Privacy Policy

Last Updated: 20 August 2026

At Hymac-Direct Limited, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, share and protect your personal information when you:

Visit our website;
Create or use a customer account;
Place an order;
Request a quotation;
Contact us;
Purchase personalised, printed or embroidered products;
Subscribe to marketing communications; or
Otherwise interact with Hymac-Direct.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and other applicable data protection legislation.

1. Who We Are

Hymac-Direct is operated by:

Hymac-Direct Limited
Company Registration Number: 08456902
Registered in England and Wales.

Website: www.hymac-direct.com

Email: info@hymac-direct.com

Telephone: 0330 311 2031

For the purposes of UK data protection law, Hymac-Direct Limited is the data controller of personal information that we determine how and why to process.

References in this Privacy Policy to “Hymac-Direct”, “we”, “us” or “our” mean Hymac-Direct Limited.

References to “you” or “your” mean the person whose personal information we process.

2. What Personal Information We Collect

The information we collect depends upon how you use our website and services.

We may collect the following categories of personal information.

Identity Information

This may include:

Your name;
Title;
Company name;
Job title; and
Customer or account information.

Contact Information

This may include:

Billing address;
Delivery address;
Email address;
Telephone number; and
Other contact information you provide to us.

Order and Transaction Information

This may include:

Products ordered;
Quantities;
Garment sizes;
Garment colours;
Personalisation instructions;
Printing or embroidery requirements;
Delivery information;
Order value;
Payment status;
Returns;
Refunds;
Previous orders;
Quotations; and
Correspondence relating to your order.

Personalisation and Artwork Information

Where you order personalised products, we may collect information including:

Names;
Initials;
Job titles;
Business names;
Logos;
Artwork;
Photographs;
Telephone numbers;
Website addresses;
Email addresses;
Text to be printed or embroidered; and
Other information supplied for reproduction on a product.

You are responsible for ensuring that you have permission to provide us with personal information relating to another individual where such information is included in artwork or personalisation instructions.

Payment Information

We may receive information relating to payments, including:

Payment method;
Transaction reference;
Payment status;
Amount paid; and
Limited payment-related information provided to us by our payment provider.

Hymac-Direct does not normally store full credit or debit card numbers or card security codes.

Card and electronic payments are processed through authorised third-party payment processors.

Communications

We may retain information contained in communications with us, including:

Emails;
Contact forms;
Telephone enquiries;
Complaints;
Return requests;
Customer service enquiries;
Product enquiries; and
Other correspondence.

Website and Technical Information

When you visit our website, certain technical information may be collected automatically.

Depending upon the technology and services used on our website, this may include:

IP address;
Browser type;
Device type;
Operating system;
Approximate location derived from IP address;
Pages viewed;
Date and time of visits;
Referring website;
Products viewed;
Shopping basket activity;
Website interactions;
Cookie identifiers; and
Similar technical information.

Further information is provided in the Cookies section below.

3. How We Collect Your Information

We may collect personal information:

Directly From You

For example, when you:

Place an order;
Create an account;
Contact us;
Request a quotation;
Complete a website form;
Subscribe to marketing;
Contact us by telephone or email;
Send artwork to us; or
Request a return or refund.

Automatically

Certain information may be collected automatically when you use our website through cookies and similar technologies.

From Third Parties

We may receive information from organisations involved in processing your transaction or providing our services, including:

Payment providers;
Delivery companies;
Product suppliers;
E-commerce service providers;
Fraud prevention services; and
Other service providers.

4. How We Use Your Personal Information

We may use personal information for the following purposes.

Processing Orders

We use your information to:

Accept and process orders;
Obtain products from suppliers;
Process personalised orders;
Arrange printing and embroidery;
Arrange delivery;
Provide order updates; and
Complete your purchase.

Supplier-Direct Fulfilment

Approximately 98% of our products are dispatched directly from our suppliers.

Where necessary to fulfil your order, we may provide the relevant supplier with information such as:

Your name;
Delivery address;
Telephone number;
Email address where necessary;
Products ordered; and
Delivery instructions.

The supplier uses this information so that your order can be processed, prepared and delivered.

Only information reasonably necessary to fulfil the order should be shared.

Delivery

We may provide your information to couriers, postal services, delivery companies and suppliers for purposes including:

Creating shipping labels;
Arranging delivery;
Providing delivery notifications;
Resolving delivery problems; and
Tracking parcels.

