Privacy Policy

1. Who looks after your data?

Data controller / legal trading entity: Gary Ogden, trading as Graphic Rebel.
Contact postal address: 53 Portland Road, Blackpool, FY1 4ED
Privacy contact: gary@insidethematrix.co.uk.

We are committed to explaining how we use personal information when you visit Graphic Rebel, ask a question or place an order.

2. Information we may collect

• Names, email addresses, delivery addresses, order and size/design details you provide when ordering or contacting us.
• Payment status and transaction references from our payment provider. Card details are collected by the payment provider's checkout, not through our chatbot.
• Technical information such as the pages viewed, device/browser information and cookie identifiers, subject to our analytics and cookie settings.
• Messages you enter into Graphic Rebel Assistant, including any personal information you choose to include. The embedded Botpress widget may connect to Botpress infrastructure when the page is loaded.

3. Why we use information

• Fulfil orders and answer enquiries: to take payment, deliver purchases and provide customer support (usually necessary to perform a contract or take steps at your request).
• Keep required business records: for accounting, tax and other legal obligations.
• Website security and service improvement: to keep the site functioning and understand how visitors use it (where appropriate, legitimate interests).
• Optional tracking: analytics or advertising-related tracking which requires permission will depend on your cookie choices and applicable law.

Where we rely on legitimate interests, we consider the effect on visitors and their rights.

4. Other services and sharing

Information may be processed by providers helping us run the shop. These may include:

• PayPal and card payment processors to accept secure online payments.
• Website hosting and email services to operate the website and respond to enquiries.
• Statcounter for optional website measurement on the homepage after analytics permission is granted.
• Google Analytics 4 for optional visitor statistics and selected shopping-related events on pages with the updated shared analytics controls, after permission is granted.
• Botpress to provide the embedded AI shopping chatbot. Loading the widget can connect your browser to Botpress services; if you use the chat, Botpress may process your messages and technical data needed to respond.
• Delivery providers to send orders to customers.

We do not ask you to enter passwords, card numbers or other sensitive information into the chatbot. Please avoid sharing this information in chat messages.

5. Cookies and tracking

Our website remembers your analytics choice in your browser's local storage. This preference lets us respect your decision when you return. On pages with the updated cookie controls, Google Analytics 4 and the homepage Statcounter script only load when you click Accept analytics. You can click Reject analytics and still browse and order. If you previously accepted Google Analytics alone, we ask you again before enabling both providers.

You can reopen the choice at any time using Cookie settings in our page footer. If you withdraw analytics permission, the current page reloads to prevent further analytics collection. You can also clear cookies and site data using your browser.

Google Analytics 4 may set _ga cookies and related identifiers to measure visits and selected events such as adding a T-shirt to an order. Statcounter may use browser storage and identifiers for visitor statistics. The updated homepage uses both providers after consent; the updated category and product templates use Google Analytics 4 after consent, but do not directly load Statcounter. Withdrawing consent stops further script execution after the page reloads, although already-set third-party cookies may need clearing using browser settings.

For details about providers, see Statcounter, Google, PayPal and Botpress.

6. How long we keep your information

We keep information only for as long as necessary for the purpose it was collected, including fulfilment, customer support, lawful record-keeping and resolving disputes. Different data types may have different retention periods.

We use the following criteria to decide how long to keep information: whether your order or enquiry is still being handled, whether an issue or dispute is unresolved, and any applicable accounting, tax or legal record-keeping requirements. Information is deleted or anonymised when it is no longer needed for these purposes.

For the AI chat service, Botpress's published default retention guidance states that conversation messages are retained for 90 days and logs for 30 days. Provider retention settings and policies can change. Google Analytics and Statcounter retain measurement data under their applicable settings and policies. Please contact us if you would like information about a particular record or wish to request deletion where your rights permit.

7. Where your data is handled

Some of our service providers may process personal information outside the UK. For example, Botpress's Privacy Statement says chatbot conversation information can be stored in the United States or in another location chosen by the customer, and describes international-transfer protections including the UK Extension to the EU–US Data Privacy Framework and contractual safeguards as applicable.

Google, Statcounter and PayPal may also process information internationally under their published privacy and transfer arrangements. You can use the provider links above, or contact us at gary@insidethematrix.co.uk, for information about how the relevant safeguards apply to data processed for Graphic Rebel.

8. Your privacy rights

Depending on the circumstances, you may have the right to access, correct, erase, restrict or object to use of your personal information, or request that it be transferred. You may also withdraw consent where consent is relied upon.

To exercise a right, contact gary@insidethematrix.co.uk. You can complain to the Information Commissioner's Office (ICO) if you are concerned about our handling of personal data.

9. Updates to this notice

We will review this notice when our website tools, customer services or data practices change.

Last revised: 8 October 2026