Privacy notice

Who we are

This portal is provided by PrintPlus UK Limited (“PrintPlus”, “we”), a commercial printer based in Bradford, West Yorkshire. PrintPlus is the data controller for the personal data described below. For any privacy question or to exercise your rights, contact us at privacy@printplusuk.com.

What we collect

• Account details: your name, work email address, your organisation, and your role.
• Sign-in details: your password, which is stored only in scrambled (hashed) form that nobody at PrintPlus can read, and the time you last signed in.
• Order activity you create or that relates to your organisation: artwork files you upload, proof decisions, notes, and the timestamps of those actions.
• Technical data needed to keep the service secure and working (such as your session cookie).

Why we use it, and our lawful basis

We process this data to operate the portal for you and your organisation — showing your orders, their progress, and the documents and proofs attached to them — and to send you transactional updates about your jobs. Our lawful basis is the performance of our contract with your organisation and our legitimate interest in running an accurate, auditable production service. The weekly digest is optional and you can unsubscribe from it at any time using the link in the email; you will still receive essential order updates.

Who we share it with

We use trusted processors to run the service: Supabase (database, sign-in and file storage), Railway (application hosting), Resend (transactional email), Google (our order mailbox and the archive of finished jobs’ files), Intuit QuickBooks (invoicing), FedEx (shipping your deliveries), PrintNode (sending job sheets and labels to our printers) and OpenAI (reading the purchase orders you send us, and an assistant our staff use to look up order details). They process data only on our instructions. Our database and file storage are held in the EU (Ireland); some of these processors are based outside the UK, including in the United States. We do not sell your personal data.

How long we keep it

We retain order records and their audit trail for as long as needed to fulfil and account for the work, and to meet our legal and tax obligations. When you ask us to erase your personal data, we anonymise your account — your name and email are removed and your sign-in access is revoked — while preserving the integrity of the order audit trail (who approved which proof, and when) in anonymised form.

Your rights

Under UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, and to data portability. To exercise any of these, email privacy@printplusuk.com and we will respond within one month. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).