1. Purpose

This Data Protection page describes how FUTKIX protects personal information collected when people browse and buy football jerseys. We operate from Ravensbourne House, 28 Bromley Rd, London SE6 2TP, United Kingdom. Orders, size enquiries, custom name requests, and messages to our desk all pass through the safeguards described here. The page sits alongside our Privacy Policy, which explains what we collect and why, and our Terms of Service, which explain the purchase itself.

Protection is a daily practice, not only a document. Staff who pack a shirt, press a number, or answer an email are expected to handle names and addresses with care. We review these practices when we change a supplier, a form, or a storage tool. The date at the top of this page shows the latest review.

2. What We Protect

Protected information includes customer names, email addresses, phone numbers, delivery and billing addresses, order history, shirt sizes, player names and numbers sent for printing, payment references, messages to our team, and technical data such as IP address and browser type. We do not store a complete card number or card security code. Those details stay with the payment provider that takes the payment.

3. Principles

We collect only what a stated purpose needs, such as delivering a jersey, printing a name, or answering a size question. We use information lawfully, fairly, and openly. We keep it accurate where you help us with corrections. We store it only while we need it, and we protect it against unauthorised access, loss, and misuse. We can explain these points in plain language if you write to us.

4. Security Measures

Measures include encrypted website forms, controlled storage of order records, software updates, and monitoring for unusual access. Card payments are taken by specialist providers that follow industry standards. Staff open order lists only through controlled systems so that phone numbers and addresses are not left on shared devices in the packing room. Paper picking notes, if used for a dispatch day, are returned to the office and not left with a carrier.

5. Access Control

Only people who need customer information for their work may see it, for example order handling, print production, finance, or customer care. Access is reviewed when roles change and removed when it is no longer needed. Anyone who handles personal information must follow confidentiality rules, including a rule that a customer's address and phone number are discussed only for that customer's order.

A print operator may see the name and number to be pressed and the order reference, without needing the full payment record. A finance colleague may see the amount and the payment reference, without needing to browse unrelated messages. We separate those views where the system allows it. Shared inboxes are used only by people whose job includes answering customers.

6. Service Providers

We work with payment processors, delivery carriers, print partners, hosting providers, and email services so that a shirt can be made and delivered. We share only what each party needs. A carrier may receive a name, address, and phone number. A print partner may receive the lettering and the garment reference. Partners must protect the information and use it only for the task we set. We do not sell personal information, and we do not allow a partner to use an address for its own marketing.

Before we rely on a new provider for order data, we look at where the data will sit, who can open it, and how long the provider keeps it. Contracts require confidentiality and a duty to tell us if they become aware of a breach that affects our customers. We keep the list of providers under review and stop sharing with one that no longer works on our orders.

7. Storage and Retention

Some technology providers may store or process information on servers outside the United Kingdom. When that happens we take reasonable steps required by UK data protection law, including choosing reputable providers and using appropriate transfer safeguards. Transfers linked to email confirmations or page performance are limited to what is necessary to operate the jersey website.

8. Incidents and Requests

If we learn of a security incident that may affect personal information, we investigate promptly, contain it, and assess the risk. Where the law requires it, or where there is a significant risk to rights, we will notify affected customers and the Information Commissioner's Office without undue delay, explain what happened in plain language, and describe steps they can take. We will also review whether order lists were involved and reset access where that is appropriate.

9. Training, Updates, and Contact

Everyone who handles order information is expected to understand why protection matters in a shop that prints names and posts shirts to homes. We give practical guidance on email, order systems, and dispatch lists, and we ask the team to report risks early. Accountability sits with the management of FUTKIX, which oversees how information is collected, stored, shared, and deleted across browsing, payment, printing, and delivery.

We review these practices regularly and may update this page when products, technology, or legal duties change. Please read the page again after an update so you know the practices that apply to order information held by FUTKIX. A change to a supplier or to a form is a reason to read this page, not only a change in the law.

To submit a data protection request or report a suspected incident, contact FUTKIX and write Data protection in the message. Include your name and any order reference. Do not send a full card number.

Email: [email protected]

Phone: +447932596563

Address: Ravensbourne House, 28 Bromley Rd, London SE6 2TP, United Kingdom