Effective Date: August 24, 2025

Welcome to KingdomsPunch (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, place orders, or otherwise interact with our services related to digitizing, vector artwork, custom embroidery, and patches (collectively, the “Services”).

By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Services.

1) Who We Are

KingdomsPunch is a digitizing and patches company serving individuals and businesses worldwide. For the purposes of data protection laws, we are the “data controller” of your personal information when we determine the purposes and means of processing.

2) Information We Collect

We collect information that you provide directly to us, information collected automatically, and information from third parties.

a) Information You Provide

  • Contact details: name, company, email, phone, billing/shipping address.
  • Account details: username, password, preferences.
  • Order details: purchase history, project specifications (e.g., digitizing requirements, stitch counts, colorways), artwork/files you upload, notes and approvals.
  • Payment information: payment method, transaction identifiers (processed via our payment processors; we do not store full card numbers).
  • Communications: inquiries, support requests, feedback, and message content.

b) Information Collected Automatically

  • Device & usage data: IP address, browser type, operating system, pages viewed, links clicked, timestamps, and referring pages.
  • Cookies & similar technologies: please see the “Cookies” section below.

c) Information from Third Parties

  • Payment processors (for transaction confirmation and fraud prevention).
  • Shipping & logistics partners (for delivery status updates).
  • Marketing/analytics providers (aggregated site performance and campaign metrics).

3) How We Use Your Information

  • Provide & improve Services: process orders, produce digitized files/patches, manage accounts, and enhance our website and workflows.
  • Customer support: respond to inquiries, revisions, and after-sales assistance.
  • Payments & fulfillment: prevent fraud, collect payments, arrange shipping/delivery.
  • Communications: send order updates, quotes, invoices, and service notifications.
  • Marketing (with consent where required): send promotions, newsletters, and special offers you can opt out of at any time.
  • Legal obligations: tax, accounting, and regulatory compliance.
  • Security: protect against misuse, unauthorized access, and other harmful activity.

4) Legal Bases for Processing (EEA/UK)

  • Contract: to perform our agreement with you (e.g., fulfilling orders).
  • Legitimate interests: to operate, improve, and secure our Services.
  • Consent: for certain marketing and cookie uses.
  • Legal obligation: to meet applicable laws.

5) How We Share Information

We do not sell your personal information. We may share it with:

  • Service providers & partners: payment processors, hosting, security, analytics, email/SMS, printing/production, and shipping carriers (only as needed to provide Services).
  • Professional advisors: accountants, auditors, legal counsel.
  • Business transfers: in the event of a merger, acquisition, or asset sale.
  • Legal & compliance: when required by law, valid legal process, or to protect rights, safety, and property.

6) Data Retention

We retain personal information only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Artwork and digitized files may be stored for reorders and quality assurance unless you request deletion (subject to legal/contractual limits).

7) Security

We implement reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8) International Transfers

We may process and store information in countries other than your own. Where required, we use appropriate safeguards (e.g., contractual clauses) to protect your information when it is transferred internationally.

9) Your Rights & Choices

  • Access, rectify, delete: request a copy of your data, corrections, or deletion (subject to lawful exceptions).
  • Restriction & objection: request we limit or stop certain processing.
  • Portability: request your data in a machine-readable format.
  • Marketing opt-out: unsubscribe from marketing communications via the link in our emails or by contacting us.
  • Cookies: manage browser cookie settings; see “Cookies” below.

Depending on your location, you may also have the right to lodge a complaint with your local data protection authority.

10) Cookies & Similar Technologies

We use cookies, pixels, and similar technologies to operate our site, analyze performance, remember preferences, and support marketing (where permitted). You can adjust your browser settings to refuse some or all cookies. Disabling cookies may impact certain site features.

11) Children’s Privacy

Our Services are not directed to children under 13 (or the minimum age required by your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

12) Third-Party Links

Our website may link to third-party sites or services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

13) California, EEA/UK & Other Regional Notices

California (CCPA/CPRA): California residents may have rights to know, delete, correct, and opt-out of certain sharing/sale of personal information. We do not “sell” personal information as defined by California law. To exercise rights, see “Contact Us.”

EEA/UK: If we rely on consent, you may withdraw it at any time. If we rely on legitimate interests, you may object where your rights outweigh our interests. To exercise rights, see “Contact Us.”

14) Do Not Track

Some browsers offer a “Do Not Track” signal. Our Services do not currently respond to DNT signals. We will update this policy if that changes.

15) Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. The “Effective Date” at the top indicates the latest revision. Your continued use of the Services after any changes signifies acceptance of the updated policy.

16) Contact Us

If you have questions, requests, or complaints regarding this Privacy Policy or your personal information, please contact us:


Note: Replace placeholders (email, phone, address) with your real company details and, if needed, add your registered company/legal entity name.