We’ve tried to write this policy in plain English. It tells you what personal information we collect when you use FSB Print Shop, why we collect it, and what you can do about it.
FSB Print Shop is a members-only platform for FSB members, run by CFH Docmail Ltd. You can read this policy before you register — we want you to feel comfortable before you share anything with us.
FSB Print Shop is operated by CFH Docmail Ltd (“CFH”, “we”, “us”, “our”) on behalf of the Federation of Small Businesses. CFH is a UK-based print and document solutions business, registered in England and Wales.
Our registered office is: CFH Docmail Ltd, St Peter’s Park, Wells Rd, Westfield, Radstock, BA3 3UP.
If you have any questions about this policy, or want to do anything with your personal data, please get in touch — we’re happy to help.
We only collect what we need. Here’s where it comes from:
Information you give us
Information collected automatically
Information from other sources
We don’t collect sensitive personal data (such as health information or ethnicity). We don’t handle your payment card details directly — payments go through our third-party payment provider. This platform is for business use by adults only.
We only use your information where we have a proper reason to do so. The table below explains each purpose and the legal basis we rely on under UK GDPR.
Where we rely on legitimate interests, we’ve carried out an assessment to make sure our interests don’t override yours. You can ask to see a summary of any of these assessments — just get in touch.
|
What we use it for |
Why we’re allowed to |
|
Processing and delivering your orders |
We need this to fulfil your order — it’s the basis of our contract with you. |
|
Handling your support queries and account questions |
Again, this is part of our contract with you — we need to be able to help when things come up. |
|
Meeting our legal obligations |
Some things we’re simply required to do by law — for example, keeping financial records for HMRC, or responding to requests from regulators. |
|
Keeping the platform secure and preventing fraud |
We have a legal obligation and a legitimate interest in making sure the platform is safe and trustworthy — for you and for us. |
UK data protection law gives you a number of rights over your personal information. Here’s what they are and what they mean in practice:
|
The right to be informed |
You have the right to know how your data is being used. That’s what this policy is for. |
|
The right of access |
You can ask us for a copy of the personal information we hold about you. |
|
The right to rectification |
If any of your information is wrong or out of date, you can ask us to correct it. |
|
The right to erasure |
You can ask us to delete your personal data. We’ll look at each request individually — in most cases we can act straight away, but occasionally there may be a legal reason we need to keep certain information for a period of time. |
|
The right to object |
You can object to the way we’re using your information. You have an absolute right to object to direct marketing. |
|
The right to restriction |
You can ask us to hold your data but stop using it — for example, while a query is being resolved. |
|
The right to portability |
You can ask us to transfer your data to you or another organisation in a commonly used format. This applies where we process your data on the basis of consent or contract. |
We don’t make any automated decisions about you.
To exercise any of these rights, please contact us:
We may need to verify who you are before we can act on a request. We aim to respond within one calendar month.
If something’s not right, we’d always rather hear from you first. You can raise a concern about how we’ve handled your data directly with us — just contact us at data.protection@cfh.com or write to us at CFH Docmail Ltd, St Peter’s Park, Wells Rd, Westfield, Radstock, BA3 3UP. We’ll acknowledge your complaint within 30 days and do our best to resolve it as quickly as we can.
If you’re not satisfied with how we’ve dealt with your concern, you have the right to escalate to the Information Commissioner’s Office (ICO) at ico.org.uk.
Keeping your data safe is something we take seriously. The measures we have in place include:
If we ever experience a breach that could affect your rights, we’ll report it to the ICO within 72 hours as required by law. If the risk to you is significant, we’ll contact you directly too.
Our service providers
We work with trusted third-party providers to keep things running — for example, to host our platform and handle payments. We only share what they need to do their job, and we make sure appropriate agreements are in place.
Where a provider is based outside the UK, we ensure your data is protected through one of the following:
Other situations
We won’t pass your personal information to other organisations for their own marketing. We may share data if required by law. If CFH were ever sold or acquired, your data might transfer to the new owner — but only to be used for the same purposes.
We keep your information for as long as we need it for the purposes described in this policy. How long that is varies depending on our relationship with you — for example, we keep order records for longer than general account data.
If you’d like more detail about specific retention periods, please contact us at data.protection@cfh.com.
If you follow a link from FSB Print Shop to another website, this policy no longer applies. Each site has its own privacy rules, and we’d encourage you to check them.
We review this policy regularly and update it when things change — whether that’s how we work or changes in data protection law. We’d encourage you to check back occasionally. If we make any significant changes, we’ll do our best to let you know.
Last Updated: 18th June 2026