Privacy Policy

Last updated: January 2025

At Sixprint, we are committed to protecting your privacy and ensuring your personal data is handled securely and transparently. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the General Data Protection Regulation (GDPR) and UK data protection laws.

1. Who We Are

Sixprint
Unit 7 Trannack Mill Industrial Estate
Coverack Bridges
Helston, Cornwall
TR13 0SW

Contact: info@sixprint.co.uk
Phone: 01326 574584
VAT No: 113175254

2. What Personal Data We Collect

We collect and process the following types of personal data:

2.1 Information You Provide to Us

• Contact Details: Name, email address, telephone number, delivery address
• Order Information: Product specifications, artwork files, order history, payment information
• Communication Records: Emails, phone calls, messages, and any correspondence with our team
• Account Information: Username, password (encrypted), preferences (if you create an account)
• Marketing Preferences: Newsletter subscriptions, consent for marketing communications

2.2 Information We Collect Automatically

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on site, links clicked, referring websites
• Cookies: See our Cookie Policy for detailed information

3. Legal Basis for Processing Your Data

We process your personal data under the following legal bases as defined by GDPR:

3.1 Contractual Obligation

When you place an order with Sixprint, we need your personal data to:

• Process and fulfil your order
• Communicate with you about your order status
• Arrange delivery or collection
• Process payments (via PCI DSS compliant third-party providers)
• Store artwork files for production and potential reprints

3.2 Consent

With your explicit permission, we may:

• Send you marketing emails, newsletters, and promotional offers
• Contact you about new products or services
• Use your project images in our portfolio or marketing materials

You can withdraw consent at any time by emailing us or using the unsubscribe link in our emails.

3.3 Legal Compliance

We retain certain data when required by law, including:

• Tax records and invoices (retained for 6 years as required by HMRC)
• VAT records and transaction details
• Compliance with legal obligations or court orders

3.4 Legitimate Interest

We process some data based on our legitimate business interests, such as:

• Improving our website and services
• Preventing fraud and ensuring security
• Analyzing site usage to optimize user experience
• Managing customer relationships and providing support

Your rights and interests are always considered and protected when we rely on legitimate interest.

4. How We Use Your Personal Data

We use your personal data for the following purposes:

• Order Processing: To fulfill your printing orders, communicate delivery status, and provide customer support
• Payment Processing: To securely process payments through trusted third-party providers (we do not store full card details)
• Communication: To respond to inquiries, provide quotes, and keep you informed about your orders
• Marketing: To send promotional offers and newsletters (only with your consent)
• Website Improvement: To analyse usage patterns and improve functionality
• Legal Compliance: To comply with tax, accounting, and legal requirements
• Fraud Prevention: To protect against fraudulent orders and ensure security

5. How We Share Your Data

We never sell your personal data. We only share your information with trusted third parties when necessary to provide our services:

5.1 Service Providers We Work With

• Courier Services: DPD, Royal Mail, or other delivery partners (we share your name and delivery address)
• Payment Processors: Stripe (PCI DSS compliant - they handle payment details securely)
• Email Service Providers: Brevo (formerly Sendinblue) for newsletters and transactional emails (only if you've subscribed)
• Accounting Software: Xero, QuickBooks, or similar for invoicing and tax compliance
• Website Analytics: Google Analytics to understand site usage (anonymized where possible)
• Cloud Storage: Secure servers for storing artwork files and order data

5.2 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety.

6. How Long We Keep Your Data

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Order Data: Retained indefinitely to facilitate reprints and customer service. Artwork files are stored to allow easy reordering.
• Tax and Accounting Records: Retained for 6 years as required by UK tax law (HMRC)
• Marketing Emails: Retained until you unsubscribe or request deletion
• Website Analytics: Typically retained for 26 months (Google Analytics default)
• Inactive Accounts: If you create an account but don't use it for 3+ years, we may contact you before deleting

You can request data deletion at any time (subject to legal retention requirements).

7. Your Rights Under GDPR

Under GDPR and UK data protection law, you have the following rights:

7.1 Right to Access

You can request a copy of all personal data we hold about you.

7.2 Right to Rectification

You can ask us to correct inaccurate or incomplete data.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, except where we must retain it for legal reasons (e.g., tax records).

7.4 Right to Restrict Processing

You can ask us to limit how we use your data in certain circumstances.

7.5 Right to Data Portability

You can request your data in a structured, machine-readable format to transfer to another service provider.

7.6 Right to Object

You can object to processing based on legitimate interest or for marketing purposes.

7.7 Right to Withdraw Consent

Where we rely on consent, you can withdraw it at any time without affecting prior lawful processing.

8. Data Security

We take data security seriously and implement appropriate measures to protect your personal information:

• Encryption: Our website uses HTTPS/SSL encryption for secure data transmission
• Secure Servers: Data is stored on secure, password-protected servers
• Access Controls: Only authorized personnel have access to personal data
• Regular Backups: Data is backed up regularly to prevent loss
• PCI Compliance: Payment data is handled by PCI DSS compliant processors
• Staff Training: Our team is trained on data protection best practices

While we take every precaution, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to protect your data.

9. International Data Transfers

Your data is primarily stored and processed within the UK. If we use service providers based outside the UK/EU, we ensure they:

• Operate in countries with adequate data protection laws, or
• Have appropriate safeguards in place (e.g., Standard Contractual Clauses)

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

11. Cookies and Tracking Technologies

We use cookies to improve your experience on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Third-Party Websites

Our website may contain links to third-party websites (e.g., social media, payment providers). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing personal data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email if you have an account or are subscribed to our newsletter
• Display a prominent notice on our website

We encourage you to review this policy periodically.

14. Complaints and Concerns

If you have any concerns about how we handle your personal data, please contact us first:

Email: info@sixprint.co.uk
Phone: 01326 574584

If you are not satisfied with our response, you have the right to lodge a complaint with the UK data protection authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113