Privacy Policy

Who controls your information

SDP Media Limited, trading as SignHQ, is the controller. We are registered in England and Wales under company number 08017741. Contact help@signhq.co.uk or SDP Media Limited, 24 Harwood Street, Blackburn, BB1 3BS.

Information we collect

We may collect names, business and contact details; billing, delivery and collection details; order, quotation and correspondence records; artwork, photographs and production files; account details; payment status and transaction references; IP address, browser, device and security data; cookie choices; and website usage or advertising-attribution data where required consent has been obtained.

Card details are processed by our payment provider and are not intended to be stored by SignHQ.

Why we use it

We process information to answer enquiries and take requested pre-contract steps; fulfil and support orders; administer customer relationships; prevent fraud and maintain security; establish or defend claims; comply with accounting, tax and regulatory obligations; send permitted marketing; and operate consented analytics or advertising.

Our lawful bases are contract, steps requested before a contract, legal obligation, legitimate interests and consent, depending on the activity. Where a business is the contracting customer, we generally rely on legitimate interests to communicate with its individual contacts.

Who receives information

We share only what is reasonably necessary with payment processors including Stripe; delivery and fulfilment providers; hosting, maintenance, security and backup services; email providers; accountants and professional advisers; fraud-prevention providers; analytics or advertising services where permitted; and authorities where legally required. We do not sell personal information.

International transfers

Some providers may process information outside the UK. Where required, we use an approved safeguard or another lawful transfer basis.

How long we keep information

• Quotation requests and associated files: normally 24 months after the last meaningful contact.
• Order, invoice, payment and tax records: six years after the end of the relevant financial year, or longer where legally necessary.
• Production artwork and proof records: six years after completion or the last relevant transaction.
• Customer accounts: while active and normally 24 months after closure or prolonged inactivity, except transaction records retained longer.
• Unconnected enquiry correspondence: normally 24 months.
• Marketing records: until consent is withdrawn or an objection is made, while retaining a minimal suppression record where necessary.

We may retain information longer for a dispute, legal claim, fraud prevention or legal obligation.

Your rights

Subject to UK data-protection law, you may request access, correction, erasure, restriction or portability, or object to processing. You may withdraw consent at any time where processing relies on consent. Contact help@signhq.co.uk. We may need to verify identity.

You may complain to the Information Commissioner’s Office at ico.org.uk, although we would appreciate the opportunity to address the concern first.

Security and changes

We use proportionate organisational and technical measures intended to protect information. No internet service can guarantee absolute security. Do not send passwords, card details or unnecessary sensitive information through artwork or enquiry uploads.

We review this policy when services, providers or legal obligations change and will update the date shown above.