accept or decline non-essential cookies using the banner on my site, and you can change your choice at any time through my cookie settings or your browser settings.

7. How long I keep your information
I keep order and financial records for as long as the law requires (currently at least six years in the UK for tax purposes). Marketing data is kept until you unsubscribe or ask me to delete it. Other information is kept only as long as I need it for the reasons above.

8. Your rights
Under UK data protection law, you have the right to:

  • ask for a copy of the personal information I hold about you
  • ask me to correct anything that's wrong
  • ask me to delete your information, in some circumstances
  • object to or ask me to restrict how I use your information
  • ask me to transfer your information to you or another company
  • withdraw your consent to marketing at any time, using the unsubscribe link in any email or by contacting me

To use any of these rights, email me at toby@designedbytc.xyz. I'll aim to reply within one month. Some information I can't delete, for example financial records I'm legally required to keep.

9. Customers outside the UK
If you're in the European Economic Area or elsewhere, you may have similar rights under your local law. I'll do my best to respect them, and you can contact me using the details above.

10. Security
I take reasonable steps to protect your information, and my store runs on Shopify's secure platform. No online system is completely secure, so I can't guarantee absolute security.

11. Children
My site and products aren't aimed at anyone under 16, and I don't knowingly collect their information. If you think a child has given me their details, please contact me and I'll delete it.

12. Complaints
If you're unhappy with how I've handled your information, please contact me first so I can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

13. Changes to this policy
I may update this policy from time to time. The latest version is always the one on this page, and I'll note the date it was last updated below.

Last updated: 29/09/2026