Privacy Policy

This site (Printmatic) is operated by Printmatic, based at 152 St. Sepulchre Gate West, Doncaster, DN1 3AQ. You can reach us at info@printmatic.co.uk or +44 7425 480380.

For the purposes of UK GDPR we are the "data controller" of the personal data we collect through this site.

• Order information — name, email, phone, delivery address, items you ordered.
• Account information (if you sign in) — email address and login activity. We do not store passwords; sign-in uses one-time codes / magic links.
• Uploaded artwork — the image files you upload for printing.
• Payment information — handled by our payment providers (PayPal and SumUp). We receive a confirmation that payment succeeded but never see your full card details.
• Contact form messages — anything you write to us through the site.
• Cookies and similar technologies — see our cookie policy for the full list and your choices.

• To process and deliver your orders, and to contact you about them — contract performance (UK GDPR Art 6(1)(b)).
• To improve the site, measure traffic, and run advertising — consent (UK GDPR Art 6(1)(a)), which you give or refuse through the cookie banner.
• To meet our legal obligations (tax records, fraud prevention) — legal obligation (UK GDPR Art 6(1)(c)).
• To respond to your enquiries — legitimate interests (UK GDPR Art 6(1)(f)).

We only share your data with service providers who help us run the site, and only what they need to do their job:

• Neon — our database provider (EU region).
• Vercel — our hosting provider.
• Cloudflare R2 — storage for your uploaded artwork.
• mxroute — sends transactional emails (order updates, sign-in).
• PayPal and SumUp — process payments.
• Google (Analytics, Ads) and Meta (Facebook Pixel) — measure traffic and run ads. Only loaded if you accept the relevant cookie categories.
• Royal Mail / our courier — delivers your order.

We never sell your personal data and never share it for purposes unrelated to running the site.

Some of our service providers (e.g. Google, Meta) are based outside the UK. Where data leaves the UK, we rely on the UK Adequacy Regulations and / or Standard Contractual Clauses to keep it protected to the same standard.

• Order records: 6 years after the order date (HMRC requirement).
• Uploaded artwork: up to 12 months after dispatch, then deleted.
• Account: until you ask us to delete it.
• Sign-in codes: 15 minutes.
• Marketing cookies: as set by each provider — see our cookie policy.

Under UK GDPR you can ask us to:

• Tell you what data we hold about you.
• Correct anything that's wrong.
• Delete your data (where we don't have a legal reason to keep it).
• Limit how we use your data.
• Send you a copy in a portable format.
• Object to us using your data for marketing.
• Withdraw any consent you've given.

Email info@printmatic.co.uk to exercise any of these. We'll respond within one month.

If you're not happy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

The site is not aimed at children under 16. We don't knowingly collect data from them. If you believe a child has provided us data, please contact us so we can delete it.

If we change this policy, we'll update the "Last updated" date at the top. For significant changes we'll display a notice on the homepage.