Privacy Policy

Last updated: 03/09/2026

1. About this notice

This privacy notice explains how Print Clever Limited collects, uses and protects personal information in connection with the Warhammer Officially Licensed Merchandise wholesale website (the Site) and our wholesale business.

The Site is intended for business customers, including companies, limited liability partnerships, partnerships, sole traders, retailers, distributors and other trade customers.

Although our commercial relationship will usually be with a business, we process personal information relating to individuals who interact with us on that business’s behalf. This may include business owners, sole traders, directors, employees, buyers, account administrators, delivery contacts, finance contacts and other representatives. Data protection law applies to that personal information.

This notice applies when you:

  • visit or use the Site;

  • apply for a wholesale account;

  • administer or use a wholesale account;

  • place or manage an order;

  • communicate with us on behalf of a business;

  • receive wholesale marketing from us;

  • contact our sales or support teams; or

  • otherwise interact with our wholesale business.

The Site is not intended for children, and we do not knowingly collect personal information relating to children.

2. Who we are

Print Clever Limited is the controller responsible for the personal information described in this notice.

In this notice, “Print Clever”, “we”, “us” and “our” refer to Print Clever Limited.

Our contact details are:

Print Clever Limited
Company number: 05149084
Unit 109, Cheney Manor Industrial Estate
Swindon
SN2 2DS
United Kingdom

Data protection and privacy enquiries: wholesale@printclever.com
Wholesale support: wholesale@printclever.com

Print Clever is the seller of the products offered through the Site and is responsible for the processing described in this notice. Warhammer branding, logos and trademarks are used under licence from Games Workshop. Games Workshop is not the seller of products through the Site and is not responsible for Print Clever’s processing of personal information, except where Games Workshop separately collects information for its own purposes.

3. Personal information we collect

Depending on how you interact with us, we may collect the following categories of personal information.

Identity and business-contact information

This may include your:

  • Name;

  • job title, role or department;

  • business email address;

  • business telephone number;

  • username or account identifier; and

  • signature, where required.

Business and trade-account information

This may include:

  • the business’s trading and registered names;

  • company or partnership registration details;

  • VAT or other tax-identification numbers;

  • registered, trading, billing and delivery addresses;

  • details of directors, owners, partners or authorised representatives;

  • retail locations, website addresses, social-media accounts and sales channels;

  • the nature, size and location of the business;

  • purchasing requirements and expected order volumes;

  • trade references; and

  • information supplied to support or verify a wholesale application.

Information about a company is not normally personal information. It becomes personal information when it identifies or relates to an individual, such as a sole trader, partner, director or named business contact.

Account and profile information

This may include:

  • account login details;

  • account permissions and authorised users;

  • saved addresses and preferences;

  • wholesale status, pricing tier or account restrictions;

  • order history;

  • communications and marketing preferences; and

  • feedback or survey responses.

Passwords are stored in protected form by our ecommerce platform. We do not have access to your readable password.

Order and transaction information

This may include:

  • quotations, purchase orders and order numbers;

  • products ordered, quantities and prices;

  • billing, delivery and fulfilment information;

  • invoices, credits, returns and refunds;

  • payment status;

  • customs, tax and import information; and

  • communications concerning an order.

Payment and financial information

This may include:

  • payment method;

  • billing details;

  • payment confirmation;

  • bank details where payment or refunds are made by bank transfer;

  • information needed to administer credit terms or recover debts; and

  • fraud-prevention or payment-risk information.

Payment-card details are normally collected and processed directly by our payment providers. We do not ordinarily receive or retain complete payment-card numbers or card-security codes.

Communications and support information

This includes information contained in emails, telephone calls, support requests, live chats, account notes, complaints and other correspondence with us.

Technical, device and usage information

This may include:

  • internet protocol address;

  • login and security records;

  • browser type and version;

  • device type;

  • operating system;

  • time-zone and approximate location;

  • pages, products and features viewed;

  • referring website;

  • dates and times of visits;

  • cookie identifiers; and

  • information about how you use the Site and our emails.

Marketing information

This may include your marketing preferences, interactions with our marketing communications and information used to determine which wholesale products or offers may be relevant to your business.

Special-category and criminal-offence information

We do not intentionally collect special-category personal information, such as information about health, ethnicity, political opinions, religious beliefs, trade-union membership, sexual orientation, genetics or biometrics.

