Privacy policy
Last updated: 21 October 2026
Who we are
The Inner Sanctum Group ("ISG", "we", "us") is a custom printing and merchandise business based in Derby, United Kingdom. We sell through theinnersanctumgroup.co.uk. ISG is the trading name of The Inner Sanctum Group Limited, a company registered in England and Wales (company number 15789920), registered office 315 Weddington Road, Nuneaton, CV10 0HB. We are the controller of the personal information described here.
Contact for privacy questions: printing@theinnersanctumgroup.co.uk, or write to us at our registered office.
What we collect
- Order details: name, email, phone, billing and delivery address, items ordered and order history.
- Payment details: handled by Shopify and its payment partners. We do not see or store full card numbers.
- Artwork and personalisation: logos, photos, text and design notes you upload or send us, plus the mockups we make from them.
- Enquiries: what you tell us through our bulk order, design help, creator and contact forms, by email or by WhatsApp.
- Creator details: if you sell merch with us, your name, contact details, artwork and the bank details we need to pay you by bank transfer.
- Website usage: device, browser, IP address, pages viewed and basket activity, collected through cookies and similar technologies.
Why we use it
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Take payment, make, deliver and support your order, including mockups and reprints | Contract |
| Reply to enquiries and prepare quotes | Contract (steps before a contract) or legitimate interests |
| Pay creators and keep sales records | Contract and legal obligation |
| Keep accounting and tax records | Legal obligation |
| Prevent fraud and keep the site secure | Legitimate interests |
| Analytics and site improvement | Consent, where non-essential cookies are used |
Marketing: we don't send marketing emails or texts. If we ever start, we will ask for your consent first, and every message will include a way to unsubscribe.
Your artwork
You keep the rights to the artwork you send. We use it only to make your order, show you mockups and, for creator merch, to make and sell the products we agreed. We will not use your artwork or photos of your finished order for promotion without your permission.
Who we share it with
We share only what each provider needs to do its job:
- Shopify: hosts our store, checkout and order records, and processes payments with its payment partners.
- Delivery companies: usually Evri for UK orders, and Yodel, DHL Express or FedEx for some UK and international orders, depending on location.
- Website apps: services built into our store for site search, basket recommendations, pop-ups, forms and product options, and image galleries.
- Email and messaging: Microsoft 365 for email and WhatsApp for chats.
- Professional advisers and authorities: where the law requires it.
We don't sell your information, and our garment suppliers never receive your details. Some providers store data outside the UK. Where they do, they use safeguards such as the UK International Data Transfer Agreement or adequacy regulations.
Cookies
We use essential cookies to run the store and basket. Where our cookie banner offers a choice, analytics and marketing cookies are used only if you accept them, and you can change your choice at any time. Shopify's cookies are listed at shopify.com/legal/cookies.
How long we keep it
- Order and accounting records: 6 years from the end of the financial year, as UK tax law requires.
- Artwork and mockups: 6 months after your order. Ask us and we'll delete them sooner.
- Enquiries that don't become orders: 6 months.
Your rights
Under UK GDPR you can ask to access, correct or delete your information, restrict or object to how we use it, take a copy to another provider and withdraw consent. Email us to make a request. We reply within one month.
If you're unhappy with how we handle your data, tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Children
Our store is not aimed at children under 13, and we don't knowingly collect their information. Parents ordering personalised items for children are responsible for the details they send.
Changes
We will update this page when our practices change and show the date at the top.