Privacy policy

Last updated: 30 August 2026

LCNMafiaHistory is operated by Jason Tomlinson, a sole trader, trading as LCN Mafia History (“we”, “us” or “our”).

This Privacy Policy explains how we collect, use, store and share personal information when you visit lcnmafiahistory.com, create an account, place an order, purchase or personalise a product, subscribe to marketing, contact us, or otherwise use our website and services.

1. Who is responsible for your personal information?

For the purposes of UK data protection law, the data controller is:

Jason Tomlinson, sole trader
Trading as LCN Mafia History
24 Byron Street
Liverpool
L20 4RH
United Kingdom

Email: LCNMafiaHistory@gmail.com

2. Personal information we collect

Depending on how you use our store, we may collect the following categories of personal information:

Your name.
Email address and telephone number.
Billing and delivery addresses.
Account information and preferences.
Order details and purchase history.
Delivery, return and refund information.
Payment and transaction-related information.
Messages and correspondence you send to us.
Information you provide when making a complaint, return or customer-service request.
Marketing preferences and records of your consent or opt-out choices.
Technical information such as IP address, browser type, device information and information about how you use our website.
Cookie and similar technology information.
Information used to detect, investigate or prevent fraud, misuse or security incidents.

3. Personalisation information and customer-supplied content

If you order a personalised or custom-made product, we may collect information that you provide for the purpose of creating that product.

This may include:

Names.
Dates.
Messages or wording.
Photographs or images.
Artwork or graphics.
Other customer-selected personalisation details.

Some personalisation content may contain personal information about you or another person.

If you provide personal information about another person, you should only do so where you have a lawful basis or appropriate permission to provide that information for the requested personalisation.

Please avoid including sensitive personal information in personalisation requests unless it is genuinely necessary for the product you are ordering.

We use customer-supplied personalisation content only as reasonably necessary to review, process, manufacture, fulfil and support the relevant order, deal with problems or complaints, and comply with legal obligations.

Where necessary to manufacture or fulfil a personalised product, the relevant personalisation information may be shared with Printify and the production partner responsible for manufacturing the item.

4. How we collect information

We may collect personal information:

Directly from you when you place an order, create an account, contact us, subscribe to marketing or provide personalisation information.
Automatically when you use our website, including through cookies and similar technologies.
From Shopify, which hosts and operates technical parts of our online store.
From payment providers in connection with payments, refunds and fraud prevention.
From Printify and its production partners in connection with manufacturing and fulfilment.
From delivery and logistics providers in connection with shipment and delivery.
From other service providers where necessary to operate our store.

5. Why we use your personal information

We may use personal information to:

Process and fulfil your orders.
Create and manufacture personalised products.
Take and administer payments.
Arrange production, shipping and delivery.
Provide order confirmations and delivery updates.
Manage returns, refunds, cancellations and complaints.
Provide customer service.
Create and maintain customer accounts.
Prevent and investigate fraud, misuse and security incidents.
Maintain and improve our website and services.
Understand how customers use our website.
Send marketing communications where permitted.
Comply with tax, accounting, consumer-protection, data-protection and other legal obligations.
Establish, exercise or defend legal claims.

6. Our lawful bases for using personal information

UK data protection law requires us to have a lawful basis for using personal information.

Depending on the circumstances, we may rely on:

Contract — where processing is necessary to take steps at your request before entering into a contract or to perform our contract with you. This includes processing orders, personalisation details, payments, production, fulfilment, delivery, returns and refunds.

Legal obligation — where we need to use or retain information to comply with a legal requirement, such as tax, accounting, consumer-protection or data-protection obligations.

Legitimate interests — where processing is necessary for our legitimate business interests or those of a third party and those interests are not overridden by your rights and interests. These interests may include operating and improving our store, providing customer service, protecting the security of our website, preventing fraud, maintaining business records and dealing with legal claims.

Consent — where we ask for and obtain your consent, for example for certain marketing communications or non-essential cookies where consent is required. You may withdraw your consent at any time.

7. Payments

Payments made through our store may be processed by Shopify and third-party payment providers.

We do not generally receive or store your complete payment-card details ourselves. Payment providers may collect and process payment information directly in accordance with their own privacy notices and security requirements.

We may receive transaction information such as payment status, payment method, amounts paid, refunds and information necessary to manage an order or investigate a payment issue.

8. Shopify

Our online store is hosted by Shopify.

Shopify processes personal information in order to provide its ecommerce platform, checkout, account, security and other services.

Information that you provide through our store may therefore be processed by Shopify and its service providers.

Shopify may process information in countries outside the United Kingdom in accordance with its applicable privacy and data-transfer arrangements.

9. Printify and production partners

We use Printify and its production partners to manufacture and fulfil our print-on-demand products.

Where necessary to fulfil an order, we may provide them with information such as:

Your name.
Delivery address.
Order and product details.
Relevant contact information.
Personalisation text, photographs, images, artwork or other customisation information required to manufacture the product.

