Privacy policy

Last updated: 2026-08-30

This Privacy Policy explains how GiftsToPrint ("we", "us", "our") collects, uses, and protects your personal information when you use our website at https://giftstoprint.com (the "Site") or purchase our products.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and equivalent privacy laws in the United States, Canada, and Australia where applicable.

1. Who We Are

Data Controller:

GiftsToPrint, operated by Black Lotus Designs Ltd
Company Registration Number: 08509966
Registered Address: Registered with Companies House. Full registered details are available at https://find-and-update.company-information.service.gov.uk by company number 08509966.
Email: hello@giftstoprint.com

2. Information We Collect

When you purchase from or interact with GiftsToPrint, we may collect:

Information you provide directly:

  • Name and contact details (email address, billing address)
  • Payment information (processed securely by Shopify Payments, so we never see your full card number)
  • Personalization details for your poster (recipient's name, year, personal message, occasion)
  • Photos you upload for inclusion in your poster
  • Any other information you choose to share via email or contact forms

Information collected automatically:

  • Browser type, device, IP address, and approximate geographic location
  • Pages viewed, time on site, and navigation patterns
  • Referring website or search engine
  • Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Information

We use your personal data to:

  • Process and fulfil your order, including creating your personalized poster
  • Deliver your finished poster via secure download link
  • Communicate with you about your order (confirmations, delivery, revisions)
  • Respond to your questions and provide customer support
  • Send order-related transactional emails via our email service provider
  • Invite you to review your experience after your order is delivered
  • Improve our website, products, and customer experience
  • Detect and prevent fraud
  • Comply with our legal obligations

We do not sell your personal information to third parties, and we do not use your data for unrelated marketing without your explicit consent.

4. Photo Uploads

If you upload a photo as part of your poster personalization:

  • We use your photo solely to create your personalized poster. It is not used for any other purpose.
  • Photos are stored securely on our designer's working systems and on our Dropbox-hosted delivery infrastructure.
  • We retain uploaded photos only as long as reasonably necessary to complete your order, handle revisions, and respond to support queries, typically up to 12 months from order date.
  • We do not share, sell, or use your photos for marketing, training AI models, or any other purpose.
  • You may request deletion of your uploaded photo at any time by emailing hello@giftstoprint.com.

5. Legal Basis for Processing (UK GDPR)

We process your data under the following lawful bases:

  • Contract: To fulfil your order and provide the services you've purchased
  • Legitimate interests: To improve our products, prevent fraud, invite reviews, and operate our business
  • Consent: For optional cookies and marketing communications (where applicable)
  • Legal obligation: To comply with tax, accounting, and regulatory requirements

6. Third Parties Who Help Us Deliver Our Service

We share necessary information with the following service providers, each contractually bound to protect your data:

  • Shopify Inc.: E-commerce platform, payments, hosting
  • Shopify Payments / Stripe: Payment processing
  • Resend: Transactional email delivery (order emails)
  • Judge.me: Product reviews collection (only if you submit one)
  • Trustpilot: Independent review platform. Receives your name, email address and order number so it can invite you to review your experience. It does not receive uploaded photos or your download link.
  • Dropbox: Secure delivery of finished poster files
  • Cloudflare: Website performance and security
  • Google Analytics 4: Anonymous traffic analysis
  • Shopify Catalog / Agentic Storefronts: Product discovery via AI assistants (ChatGPT, Microsoft Copilot, Google Gemini)

All providers are vetted for compliance with relevant data protection laws.

Trustpilot is an independent review platform. Any review you leave is published on trustpilot.com and is governed by Trustpilot's own terms and privacy policy. We cannot edit or remove reviews. Review invitation emails include an unsubscribe link, which you can use at any time to stop receiving them.

7. International Data Transfers

Some of our service providers are based in the United States, the European Economic Area, or other countries outside the UK. Where we transfer your data internationally, we rely on:

  • Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
  • Adequacy decisions where they apply
  • Other legally appropriate safeguards

8. Cookies and Tracking

Our site uses cookies for:

  • Essential cookies: Required for the site, cart, and checkout to function
  • Analytics cookies: Google Analytics 4 to understand how visitors use the site (anonymous, aggregated)
  • Functional cookies: Remembering your country/currency preferences

You can manage cookie preferences through your browser settings. Blocking essential cookies may prevent the cart and checkout from working.

9. Data Retention

We retain your personal data only as long as necessary:

  • Order details: 7 years (UK tax law requires this)
  • Uploaded photos: Up to 12 months from order date
  • Marketing data: Until you unsubscribe (if you've opted in)
  • Account data: Until you request deletion or your account becomes inactive for 3+ years

10. Your Rights

Under UK GDPR and equivalent laws, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your data ("right to erasure"), subject to our legal obligations
  • Restrict or object to certain processing
  • Portability, meaning you can receive your data in a machine-readable format
  • Withdraw consent at any time (where consent is the legal basis)
  • Lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk

US (California) residents have additional rights under the CCPA; Canadian and Australian customers have equivalent rights under PIPEDA and the Australian Privacy Principles.

To exercise any of these rights, email hello@giftstoprint.com.

11. Security

We use industry-standard security measures including TLS encryption, secure hosting (Shopify), and limited internal access to customer data. While we work hard to protect your information, no system is perfectly secure. We cannot guarantee absolute security, but we promptly notify customers of any breach affecting their data, where required by law.

12. Children's Privacy

GiftsToPrint is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@giftstoprint.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via email (for active customers) or a notice on this page.

14. Contact Us

Questions, requests, or complaints about this Privacy Policy or how we handle your data:

Email: hello@giftstoprint.com
Registered address: Registered with Companies House. Full registered details are available at https://find-and-update.company-information.service.gov.uk by company number 08509966.