Privacy Policy

This policy explains what personal information Sixprint collects, why, who we share it with, how long we keep it, and the rights you have over it. We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are

Sixprint is the "controller" of your personal information, which means we decide how it's used and we're responsible for looking after it.

Sixprint (James Townsend, trading as Sixprint)
Unit 7 Trannack Mill Industrial Estate
Coverack Bridges
Helston, Cornwall
TR13 0SW

Email: info@sixprint.co.uk
Phone: 01326 574584
VAT No: 113175254

2. What We Collect

2.1 Information you give us

• Contact details: your name, email address, phone number, billing and delivery addresses, and business name if you give one.
• Account details: your login email and password (we store only a scrambled "hash" of your password, never the password itself), plus the profile details you choose to add, such as your website, social media links and logo.
• Your artwork and designs: the images you upload to your library, the designs you create, and the print files we make from them.
• Orders: what you ordered, quantities, paper choices, delivery method, order notes and order history.
• Payments: payment is handled by Stripe. We see the payment status and amount, but we never see or store your full card details.
• Messages: anything you send us through our contact form, by email or by phone.
• Marketing choices: whether you've signed up to our newsletter.

2.2 Information collected automatically

• Server logs: when you visit, our web server records your IP address, the page requested, the date and time and your browser type. We use these to keep the site secure and fix problems.
• Analytics: only if you click "Accept" on our cookie banner, Google Analytics records how you use the site, such as the pages you visit and the device you use. See our Cookie Policy.
• Spam protection: our contact form and account registration form use Google reCAPTCHA, which looks at how the page is used to tell people from automated spam.

3. Why We Use It, and Our Legal Basis

The law requires us to have a valid reason (a "lawful basis") for each way we use your information:

• To take, make and deliver your orders, including storing your artwork so it prints correctly, and sending order and delivery emails.
  Basis: contract. We need this to provide what you've asked for.
• To run your account, including your image library, saved designs and reorder catalogue.
  Basis: contract.
• To keep tax and accounting records, such as invoices and VAT records.
  Basis: legal obligation (HMRC requires us to keep these).
• To answer your questions and provide customer support.
  Basis: legitimate interests (replying to people who contact us), or contract if it's about an order.
• To keep the website secure and prevent fraud and spam, using server logs and reCAPTCHA.
  Basis: legitimate interests (protecting our customers and our business).
• To understand how the website is used, through Google Analytics.
  Basis: consent. Analytics only runs if you click "Accept", and you can change your mind at any time using "Cookie Settings" at the bottom of every page.
• To send our newsletter and offers.
  Basis: consent. We only send marketing emails if you've opted in, and every email has an unsubscribe link.
• To show your work in our portfolio or marketing.
  Basis: consent. We'll always ask first.

Where we rely on legitimate interests, we've checked that our interest isn't outweighed by your rights. You can object at any time (see section 8).

3.1 Do you have to give us your information?

To place an order we need your name, email address and a delivery address, and payment through Stripe. Without them we can't take or deliver the order. Everything else, such as profile details, a logo or newsletter sign-up, is optional.

3.2 Automated decisions

We don't make any decisions about you using purely automated means that have legal or similarly significant effects.

4. Who We Share It With

We never sell your personal information. We share it only with carefully chosen service providers who help us run Sixprint. They act on our instructions, can only use it to provide their service to us, and must keep it secure:

• Our payment provider, Stripe, to take card payments. Card details go straight to Stripe and never reach us.
• Email service providers, to send order and account emails, replies to your messages, and our newsletter if you've signed up.
• Secure cloud storage providers, to store your uploaded images, designs and print files, and to keep backups of our records.
• Production and order-management tools, so our team can make, track and dispatch your order.
• Delivery companies, such as Royal Mail, to deliver your order and send tracking updates.
• Accounting software, to create invoices and keep our tax records.
• Website service providers, for website hosting, spam protection on our forms, website fonts, the map on our contact page (only if you choose to show it), and website analytics (only if you accept analytics cookies).

If you'd like the names of the companies we use, just ask and we'll tell you. We may also share information if the law requires it, for example with HMRC or the police, or to protect our rights.

5. Transfers Outside the UK

Some of the companies above are based in, or store data in, the European Union, the USA or elsewhere outside the UK. When your information leaves the UK, it's protected in one of these ways:

• the destination is covered by UK "adequacy regulations" (for example the European Economic Area, or US companies certified under the UK Extension to the EU-US Data Privacy Framework), or
• the provider's data processing terms include the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

You can ask us for more detail about any transfer.

6. How Long We Keep It

• Your account, image library and saved designs: while your account is open, so you can reorder. You can delete images and designs yourself at any time, or ask us to close your account.
• Orders, invoices and payment records: 6 years from the end of the financial year they relate to, because HMRC requires it.
• Contact-form messages: 12 months, unless they become part of an order.
• Server and security logs: up to 90 days.
• Database backups: up to 30 days, after which each backup is deleted automatically.
• Newsletter: until you unsubscribe.
• Google Analytics: up to 14 months, and only for visitors who accepted analytics cookies.

7. How We Protect It

• The whole website uses HTTPS encryption.
• Passwords are stored only as secure hashes, and card details never touch our systems.
• Only the Sixprint team can access customer information, through password-protected admin accounts.
• Your account only ever shows your own orders, images and designs.
• Data is backed up regularly so it isn't lost.

No system is perfectly secure, but we review our security regularly. If a breach ever put your information at serious risk, we would tell you and the Information Commissioner's Office (ICO) as the law requires.

8. Your Rights

You have the right to:

• Access: ask for a copy of the personal information we hold about you.
• Rectification: ask us to correct anything that's wrong or incomplete. You can update most details yourself in your account.
• Erasure: ask us to delete your information. We'll delete everything we're not legally required to keep, such as tax records.
• Restriction: ask us to pause using your information in certain situations.
• Portability: ask for information you gave us in a common, machine-readable format.
• Object: object to us using your information on the basis of legitimate interests. You can always object to marketing, and we'll stop.
• Withdraw consent: for anything based on consent (analytics, newsletter, portfolio use), at any time. This doesn't affect what we did before you withdrew it.

9. Children

Our services aren't intended for children under 16, and we don't knowingly collect their information. If you think we have, please contact us and we'll delete it.

10. Cookies

We use a small number of cookies. Analytics cookies are only set if you accept them. See our Cookie Policy for the full list, and use "Cookie Settings" at the bottom of any page to change your choice.

11. Other Websites

Our site links to other websites, such as social media and payment pages. Their privacy practices are their own, so please check their policies.

12. Changes to This Policy

We'll update this page when our practices change, and change the date at the top. If a change significantly affects how we use your information, we'll also tell account holders by email.

13. Complaints

If you're unhappy with how we've handled your information, please tell us first and we'll try to put it right:

Email: info@sixprint.co.uk
Phone: 01326 574584

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113