Effective date: 7 October 2025
Controller: Printivoo LTD (Company No. 16737367)
Registered in the United Kingdom
Contact: [email protected]

Who we are

Printivoo (“we”, “us”) is an online store offering on-demand, made-to-order products. We operate this website and are responsible for your personal data as its controller.

What this policy covers

This policy explains what data we collect, how we use it, how long we keep it, who we share it with, international transfers, your rights, and how to contact us.

Data we collect

• Account & profile data: name, email, password hash (if you create a local account), addresses, phone (optional), wishlist.

• Google Sign-In data (if you choose it): your Google account basic profile (name, avatar URL) and email address. We do not access your Gmail, Google Drive, or any other Google data.

• Order & fulfilment data: items purchased, sizes/variants, delivery address, instructions, and status.

• Payment data: handled by our payment providers (e.g., Stripe and/or PayPal). We do not store full card numbers.

• Support communications: messages you send us via email or forms.

• Device & usage data: IP address, device/browser info, pages visited, cookies and similar technologies (see Cookies).

• Fraud-prevention & security data: signals from anti-abuse tools (e.g., CAPTCHA).

How we use your data (purposes & legal bases – GDPR/UK GDPR)

• Provide the service & fulfil orders (contract): account, cart, checkout, production and shipping of your items.

• Payments & fraud prevention (contract/legitimate interests): via our payment processors and anti-abuse tools.

• Customer support (contract/legitimate interests): to respond to your requests.

• Account sign-in via Google (consent/contract): fast, secure login without a separate password.

• Analytics & site performance (consent/legitimate interests): understand usage and improve our store.

• Legal compliance (legal obligation): tax/VAT, accounting, and consumer protection laws.

Google Sign-In & Google API Services limited use

If you use Google Sign-In:

• We request only your name and email address (and avatar URL if available) to create or log in to your account.

• We do not use Google data for advertising or marketing.

• We do not sell or transfer Google user data, except to enable the features you request, comply with law, or as part of a merger/asset transfer with equivalent protections.

• We comply with the Google API Services User Data Policy, including the Limited Use requirements.

Who we share data with (processors & recipients)

We share data with trusted service providers who act under our instructions and contracts:

• E-commerce platform & hosting: our website, theme, and hosting providers that keep the store running.

• Payment processors: Stripe and/or PayPal to process payments and handle disputes/refunds.

• Order fulfilment partner(s): specialized print-on-demand manufacturers and logistics providers in the UK/EU (and, where needed, other regions) to produce and deliver your order.

• Email & communications: email hosting and transactional email services.

• Analytics / security / anti-abuse: tools for performance, security, and fraud prevention (e.g., CAPTCHA).
  Where required, we also share data with regulators, law enforcement, and our professional advisers (legal/accounting).

We remain responsible for your data and ensure contracts with processors include appropriate data-protection obligations.

International transfers

Some providers may process data outside the UK/EU (e.g., the EEA, the United States, or where your order ships). When transfers occur, we use appropriate safeguards such as UK International Data Transfer Addendums and/or EU Standard Contractual Clauses, plus technical and organisational measures.

Retention

• Account data: kept while your account is active; if you request deletion, we delete or anonymise within 30 days unless we must retain certain records.

• Order records: kept for 6–10 years to meet tax/accounting obligations.

• Support emails: normally retained for up to 3 years.

• Analytics/cookies: see retention in our cookie banner/tool.

Your rights (UK/EU)

You have the right to access, rectify, erase, restrict, object, port your data, and to withdraw consent at any time (without affecting lawful processing before withdrawal).
You can also complain to your local data-protection authority. In the UK, that’s the ICO (ico.org.uk).
To exercise rights: email [email protected].

Cookies & similar technologies

We use cookies to:

• keep you signed in and remember your cart,

• enable checkout and fraud prevention,

• measure site performance and improve the store.

You can manage non-essential cookies via our cookie banner or your browser settings. Blocking some cookies may impact site features.

Children

Our store is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided data, contact us and we’ll delete it.

Security

We use appropriate technical and organisational measures (HTTPS/TLS, access controls, least-privilege, monitoring) to protect your data. No system is perfectly secure; we maintain incident-response procedures.

Third-party links

Our site may contain links to third-party sites. Their privacy practices are governed by their own policies.

Changes to this policy

We may update this policy periodically. We will post the new version with an updated Effective date and, where appropriate, notify you by email or notice on the site.

Contact

For privacy questions or requests, contact:
Printivoo LTD — [email protected]