Privacy

This page explains what PrintLark collects when you use this store, why, who it is shared with and how long it is kept.

What we collect

• Account: your email address, your name and a hash of your password (we never store the password itself).
• Address book: the names, phone numbers and addresses you save.
• Orders: your email address, the shipping address and the contents of each order, plus the payment status Shopify reports to us.
• Artwork: the files you upload and their file names.
• Custom quotes: your email address, what you wrote and any files you attached.
• If you leave a review: the rating, text and photos you submit, the display name you choose, and the country from the order's shipping address.
• Server logs: the address your device connects from and the pages requested, for troubleshooting.

Why, and on what basis

To price and produce your order, print your files, ship to you, answer your questions, and keep the business records the law requires.

To ask you for a review after delivery (one email and at most one reminder, which you can ignore) and to publish the review you choose to leave.

If you are in the EU or UK: we process your data to perform the contract you make with us when you order, to meet legal obligations such as tax record-keeping, and for our legitimate interest in keeping the site secure, answering your questions, asking for a review after delivery and publishing the reviews customers choose to leave. Review photos are the one exception: we publish them only with your consent, which you give when you add them and can withdraw at any time by asking us to remove them. Apart from that we do not rely on consent, because we do no marketing.

Who we share it with

• Shopify, which runs the checkout and payment. Your card details go to Shopify and its payment providers only; we never see them.
• The carrier that delivers your order receives your name, address and phone number.
• Resend sends our emails (password reset links, artwork requests, quotes, review requests).
• Alibaba Cloud Object Storage holds your uploaded files. Review photos are stored there too; once we have checked a photo it is publicly viewable alongside your review.
• Our hosting provider runs the servers this store lives on.

We do not sell your data and we do not use advertising or analytics services.

Where it is stored and transferred

Our servers are in the United States and uploaded files are stored with Alibaba Cloud. If you are outside the United States, your data is transferred there. Our providers process it under their data processing terms, which include the standard contractual clauses recognised in the EU and UK.

How long we keep it

• Accounts, address books, orders and custom quotes are business records. We keep them for at least as long as tax and accounting law requires us to keep sales records. You can delete addresses yourself, and you can ask us to remove your personal details at any time, as described under Your requests below.
• Sign-in sessions end after one year; sign-in codes expire after 10 minutes.
• Uploads that never finished are removed after 24 hours, and files that are no longer attached to anything after 14 days. Files on an order are kept with the order; you can delete them from the order page 30 days after the order is complete.
• A guest cart and the files on it are kept for 7 days after you last change the cart, then the cart is closed. Sign in before that and they move into your account, where they stay. Closed carts and checkouts that were never paid are deleted 90 days later.
• Reviews and their photos stay published until you ask us to remove them; we then delete them. Photo details such as location are removed when you upload.
• Server logs are kept for a short period for troubleshooting only.

Cookies

This store sets three cookies, all of them needed for it to work: one that keeps you signed in, one that remembers your cart, and one that protects forms against misuse. There are no analytics or advertising cookies, so there is nothing to consent to.

Children

This store is not intended for anyone under 16 and we do not knowingly collect their data. If you think a child has given us personal data, contact us and we remove it.

Your requests

You can ask for a copy of the personal data we hold about you, or ask us to remove it. Removal replaces your personal details in our records with placeholders; the business records themselves (that an order existed, what it contained) are kept, and uploaded files are not removed on request but follow the retention periods above. Shopify keeps its own copy of your checkout and payment details under its own privacy policy.

Send requests through the contact page from the email address on your account or order.

If you are in the EU or UK you can also complain to your data protection authority (in the UK, the Information Commissioner's Office).

Changes

When this page changes we note the new effective date at the top.