We also do not normally collect criminal-conviction or offence information. Please do not provide this type of information unless we specifically request it and explain why it is required.


4. How we collect personal information

We collect personal information from:

  • You directly, including when you apply for an account, complete a form, place an order, contact us or subscribe to communications.

  • Your business or colleagues, such as when an account administrator creates an account for you or provides your details as an ordering, finance or delivery contact.

  • Public and professional sources, such as Companies House, company websites, trade directories, professional networking sites and other publicly available business sources.

  • Service providers, including Shopify, payment providers, delivery companies, fraud-prevention providers, analytics providers and customer-support platforms.

  • Our systems and technologies, including cookies, server logs and similar technologies used when you visit the Site or interact with our communications.

  • Professional advisers and business partners, where appropriate and lawful.

If you provide personal information about another person, you should ensure that you are authorised to do so and, where appropriate, make this notice available to them.

5. How and why we use personal information

We only use personal information where we have a lawful basis.

Where our customer is a company or other organisation, the contract is normally with that organisation rather than with its individual employees or representatives. In those circumstances, we generally rely on our legitimate interests in establishing and managing the business relationship. Where the customer is a sole trader or another individual contracting in their own name, we may rely on the performance of a contract.

We use personal information for the following purposes.

Assessing wholesale applications

We use identity, contact, business and application information to:

  • review and verify wholesale-account applications;

  • confirm that an applicant is a genuine trade customer;

  • assess whether the business meets our wholesale criteria;

  • verify proposed sales channels;

  • prevent duplicate, fraudulent or misleading applications; and

  • communicate the outcome of an application.

Our lawful bases are our legitimate interests in selecting and verifying wholesale customers, preventing fraud and protecting our distribution arrangements; taking steps before entering into a contract where you are personally the prospective contracting party; and compliance with legal obligations where applicable.

Creating and administering wholesale accounts

We use identity, contact, account and business information to create accounts, manage authorised users, apply wholesale pricing, maintain account security and communicate service information.

Our lawful bases are our legitimate interests in managing customer relationships and operating the wholesale service; performance of a contract where you are personally a party to it; and compliance with legal obligations.

Processing and fulfilling orders

We use identity, contact, transaction, payment and delivery information to:

  • accept and process orders;

  • take and reconcile payments;

  • issue invoices and credits;

  • manufacture, pack and deliver products;

  • manage customs, tax and import requirements;

  • process returns and refunds;

  • provide order updates; and

  • handle warranty, quality or fulfilment issues.

Our lawful bases are our legitimate interests in fulfilling orders placed by business customers; performance of a contract where you are personally a party to it; and compliance with tax, accounting and other legal obligations.

Credit control and debt recovery

Where applicable, we use business, financial, contact and transaction information to administer credit terms, assess payment risk, collect overdue amounts and manage disputes.

Our lawful bases are our legitimate interests in managing financial risk and recovering sums owed to us, performance of a contract where applicable, and compliance with legal obligations.

Customer service and relationship management

We use identity, contact, account, transaction and communications information to answer enquiries, provide support, manage complaints, obtain feedback and notify account contacts about material changes to the Site, our terms or this notice.

Our lawful bases are our legitimate interests in supporting wholesale customers, improving our products and maintaining accurate records; performance of a contract where applicable; and compliance with legal obligations.

Security, fraud prevention and legal claims

We use identity, payment, account, technical and transaction information to:

  • authenticate users;

  • monitor account and payment security;

  • detect and prevent fraud, misuse and unauthorised access;

  • investigate suspected breaches of our terms;

  • establish, exercise or defend legal claims; and

  • protect our business, customers, licensors and intellectual property.

Our lawful bases are our legitimate interests in protecting the Site, our customers and our business, and compliance with legal obligations.

Operating and improving the Site

We use technical and usage information to provide Site functionality, diagnose problems, monitor performance, understand how the Site is used and improve our wholesale services.

For strictly necessary technologies, our lawful bases are our legitimate interests in operating a reliable and secure Site and, where relevant, performance of a contract.

We use non-essential cookies and similar technologies only as permitted by applicable law. Please see our Cookie Policy and the choices provided through our cookie-consent tool.

Record keeping and legal compliance

We use relevant information to maintain business, tax and accounting records, respond to lawful requests from authorities, comply with regulatory requirements and demonstrate compliance with applicable laws.