Only information reasonably necessary for production, fulfilment, delivery, support or resolving an order issue should be shared.

Production partners may be located in different countries depending on the product and delivery destination.

10. Other organisations we may share information with

We may share personal information where reasonably necessary with:

Shopify.
Printify and its production partners.
Payment processors and payment service providers.
Delivery companies, postal services and logistics providers.
Website, hosting, security, analytics and technology providers.
Professional advisers such as accountants or legal advisers where required.
Government authorities, regulators, courts, law-enforcement agencies or other organisations where disclosure is required or permitted by law.

We do not sell your personal information.

11. International transfers

Some of the organisations that help us operate the store, process payments, manufacture products or fulfil orders may process personal information outside the United Kingdom.

Where personal information is transferred internationally and UK data-protection transfer rules apply, the transfer must be covered by an appropriate legal mechanism.

Depending on the destination and service provider, this may include UK adequacy regulations, approved contractual safeguards such as the UK International Data Transfer Agreement or applicable UK Addendum, or another transfer mechanism permitted by UK data-protection law.

You can contact us at LCNMafiaHistory@gmail.com if you would like more information about the safeguards relevant to your personal information.

12. Marketing

We may send marketing communications where you have consented to receive them or where another lawful marketing rule permits us to do so.

Where permitted by law, we may send marketing about similar products or services to existing customers using the applicable customer marketing or “soft opt-in” rules.

You can unsubscribe from marketing emails at any time by using the unsubscribe option in the message or by contacting us at LCNMafiaHistory@gmail.com.

We will not require you to agree to marketing as a condition of purchasing a product where consent is required.

Your choice to stop marketing does not prevent us from sending non-marketing communications that are necessary for an order, account, refund, legal notice or customer-service matter.

13. Cookies and similar technologies

Our website may use cookies and similar technologies to operate the store, remember preferences, provide security, understand website usage and support advertising or marketing functionality.

Some cookies are strictly necessary for the website to operate. Other cookies, such as certain analytics or advertising cookies, may require your consent under applicable law.

Where consent is required, we will seek the appropriate choice before using non-essential cookies.

You may be able to manage cookie and privacy choices through the controls provided on our website and through your browser settings.

Blocking some cookies may affect the functionality of the website.

14. Your Privacy Choices

Where privacy controls or opt-out options are available through our store, you may use the “Your Privacy Choices” page or other privacy controls provided on the website.

The availability and effect of particular controls may depend on your location and the applicable privacy laws.

15. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil orders, provide support, meet legal and accounting requirements, resolve disputes and establish or defend legal claims.

Different types of information may therefore be kept for different periods.

In deciding how long to retain information, we consider:

The nature and sensitivity of the information.
The reason we collected it.
Whether we still need it to provide a service or deal with an order.
Legal, tax and accounting requirements.
Consumer rights and potential disputes.
Security and fraud-prevention requirements.

Customer-supplied personalisation content will be retained only for as long as reasonably necessary for fulfilment, support, dispute resolution, legal compliance or other legitimate purposes.

Third-party providers may retain information in accordance with their own legal obligations and retention policies.

16. Security

We take reasonable organisational and technical measures appropriate to our business to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.

We also rely on service providers such as Shopify, payment providers and fulfilment providers to apply appropriate security measures to information processed through their services.

No internet transmission or storage system can be guaranteed to be completely secure.

17. Your data-protection rights

Depending on the circumstances and the lawful basis we rely upon, UK data-protection law may give you rights including:

The right to be informed about how your personal information is used.
The right of access to personal information we hold about you.
The right to rectification of inaccurate or incomplete personal information.
The right to erasure in certain circumstances.
The right to restrict processing in certain circumstances.
The right to data portability in certain circumstances.
The right to object to certain processing.
Rights relating to certain automated decision-making and profiling, where applicable.
The right to withdraw consent at any time where processing is based on consent.

You have the right to object at any time to the use of your personal information for direct marketing.

These rights are not all absolute and may depend on why and how we are processing your information.

To exercise a data-protection right, contact us at LCNMafiaHistory@gmail.com.

We may need to verify your identity before dealing with a request.

18. Automated decision-making

We do not currently make decisions about customers based solely on automated processing that produce legal or similarly significant effects on them.

Third-party services involved in areas such as payment processing, fraud prevention or security may use automated systems in accordance with their own privacy practices.

19. Children

Our store is not intended to collect personal information directly from children for marketing or account purposes.

If a person under 18 places an order, this should be done with the permission and supervision of a parent or legal guardian as described in our Terms of Service.

If you believe that a child has provided personal information to us inappropriately, please contact us.

20. Complaints

If you have a concern about how we use your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to make a complaint to the UK Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

Information about making a complaint is available from the Information Commissioner's Office.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, suppliers, legal obligations or privacy practices.

When we make changes, we will update the “Last updated” date at the top of this policy.

Where required by law, we will provide additional notice of material changes.

22. Contact us

For questions about this Privacy Policy, requests concerning your personal information, or privacy complaints, contact: