Privacy and Cookies
This policy explains what Autograph Hero collects through the website, how we use it, and how your cookie choices work. It covers enquiries, customer accounts, basket and checkout features, SumUp payments, saved card tokens, and Google Analytics.
Autograph Hero provides convention autograph collection services for fans and collectors. When you use this website, Autograph Hero is responsible for deciding how the personal information collected through the site is used.
For privacy questions, requests, or concerns, email [email protected] or write to Rivendell, Ryders Bank, Buckfastleigh, TQ11 0RB.
We collect information you provide directly, such as your name, email address, account details, enquiry messages, autograph request details, order notes, delivery and billing information, and checkout information.
If you create an account, we may store details needed to run that account, such as your login email, password hash, profile image, security settings, saved address, passkeys, and saved payment method references.
We may also collect technical information needed to run the website, such as session identifiers, security records, cookie preferences, browser and device information, pages visited, and basic payment status records returned by SumUp.
We use personal information to respond to enquiries, provide account access, manage baskets and orders, arrange autograph requests, save details you ask us to remember, support checkout, process payments, improve customer service, keep the site secure, and meet legal or accounting requirements where they apply.
We do not sell your personal information. If we use service providers, such as hosting, payment, email, analytics, authentication, or delivery providers, they should only use the information needed to provide their service to Autograph Hero.
We usually process account, order, checkout, and fulfilment information because it is needed to provide the service you ask for. Analytics cookies are optional and are only used when you consent to them. We may keep some records where needed for security, legal, tax, accounting, fraud prevention, or customer support reasons.
Card payments are processed by SumUp. When you enter card details through the SumUp payment widget, those card details are handled by SumUp rather than Autograph Hero. We do not store your full card number, expiry date, or card security code.
If you choose to save a card for faster future checkout, SumUp may create a payment token for that saved card. We store the SumUp customer reference, payment token, payment mode such as sandbox or live, and basic display information needed to offer the saved-card option in your account and at checkout.
You can remove a saved card from your account. Removing it marks the saved card as inactive on Autograph Hero and asks SumUp to deactivate the related payment token. Saved-card tokens are kept only while the saved-card feature is active on your account, unless we need to retain related payment or order records for legal, accounting, security, or dispute reasons.
Essential cookies and similar browser storage are used for features that the website needs in order to work, including security, sign-in, account sessions, basket handling, checkout flow, and remembering your cookie preference.
Optional analytics cookies help us understand which pages are useful, where visitors find us, and how we can improve the site. These are not needed for the core service and can be declined.
We follow the approach that analytics cookies and similar analytics storage should not be used unless you have been given a clear choice and have accepted analytics cookies.
We plan to use Google Analytics to measure website traffic and understand how visitors use Autograph Hero. Google Analytics may set analytics cookies and collect information such as pages viewed, approximate location, device type, browser, referral source, and interactions with the site.
Analytics storage is denied by default. If you accept analytics cookies, the site updates your consent choice and Google Analytics can use analytics storage. Advertising storage, advertising user data, and ad personalisation remain denied.
You can accept or decline analytics cookies in the cookie banner, and you can reopen that choice at any time using Cookie settings in the footer.
We keep personal information only for as long as it is needed for the reason it was collected. Account and order information may be kept while your account is active, while an order or enquiry is being handled, or while records are needed for legal, tax, fraud prevention, or customer support purposes.
You may delete your customer account from your account area. Some information may remain in order, payment, fulfilment, tax, accounting, security, or backup records where we have a legitimate need or legal obligation to keep it.
You can ask us to review, correct, or delete personal information you have shared with us, subject to any information we need to keep for legal, security, order, or accounting reasons.
You can update saved account details in your account area, remove saved cards, and change your analytics cookie choice using Cookie settings in the footer.
You can also control cookies through your browser settings. Blocking some essential cookies may affect account, basket, or checkout features.
If you are unhappy with how we handle your information, contact us first so we can try to resolve it. You may also contact the UK Information Commissioner's Office at ico.org.uk.
We may update this page as the website develops, including when new checkout, analytics, fulfilment, or customer account features are added. The latest version will always be shown here.