Our lawful bases are compliance with legal obligations and our legitimate interests in maintaining appropriate business records.

Wholesale marketing

We may use business-contact, account, transaction, profile and marketing information to send information about wholesale products, launches, availability, promotions and related services that may be relevant to the recipient’s business.

Depending on the recipient and communication method, we rely on consent or our legitimate interests in promoting relevant wholesale products to business customers and contacts. Further information is provided in section 7.

Business transactions

We may use and disclose relevant information when considering or completing a sale, investment, financing, restructuring, merger, acquisition or transfer of some or all of our business or assets.

Our lawful basis is our legitimate interest in managing and developing our business.

6. If you do not provide information

Some information is required so that we can assess an application, create an account, process an order or comply with legal requirements.

If required information is not provided, we may be unable to approve an application, open or maintain an account, provide credit terms, accept an order or supply products. We will explain this where appropriate.

7. B2B marketing and your choices

UK electronic-marketing rules distinguish between corporate subscribers and individual subscribers.

Corporate subscribers generally include limited companies and limited liability partnerships. Individual subscribers generally include individuals, sole traders and certain types of partnership.

We may send relevant B2B marketing to corporate email addresses on the basis of our legitimate interests where the law permits. If a business email address identifies a particular person, UK data-protection law still applies to our use of that address.

We will obtain consent where consent is legally required, including for relevant electronic marketing to sole traders and individual subscribers unless another permitted exception applies.

You may object to direct marketing or withdraw your consent at any time by:

  • using the unsubscribe link in an email;

  • changing available account preferences; or

  • contacting us at wholesale@printclever.com.

We will stop the relevant marketing, although we may retain limited information on a suppression list to ensure that we continue to respect your request.

Opting out of marketing will not prevent us from sending non-marketing communications needed to administer an account or order, provide requested support, notify you about important service changes or meet legal obligations.

We will not sell personal information. We will not share it with an unrelated organisation for that organisation’s own direct marketing unless we have obtained any consent required by law.

8. Automated decisions

Our systems and service providers may use automated tools to identify potentially fraudulent transactions, suspicious logins or other security risks. These tools may temporarily flag, delay or block an application, payment or transaction.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects without providing the safeguards required by law.

Where a significant decision has been made solely by automated means and applicable law gives you this right, you may contact us to request human intervention, express your point of view and contest the decision.

9. Cookies and similar technologies

The Site uses cookies and similar technologies for purposes including account login, shopping-basket functionality, security, preferences, analytics and, where enabled, advertising or marketing measurement.

Strictly necessary cookies are used where required to provide the Site and services requested. Non-essential cookies are used in accordance with the choices available through our cookie-consent tool.

Further details, including the current cookies, providers, purposes and durations, should be provided in our Cookie Policy.

10. Who we share personal information with

Where necessary for the purposes described above, we may share personal information with:

  • Shopify and its affiliates, which provide our ecommerce platform and associated services;

  • payment processors, banks and payment-card networks;

  • manufacturers, warehouses, fulfilment providers, couriers and customs agents;

  • hosting, security, communications, email, customer-support and IT providers;

  • analytics and advertising providers where the relevant technologies have been enabled lawfully;

  • fraud-prevention, identity-verification and credit-reference providers, where used;

  • accountants, auditors, insurers, lawyers and other professional advisers;

  • HM Revenue & Customs, courts, regulators, law-enforcement bodies and other authorities where required or permitted by law;

  • brand licensors, including relevant Games Workshop entities, where necessary for licence administration, auditing, rights protection or the investigation of suspected unauthorised sales;

  • prospective purchasers, investors, lenders or advisers involved in a business transaction; and

  • other parties where you ask us to make a disclosure or give us permission.

Some recipients act as processors and may use personal information only on our documented instructions. Others, such as payment providers, banks, regulators and professional advisers, may act as independent controllers and use information under their own privacy notices and legal responsibilities.

We require service providers acting on our behalf to protect personal information and process it only for agreed purposes.

11. International transfers

Some of our service providers or their systems may be located outside the United Kingdom. This means personal information may be transferred to, stored in or accessed from another country.

When a restricted transfer is made, we use a transfer mechanism permitted by applicable data-protection law. Depending on the destination and recipient, this may include:

  • UK adequacy regulations;

  • the UK Extension to the EU–US Data Privacy Framework, where the US recipient is appropriately certified;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to approved standard contractual clauses;

  • binding corporate rules; or

  • another permitted safeguard or statutory exception.