Customer Service

We use personal information to:

Answer enquiries;
Deal with complaints;
Resolve problems;
Process returns;
Arrange replacements;
Process refunds; and
Provide after-sales support.

Personalised Products

Where you ask us to print or embroider information onto products, we use the information you provide solely as necessary to produce and fulfil the relevant order and for legitimate associated business records.

Accounting and Legal Requirements

We may process information for purposes including:

Accounting;
Bookkeeping;
Tax records;
Financial reporting;
Fraud prevention;
Responding to legal claims; and
Complying with legal or regulatory obligations.

Website Improvement

We may use website information to:

Maintain our website;
Improve its performance;
Understand how visitors use it;
Diagnose technical problems;
Improve navigation;
Improve our products and services; and
Protect the website from fraudulent or malicious activity.

Marketing

Where permitted by law, we may use contact information to communicate with customers about products, offers and services.

Further information is provided in the Direct Marketing section below.

5. Our Lawful Bases for Processing Personal Information

UK data protection law requires us to have a lawful basis for processing personal information.

Depending upon the circumstances, we may rely upon the following lawful bases.

Contract

We process information where it is necessary to enter into or perform a contract with you.

For example:

Processing your order;
Taking payment;
Arranging supplier fulfilment;
Personalising products;
Delivering goods;
Dealing with returns; and
Providing customer service relating to your purchase.

Legal Obligation

We may process personal information where necessary to comply with a legal obligation.

For example, we may retain certain transaction and financial information to comply with tax, accounting or other legal requirements.

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your data protection rights.

Our legitimate interests may include:

Operating and improving our business;
Managing customer relationships;
Preventing fraud;
Protecting our website and systems;
Handling disputes and legal claims;
Maintaining appropriate business records;
Understanding how our website is used; and
Promoting our products and services where permitted by law.

Where required, we consider whether our interests are proportionate and balanced against your rights and interests.

Consent

Where required, we may rely upon your consent.

This may include:

Certain marketing communications;
Certain advertising or analytics cookies; and
Other optional processing activities.

Where we rely upon consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

6. Direct Supplier Dispatch

A significant part of Hymac-Direct’s business operates through direct supplier fulfilment.

Approximately 98% of products are dispatched directly from trusted manufacturers, distributors or suppliers rather than first being delivered to Hymac-Direct.

This means we may need to provide a supplier with information required to fulfil your order.

This may include:

Customer name;
Company name;
Delivery address;
Telephone number;
Email address where required for delivery notifications;
Product information; and
Relevant delivery instructions.

Suppliers should only use this information as required to process and deliver the order or to meet their own lawful obligations.

Where products in an order come from different suppliers, information may be provided separately to each supplier responsible for the relevant part of your order.

Your order may consequently arrive in several separate deliveries.

We do not sell or rent your personal information to our suppliers for their own marketing purposes.

7. Who We Share Personal Information With

We do not sell your personal information.

We may disclose personal information to carefully selected third parties where reasonably necessary for running our business or fulfilling your order.

These may include:

Product Suppliers and Manufacturers

To obtain, personalise, fulfil or dispatch products.

Couriers and Delivery Companies

To arrange and complete delivery.

Payment Providers

To securely process payments and refunds.

Payment providers may process your personal information in accordance with their own privacy policies.

Website and E-Commerce Service Providers

Companies that provide services used to operate our website, online shop, customer accounts, hosting or related systems may process personal information on our behalf.

IT and Technology Providers

We may use providers for:

Website hosting;
Email;
Security;
Data backup;
Technical support;
Analytics; and
Business administration.

Printing and Embroidery Providers

Where printing, embroidery or another customisation service is carried out by a third party, we may provide them with the information and artwork necessary to produce the order.

Professional Advisers

Where necessary, information may be disclosed to:

Accountants;
Solicitors;
Insurers;
Auditors; and
Other professional advisers.

Government and Regulatory Authorities

We may disclose information where required by law, court order or lawful request from a competent authority.

Business Transfers

If Hymac-Direct Limited undergoes a sale, merger, restructuring or transfer of all or part of its business or assets, personal information may be disclosed where necessary as part of that transaction, subject to appropriate confidentiality and data protection requirements.

8. Payment Security

For your protection, Hymac-Direct does not normally store full credit or debit card details.

Payments are processed using trusted payment providers such as PayPal and any other secure payment methods made available through our website.

Payment providers may collect information directly from you and process it under their own privacy terms.

