Privacy Policy

1. Data Collection

• Identity & Contact: Name, email, billing/shipping address, phone
• Orders & Payments: Order details, amounts, payment status (processed via EuPago and Mollie—card data is not stored)
• Technical: IP address, browser/device information, necessary cookies, and security logs. Optional analytics data is collected only after consent.
• Communications: Support emails and messages

2. Purpose of Data Processing

• Fulfill orders & deliver prints (GDPR Art. 6(1)(b) – contract)
• Invoicing & legal stuff (Art. 6(1)(c) – legal requirement)
• Security, fraud prevention, and service reliability (Art. 6(1)(f) – legitimate interest)
• Analytics, marketing, or optional cookies (Art. 6(1)(a) – with your consent)

3. Data Sharing

Only when necessary:

• Payment processing: EuPago, Mollie
• Hosting: Vercel (storefront) and Railway (commerce backend)
• Email: Resend for transactional messages and for newsletters or marketing you request
• Optional analytics: Google Analytics and Vercel Web Analytics, only after consent
• Reliability monitoring: Better Stack, when configured, for application errors and operational logs

Some providers are outside the EEA. Appropriate safeguards are used where required.

4. Data Retention

• Orders & invoices: Up to 10 years (legal requirement)
• Account & support data: As long as needed for service or legal compliance
• Cookies: Based on your preferences

5. Your Rights

You can request: access, corrections, deletion, restrictions, data portability, or object to processing. You can withdraw consent anytime.

6. Cookies

Necessary cookies keep the cart, checkout, security, and your consent choice working. Analytics is off by default and loads only after you select “Allow analytics.” You can change that choice at any time using “Cookie preferences” in the footer. Browser settings can also remove stored cookies.

7. Security

HTTPS, access controls, and organizational measures are used to protect data. No system is 100% secure.