Privacy notice

How we handle your data

Last updated 25 October 2026

This notice covers the EU parcel data fix service at eu.gptshopltd.com. It explains what personal data we hold when you buy the service and send us your product export, why, and for how long.

Who we are

GPT Shop Ltd is the controller of your personal data under the UK GDPR and the Data Protection Act 2018. We are a company registered in England and Wales, company no. 15766335, registered office Goodison Middleton, Winterslow, Salisbury, England, SP5 1QR. Contact us about anything in this notice at hello@gptshopltd.com.

What we collect

Order details from Stripe when you pay: your name, email address, billing address, the pack you bought and the amount paid. We never see or store your full card details.
Your product export and anything else you email us about the job. Product data is mostly business data, but it can contain personal data such as a sole trader's name, a supplier contact or a staff member's details.
Emails you send us, with your name, email address and anything you include.

The cost calculator runs in your browser. Nothing you type into it is sent to us. This site sets no cookies and uses no analytics or advertising trackers.

Why we use it, and our lawful basis

To produce and deliver the files you paid for, answer your questions and handle any refund: performance of our contract with you.
To keep accounting and tax records of the sale: legal obligation.
To deal with a dispute or complaint: our legitimate interests in defending our position.

We use your product export only to produce your files. We do not sell it, share it with other customers, use it for marketing or use it to train any model.

Who we share it with

Stripe processes your payment. Stripe acts as our processor for payment processing and as a separate controller for its own fraud prevention and legal duties. See Stripe's privacy policy.
Google (Google Workspace), which hosts our email and stores messages and files on our behalf under contract as a processor.
Cloudflare, which hosts this website and may log technical data such as IP addresses briefly for security.

To check suggested HS codes we look up product descriptions in the UK Government's Online Trade Tariff. We send only generic product wording, never your name or contact details. Where a provider stores data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

How long we keep it

Your product export and the files we make from it: deleted within 30 days of delivering your final files. If you ask us to delete them sooner, we do so within 5 working days.
Emails about your order: kept for 12 months after delivery so we can answer follow up questions, then deleted.
Payment and invoice records: kept for 6 years from the end of the financial year, as UK tax law requires.

Your rights

You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Email hello@gptshopltd.com. We reply within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, but please contact us first so we can try to put it right.

Business contact emails

We sometimes email UK limited companies at their published business address about this service. We hold only the company name, its website, its published business email address and a short note on why the service may be relevant. We also note its Companies House number. We send these emails using Instantly (Instantly.ai) and Google Workspace, which act as our processors. Our lawful basis is legitimate interests. Every email says how to opt out, and if you opt out we keep only your address on a suppression list so we never contact you again.

Changes

If we change this notice we update the date at the top of this page.