Legal
What we collect, why we collect it, and what we never do with it.
Last updated 8 September 2026
We operate this website and are responsible for the personal data described here. For any privacy question, write to us at the address on our contact page.
When you place an order — your name, phone number, WhatsApp number, email address, delivery address, and any delivery instructions you write. We also store the products you ordered along with the options you chose and any notes you added.
When you upload artwork — the files you send us, together with their file names and sizes, and the order or request they belong to.
When you create an account — your email address, name, phone number and any saved addresses. Passwords are handled by our authentication provider and are stored only as a cryptographic hash; we never see them.
When you contact us — the message you send and the contact details you give us, so we can reply.
We do not use your data for automated profiling, and we do not build advertising audiences from it.
Uploads are stored in a private location that is not publicly accessible and cannot be browsed or guessed. They are opened only by our studio, and only to produce your order, through links that expire after a few minutes. We do not use your photographs or artwork for our own marketing unless you tell us in writing that we may.
We share the minimum necessary with:
We never sell your personal data, and we never pass it to anyone for their own marketing.
Order records are kept for as long as we are required to keep transaction records. Uploaded artwork is kept for twelve months after delivery so reprints are possible, then deleted. Account details are kept until you ask us to close your account.
This site sets only the cookies it needs to work: a session cookie if you sign in, and a short-lived cookie that lets the browser you ordered from see its own order confirmation. Your cart is stored in your browser, not on our servers. We do not use advertising or cross-site tracking cookies.
You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Write to us and we will respond within thirty days.
Data is transmitted over encrypted connections and stored with access rules that restrict each customer to their own records. Administrative access is limited to our own staff. No system is perfect; if a breach ever affects your data we will tell you.
If this policy changes materially we will update the date at the top of this page and, where the change affects you directly, tell you by email.