GDPR Privacy Notice
Document prepared on 26 July 2026
DESIGN&PRINT; is the controller for personal data collected through the designandprint.studio website, client portal, quote, invoice, artwork approval and upload workflows. Contact: hello@designandprint.studio.
Personal Data We Process
-
Identity and contact details: company name, client name, email address, phone number and postal addresses.
-
Order and project data: quote/invoice references, product details, artwork links, proof notes, order status, payment status and correspondence records.
-
Artwork approval data: approval response, amendment notes, uploaded files, version links, signature/name confirmation and timestamps.
-
Technical data: access tokens in links, portal session cookies, login/session records and basic request data processed by Wix functions.
-
Supplier/product and timesheet information used to run the business and fulfil orders
Why We Use Personal Data
Preparing quotes, invoices and artwork proofs
Lawful basis normally relied on: Contract or steps before entering a contract.
Managing client artwork approval and amendments
Lawful basis normally relied on: Contract and legitimate interests in keeping accurate approval
records.
Taking payments and recording payment status
Lawful basis normally relied on: Contract and legal obligation for accounting records.
Responding to enquiries and service messages
Lawful basis normally relied on: Contract, consent or legitimate interests depending on the enquiry.
Maintaining backups and security records
Lawful basis normally relied on: Legitimate interests and legal obligation where records are accounting-related.
Who We Share Data With
Data may be processed by Wix, SendGrid, Stripe, QuickBooks/Intuit and Google Drive/Apps Script where those services are required to host the site, store records, send emails, process payments, manage accounts, or store artwork files. Data is not sold.
International Transfers
Some service providers may process data outside the UK or EEA. DESIGN&PRINT; should rely on the providers' published transfer safeguards, data processing terms and standard contractual clauses where applicable.
How Long We Keep Data
Order, invoice and accounting records should be retained for the period required for tax/accounting obligations. Artwork proofs, uploads and backups should be kept only for as long as needed to complete the order, handle disputes, maintain business records or restore the system. Exact live retention periods should be confirmed and kept under review.
Your Rights
-
Request access to your personal data.
-
Ask for inaccurate data to be corrected.
-
Ask for data to be erased where there is no legal or business reason to retain it.
-
Object to or restrict certain processing.
-
Request portability where applicable.
-
Withdraw consent where processing is based on consent.
-
Complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.
Security
The site uses private admin/workflow access controls, signed session cookies, tokenised customer links, Wix Secrets for credentials, restricted admin backup/restore pages and third-party platforms with their own security controls. These measures should be supported by good staff password practice and restricted Drive/Wix account access.
Official References
ICO, Guide to the UK GDPR - transparency and the right to be informed: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/right-to-be-informed/
ICO, Security principle and data security guidance:
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/security/
ICO, Cookies and similar technologies under PECR: https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/cookies-and-similar-technologies/
European Commission, Cookies and EU/ePrivacy information: https://commission.europa.eu/cookies_en
European Data Protection Board, Guidelines 05/2020 on consent under GDPR: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-052020-consent-under-regulation-2016679_en
