0

Privacy policy


Ryan Murrant Editions


Privacy Policy


Last updated: 13 May 2026
This Privacy Policy explains how Ryan Murrant Editions collects, uses, stores and protects your personal data when you visit our website or purchase from us. We are committed to handling your data lawfully, fairly and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


1. Who we are (the Data Controller)


Ryan Murrant, trading as Ryan Murrant Editions, is the data controller responsible for your personal data.


Contact details:

  • Email: hello@ryanmurranteditions.com
  • Address: Ryan Murrant (sole trader), Flat 3/5, 7 Hilton Gardens, Bishopbriggs, G64 3NS
  • Website: ryanmurranteditions.bigcartel.com


2. What personal data we collect


We may collect and process the following categories of personal data:

  • Identity data: your name
  • Contact data: email address, postal/delivery address, phone number (if provided)
  • Transaction data: details of your order, including products purchased, prices, and the date of purchase
  • Payment data: handled directly by PayPal; we do not see or store your card or PayPal credentials (see section 6)
  • Technical and usage data: IP address, browser type, device information, operating system, pages viewed, and how you navigate the site (via Google Analytics — see section 6)
  • Communications data: any correspondence you send to us, including emails and contact form messages



3. How we collect your data


We collect data when you:

  • Place an order through our website
  • Contact us by email or through any contact form
  • Browse the website (via cookies and analytics — see section 7)


4. Why we use your data and the legal basis


Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:


Performance of a contract


We process your identity, contact, transaction and payment data to fulfil your order — printing, packaging, dispatching and providing customer service related to your purchase.


Legal obligation


We retain transaction records (including invoices and tax records) for at least 6 years as required by HMRC and UK accounting and tax law.


Legitimate interests


We use technical and usage data to operate, secure and improve our website. We assess that this processing is necessary for the legitimate interests of running our business, and that those interests are not overridden by your rights and freedoms.


Consent


We rely on your consent for non-essential cookies, including Google Analytics. You can withdraw consent at any time via the cookie banner or your browser settings.


5. Who we share your data with


We do not sell your personal data. We share it only with the following categories of third parties, all of which are bound by their own data protection obligations:

  • Big Cartel — the e-commerce platform that hosts our website and processes orders
  • PayPal — for payment processing
  • Royal Mail — for delivery of your order
  • Google (Google Analytics) — for website analytics (only with your consent)
  • HMRC, accountants, or other regulatory and professional bodies where required by law


Some of these providers may transfer data outside the UK, including to the United States. Where this happens, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or by the recipient being certified under the UK Extension to the EU–US Data Privacy Framework.


6. Third-party services we use


Big Cartel


Our website is hosted by Big Cartel, which provides the storefront, checkout and order management. Big Cartel processes personal data on our behalf. For more information, see Big Cartel's privacy policy on their website.


PayPal


Payments are processed by PayPal. When you choose to pay, you are redirected to PayPal's secure environment. We do not see or store your card or PayPal account credentials. PayPal acts as a separate data controller and is governed by its own privacy policy, available on the PayPal website.


Google Analytics


We use Google Analytics to understand how visitors use our site. Google Analytics sets cookies that collect information such as IP address (which is anonymised), pages viewed, and time spent on the site. This data is used in aggregate form and is not used to identify you personally. Google Analytics is only loaded if you have given consent via the cookie banner.


7. Cookies


A cookie is a small text file placed on your device when you visit a website. We use the following types of cookies:


Strictly necessary cookies


Required for the website to function — for example, remembering items in your basket and keeping you logged in during checkout. These cookies do not require consent.


Analytics cookies


Set by Google Analytics to help us understand how the site is used. These cookies require your consent and will only be set if you accept them via our cookie banner.


You can change your cookie preferences at any time using the cookie settings link on our site, or by clearing cookies through your browser. Disabling strictly necessary cookies may prevent parts of the site from working correctly.


8. How long we keep your data


We only keep personal data for as long as necessary for the purposes set out in this policy:

  • Order and transaction records: at least 6 years, to comply with HMRC and accounting requirements
  • General correspondence: up to 2 years from the date of the last contact
  • Analytics data: as configured in Google Analytics (typically up to 14 months)


After these periods, data is securely deleted or anonymised.


9. Your rights


Under UK GDPR you have the following rights in relation to your personal data:

  • Right of access — to obtain a copy of the personal data we hold about you
  • Right to rectification — to have inaccurate or incomplete data corrected
  • Right to erasure ("right to be forgotten") — to ask us to delete your data, subject to legal retention obligations
  • Right to restrict processing — to ask us to limit how we use your data
  • Right to object — to object to processing based on legitimate interests
  • Right to data portability — to receive your data in a structured, commonly used, machine-readable format
  • Right to withdraw consent — where processing is based on consent
  • Right not to be subject to automated decision-making that produces legal or similarly significant effects — we do not carry out such processing


To exercise any of these rights, email hello@ryanmurranteditions.com. We will respond within one month. There is no charge for exercising your rights, except where requests are manifestly unfounded or excessive.


10. How we protect your data


We take appropriate technical and organisational measures to protect your personal data, including using reputable third-party providers (Big Cartel, PayPal, Google) who maintain industry-standard security. Despite these measures, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.


11. Children


Our website and products are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.


12. Complaints


If you have a concern about how we handle your personal data, please contact us first at hello@ryanmurranteditions.com so we can try to resolve it.


You also have the right to lodge a complaint with the UK supervisory authority:

  • Information Commissioner's Office (ICO)
  • Website: ico.org.uk
  • Helpline: 0303 123 1113


13. Changes to this policy


We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the "Last updated" date amended accordingly.