We may receive limited information confirming matters such as:

Whether payment was successful;
Amount paid;
Payment method;
Transaction reference; and
Refund status.

We take reasonable steps to use reputable payment service providers and appropriate security measures.

9. Cookies and Similar Technologies

Our website uses cookies and may use similar technologies.

A cookie is a small file or piece of information stored on or accessed from your device when you visit a website.

Cookies may be used for different purposes.

Strictly Necessary Cookies

These cookies are required for important website functions, which may include:

Keeping products in your shopping basket;
Processing checkout;
Providing website security;
Remembering essential session information; and
Preventing fraud.

Where a cookie is strictly necessary to provide a service you have requested, your consent may not be required.

Functional Cookies

These may remember choices or preferences to improve your experience.

Analytics Cookies

Subject to applicable consent requirements, analytics technologies may help us understand matters such as:

Number of visitors;
Pages viewed;
How visitors navigate the website;
Website performance; and
How customers find our website.

Advertising and Marketing Cookies

If we use advertising, social media or remarketing technologies, these may use cookies or similar identifiers to help measure advertising performance or display relevant advertising.

Where consent is legally required, non-essential cookies should not be activated until you have provided consent.

You should be able to accept or reject non-essential cookies through the cookie controls provided on our website where applicable.

You may also be able to change cookie settings through your browser.

Blocking some cookies may affect website functionality.

Where we use a separate Cookie Policy or Cookie Notice, that notice provides additional information about the specific cookies and technologies used.

10. Direct Marketing

We may occasionally send information about Hymac-Direct products, services, promotions or offers where permitted by law.

For individual customers, we will only send electronic marketing where:

You have provided appropriate consent; or
We are otherwise permitted to do so under applicable law, including where the existing-customer provisions commonly known as the soft opt-in apply.

Where we rely upon the existing-customer soft opt-in, this will only apply where the relevant legal conditions are satisfied, including where appropriate that:

We obtained your contact details during the sale or negotiation of a sale;
Marketing relates to our own similar products or services;
You were given an opportunity to opt out when your details were collected; and
You are given an opportunity to unsubscribe in subsequent marketing communications.

You may unsubscribe from marketing at any time by:

Using the unsubscribe option included in marketing emails where provided; or
Contacting us at info@hymac-direct.com.

Opting out of marketing will not prevent us from contacting you where necessary about an existing order, account, enquiry or transaction.

11. Business-to-Business Communications

Many Hymac-Direct customers purchase products on behalf of companies and organisations.

Where permitted under applicable law, we may communicate with corporate customers and business contacts about Hymac-Direct products and services.

We will respect requests to stop receiving marketing communications.

Different rules may apply to sole traders and certain partnerships, and we will seek to comply with applicable electronic marketing requirements.

12. Personalised Artwork and Third-Party Personal Information

Customers may supply artwork or information containing personal information belonging to employees, colleagues or other individuals.

For example, you may ask us to print or embroider:

Employee names;
Job titles;
Email addresses;
Telephone numbers; or
Other identifying information.

Where you provide personal information about another person, you are responsible for ensuring that you have an appropriate basis or permission to provide that information to us.

We will use this information primarily for producing and fulfilling the requested order and related administration.

13. How Long We Keep Personal Information

We do not intend to keep personal information for longer than reasonably necessary.

The length of time information is retained depends upon:

Why it was collected;
Whether you continue to have an account with us;
Whether it is required to process an order;
Legal and accounting requirements;
Warranty or return periods;
Whether there is a complaint or dispute;
Whether information may be needed to establish, exercise or defend a legal claim; and
Other legitimate business requirements.

Financial, invoice and transaction records may be retained for the period required by applicable tax and accounting legislation.

Customer service records may be retained for an appropriate period following completion of the relevant order.

Artwork and personalisation information may be retained where reasonably necessary to allow repeat orders, maintain production records or deal with queries, unless there is a reason that requires earlier deletion.

Where personal information is no longer required, we will seek to delete, anonymise or securely dispose of it as appropriate.

14. Data Security

We take appropriate technical and organisational measures intended to protect personal information against:

Unauthorised access;
Loss;
Misuse;
Disclosure;
Alteration;
Destruction; and
Other unlawful processing.

Measures may include appropriate:

Access controls;
Password protections;
Secure payment processing;
Technical security;
System updates;
Backups; and
Restrictions on who can access personal information.

No internet or electronic storage system can be guaranteed to be completely secure, but we take reasonable measures appropriate to the nature of the information we process.

