Privacy notice

Who is responsible

Steven Cameron trading as Made by Endure (sole trader), 11 Munro Way, Kirriemuir, Angus, DD8 4NG, United Kingdom.

Steven Cameron is responsible for the personal information used by Made by Endure. Contact hello@madebyendure.com about your information or this notice.

Information used for your order

We use contact and delivery details, order selections, payment references and status, route files and activity details, personalisation, proofs and approval feedback. A GPX can include precise location information and timestamps; only provide information you are comfortable sharing for your print.

We also hold customer service messages, review submissions and referral or store-credit records. Historical customer and review records have been migrated from the previous Shopify store.

Why we use it

We use information to prepare proofs, make and deliver orders, take payment and provide support as part of fulfilling your contract. We retain records needed to meet legal obligations, including accounting requirements.

Security, fraud prevention and administering reviews and referrals involve our legitimate interests in operating a trustworthy business, balanced against your rights. Where processing relies on consent, you can withdraw that consent.

Routes, activity connections and reviews

Uploaded GPX previews are processed on your device. When checkout begins, route files and design settings are stored privately for fulfilment. Direct Strava activity importing is currently unavailable. You can upload a GPX file you supply yourself.

Reviews you submit for publication may appear on the website with a limited display name rather than your full surname. Do not include private information in review text.

Service providers

Website hosting, database and secure file-storage providers process the customer, order, route and proof information needed to operate the shop and fulfil your order. Transactional email delivery providers process recipient email addresses and message contents to deliver order updates, proofs, referral-credit messages and review requests. Delivery companies receive the name, address and contact details needed to deliver your parcel.

Stripe and PayPal process payments; full payment-card details are not stored by Made by Endure. The website does not currently connect to Strava to import activities.

Providers may process information outside the UK. Our hosting and transactional email providers publish data-processing terms that include standard contractual clauses and the UK Addendum for relevant restricted transfers. These are contractual safeguards for personal information transferred internationally. Contact us for information about the providers and safeguards applicable to your information. Payment and activity providers also explain their processing in their own privacy notices.

Accounting records

As a sole trader, we must normally keep business records for at least five years after the 31 January submission deadline for the relevant tax year. Some records may need to be kept longer, for example during an HMRC enquiry or an unresolved legal claim. This accounting requirement is separate from the shorter retention period for customer route files and proofs. Automatic file cleanup does not delete financial records.

Customer enquiries and accounts

Routine customer enquiries are deleted two years after the enquiry is resolved. Records still needed for an order, accounting, active store credit or an unresolved dispute are retained for the relevant purpose and reviewed when that need ends. Enquiry and account retention is managed separately from automated route-file cleanup.

Review requests and marketing

We may manually send you a request for a review after your print has been delivered. These requests do not include promotional content. You can ask us not to send further review requests by emailing hello@madebyendure.com. Promotional marketing is handled separately from order messages and review requests.

Retention and your rights

Customer GPX files, proofs and saved route-geometry bundles become eligible for automatic deletion 12 months after dispatch, to allow time for reprints. Orders on a retention hold for a dispute, legal requirement or reprint are excluded until the hold is released. Older orders without a recorded dispatch date require a manual retention review. Financial, order and enquiry records are handled separately under the accounting and customer-record rules above. Public event-catalogue GPX files are not covered by the customer-file retention period. Private backup copies expire separately: daily backups after 30 days, weekly and manual data backups after 84 days. Backup expiry is not instantaneous. Deleted files must not be returned to active use during recovery.

Depending on the circumstances, you can request access, correction, deletion or restriction of your information, object to processing, or request portability. Some records may need to be retained to meet legal obligations. Contact hello@madebyendure.com; you can also complain to the Information Commissioner’s Office at ico.org.uk.