Where required, we assess whether additional contractual, organisational or technical protections are necessary.

You may contact us for further information about the safeguard used for a particular transfer.

12. Data security

We maintain appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, disclosure or access.

These measures include access controls, security monitoring and protections appropriate to the nature of the information and the risks involved. Access is limited to employees, contractors and service providers who need the information for legitimate business purposes and who are subject to appropriate confidentiality obligations.

No internet-based service is completely secure, but we maintain procedures for responding to suspected personal-data breaches and will notify affected individuals and regulators where legally required.

You are responsible for keeping your account credentials confidential. Please contact us promptly if you believe an account has been compromised.

13. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, tax, reporting, fraud-prevention and dispute-resolution requirements.

Our normal retention periods are:

  • wholesale-account, order, invoice and payment records: generally six years after the end of the relevant financial year or business relationship;

  • unsuccessful or incomplete wholesale applications: normally up to 12 months after the application is closed;

  • routine customer-service correspondence: normally up to two years after the enquiry is closed, unless it forms part of a transaction, complaint or legal matter requiring longer retention;

  • technical and security logs: normally up to 12 months, although relevant records may be retained longer where needed to investigate an incident;

  • marketing records: while the business relationship or marketing interest remains active; and

  • suppression records: for as long as reasonably necessary to ensure that an opt-out continues to be respected.

We may retain information for longer where required by law, where a dispute or investigation is anticipated or underway, or where necessary to establish, exercise or defend legal claims.

We may anonymise information so that it can no longer identify an individual. Properly anonymised information may be retained and used for statistical or business-analysis purposes.

14. Your rights

Depending on the circumstances and the lawful basis used, you may have the right to:

  • request access to your personal information;

  • request correction of inaccurate or incomplete information;

  • request deletion of your information;

  • object to processing based on legitimate interests;

  • object at any time to processing for direct marketing;

  • request restriction of processing;

  • request transfer of information you provided to us in a structured, commonly used and machine-readable format;

  • withdraw consent at any time where processing is based on consent; and

  • obtain safeguards relating to certain solely automated decisions.

These rights are not absolute, and exemptions may apply. For example, we may need to retain information to comply with law, protect another person’s rights or establish, exercise or defend legal claims.

To exercise a right, contact wholesale@printclever.com. Please describe your request and provide enough information for us to identify the relevant records.

There is normally no charge. However, where permitted by law, we may charge a reasonable fee or decline to act if a request is manifestly unfounded or excessive.

We may request information reasonably necessary to confirm your identity or authority to act for another person. We will respond within the period required by applicable law and will tell you if a lawful extension is needed.

15. Data-protection complaints

You may make a complaint about our use of personal information by contacting:

Email: compliance@printclever.com
Post: Data Privacy Manager, Print Clever Limited, Unit 109, Cheney Manor Industrial Estate, Swindon, SN2 2DS, United Kingdom.

We will acknowledge a data-protection complaint within 30 days of receiving it. We will take appropriate steps to investigate without undue delay, keep you informed where necessary and notify you of the outcome.

You also have the right to complain to the Information Commissioner’s Office, the UK data-protection regulator:

Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

We would appreciate the opportunity to address your concerns directly, but you are not required to contact us before approaching the ICO.

If you are located outside the United Kingdom, you may also have the right to complain to the data-protection authority in the country where you live or work.

16. Third-party links

The Site may contain links to websites, applications or services operated by third parties. Those third parties control their own processing, and their privacy notices apply when you use their services. We are not responsible for their privacy practices.

17. Changes to this notice

We may update this notice when our processing, service providers or legal obligations change. The latest version will be published on the Site and identified by its “last updated” date.

Where a change materially affects how we use personal information, we will provide an additional notice where required.

18. Keeping information accurate

Please keep your personal and business-contact information current. Account administrators should remove or update authorised users when personnel or responsibilities change.

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights include the following types if “request”:

    • Request access to your personal data.
    • Request correction of your personal data.
    • Request erasure of your personal data.
    • Object to processing of your personal data.
    • Request restriction of processing your personal data.
    • Request transfer of your personal data.
    • Right to withdraw consent.

 

You have the right to:

Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact us

NO FEE USUALLY REQUIRED

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

WHAT WE MAY NEED FROM YOU

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

TIME LIMIT TO RESPOND

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.