15. International Transfers

Some of the technology, website, payment, email, analytics or other service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred outside the UK and UK data protection law requires safeguards, we will seek to ensure that an appropriate lawful transfer mechanism is used.

Depending upon the circumstances, this may include:

A country or organisation covered by UK adequacy regulations;
An appropriate contractual safeguard;
The UK International Data Transfer Agreement;
An applicable UK Addendum;
Another legally recognised safeguard; or
An applicable statutory exception.

We may also rely on service providers that implement appropriate safeguards for international transfers.

16. Your Data Protection Rights

Depending upon the circumstances, UK data protection law gives you a number of rights regarding your personal information.

These include the following.

Right to Be Informed

You have the right to be told how your personal information is collected and used.

This Privacy Policy is intended to provide that information.

Right of Access

You may request confirmation of whether we process your personal information and request a copy of information we hold about you.

This is commonly known as a Subject Access Request.

Right to Rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

Right to Erasure

In certain circumstances, you may request deletion of your personal information.

This right is not absolute.

For example, we may need to retain certain information where required by law or where necessary to establish, exercise or defend legal claims.

Right to Restrict Processing

In certain circumstances, you may ask us to restrict the way your personal information is processed.

Right to Data Portability

In certain circumstances, you may request personal information you provided to us in a structured, commonly used and machine-readable format and may have the right to transmit it to another organisation.

Right to Object

You may have the right to object to certain processing, particularly processing based upon legitimate interests.

You have the right to object to the use of your personal information for direct marketing.

Rights Relating to Automated Decision-Making

You may have rights regarding certain decisions made solely through automated processing where those decisions have legal or similarly significant effects.

Hymac-Direct does not ordinarily make significant decisions about customers solely through automated processing.

Right to Withdraw Consent

Where we rely upon consent, you may withdraw that consent at any time.

17. Exercising Your Rights

To exercise your data protection rights, please contact:

Hymac-Direct Limited

Email: info@hymac-direct.com

Telephone: 0330 311 2031

We may need to request information to confirm your identity before fulfilling a request.

We will respond to valid requests within the timescales required by applicable data protection law.

You will not normally be charged for exercising your data protection rights, although the law permits fees or other action in certain limited circumstances.

18. Complaints

If you are concerned about how Hymac-Direct Limited has handled your personal information, please contact us first so that we have an opportunity to investigate and resolve the matter.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Information about making a complaint is available from the ICO at:

www.ico.org.uk

You are not required to contact us before exercising your right to complain to the ICO.

19. Children’s Privacy

Our products and website are not specifically directed at children.

We do not knowingly seek to collect personal information directly from children for marketing purposes.

Where an adult purchases personalised clothing or other products containing a child’s name or other information, we process that information only as reasonably necessary to fulfil the order and associated business requirements.

If you believe that a child has provided personal information directly to us without appropriate authority, please contact us.

20. Third-Party Websites

Our website may contain links to websites operated by other organisations.

Once you leave our website, the collection and use of your personal information by those organisations is governed by their own privacy policies.

Hymac-Direct is not responsible for the privacy practices of independent third-party websites.

We recommend reviewing the privacy policy of any third-party website you visit.

21. Fraud Prevention and Website Security

We may process certain personal and technical information where reasonably necessary to:

Detect fraudulent transactions;
Prevent fraudulent orders;
Protect customer accounts;
Protect our website;
Investigate suspicious activity;
Prevent cyber attacks; and
Maintain the security of our systems.

Where third-party fraud prevention or security services are used, relevant information may be provided to those services where permitted by law.

22. Changes to Your Information

Please ensure that personal information you provide to us is accurate and current.

If your details change, you can contact us to request an update.

For an active order, please contact us as soon as possible if your delivery or contact information is incorrect.

We cannot guarantee that an address can be changed after an order has entered fulfilment or been dispatched.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes to our business;
Changes to our website;
New products or services;
New suppliers or technology;
Changes in the way we process information; or
Changes to applicable law or regulatory guidance.

The latest version will be published on our website.

Where appropriate, significant changes may also be brought to your attention by other means.

The Last Updated date at the top of this policy shows when it was most recently revised.

24. Contact Us

If you have any questions about this Privacy Policy, how we use your personal information or your data protection rights, please contact:

Hymac-Direct Limited

Website: www.hymac-direct.com

Email: info@hymac-direct.com

Telephone: 0330 311 2031