Privacy Policy

1. Introduction

Welcome to Presswift ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our printing services.

2. Information We Collect

3. How We Use Your Information

We use the information we collect to:

• Process and fulfil your printing orders
• Communicate with you about your orders and provide customer support
• Send you marketing communications (with your consent)
• Improve our website and services
• Detect and prevent fraud or unauthorised access
• Comply with legal obligations
• Process payments securely through our payment processor (Stripe)

4. Payment Processing

We use Stripe as our payment processor. When you make a purchase, your payment information is transmitted directly to Stripe and is not stored on our servers. Stripe's handling of your payment information is governed by their Privacy Policy. We receive only limited information necessary to complete your order (such as the last 4 digits of your card and transaction confirmation).

5. Information Sharing and Disclosure

We share your information only with the following categories of recipients, all of whom act as data processors under our instructions and are bound by appropriate data protection agreements:

• Stripe — payment processing
• Supabase — application database, authentication and file storage (including uploaded artwork)
• Vercel — website hosting, performance monitoring (Vercel Speed Insights) and basic visit measurement (Vercel Analytics)
• Postmark — sending transactional emails such as order confirmations, shipping updates and quote responses
• Google — website analytics (Google Analytics 4) and advertising attribution (Google Ads), only where you have consented via our cookie banner
• Shipping carriers — to deliver your printed orders to the address you provide
• Printing partners — where a third-party printer fulfils part of an order on our behalf
• Legal authorities — when required by law or to protect our rights, property or safety
• A successor entity — in connection with a merger, sale of company assets or acquisition

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. These include encryption in transit (HTTPS), encryption at rest in our hosted database, access controls, and regular security review. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Order information is typically retained for 7 years for tax and accounting purposes. Uploaded artwork files are retained for 90 days after order completion to facilitate reorders.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your information in a portable format
• Opt-out: Unsubscribe from marketing communications
• Object: Object to certain processing of your information

To exercise these rights, please contact us at privacy@presswift.com

9. Cookies, Tracking and Third-Party Analytics

We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings or via our cookie banner. For more information, please see our Cookie Policy.

Google Analytics 4 (GA4). We use GA4, a web analytics service provided by Google LLC, to understand how visitors use our site so we can improve it. GA4 sets cookies on your device and processes information including your IP address (truncated by Google), pages viewed, time on page, and approximate location. We have configured Google Consent Mode v2 so that no GA4 cookies are set or data sent to Google until you accept cookies via our cookie banner. You can change your choice at any time by clicking the Cookie Settings link in the footer of every page, which re-opens the banner. Withdrawing consent is just as easy as giving it.

Enhanced Conversions for Google Ads. If you consent to advertising cookies, we may share hashed (SHA-256) versions of personal data you provide to us — such as your email address at checkout — with Google so that Google Ads can accurately attribute conversions back to ad clicks. Google receives only the hashed values and does not learn your raw email address from this process. This feature is disabled entirely unless you accept advertising cookies.

Google acts as a data processor (and in some cases a joint controller) for these flows. Personal data may be transferred to Google servers in the United States and other countries; Google applies Standard Contractual Clauses approved by the UK Information Commissioner's Office to ensure your data is protected to UK GDPR standards.

10. International Data Transfers

Some of our processors (Stripe, Supabase, Vercel, Postmark and Google) operate servers outside the United Kingdom and the European Economic Area, including in the United States. Where your personal data is transferred outside the UK, we rely on the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision recognised by the UK Information Commissioner's Office to ensure your data continues to be protected to UK GDPR standards.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. AI Phone Line

We operate an AI-powered customer service phone line. When you call us:

• Calls may be recorded and transcribed for service quality. You can opt out at any point during the call by saying “no recording”.
• To answer questions about your order, we ask you to confirm your order number and postcode. This is matched against our records.
• Recordings and transcripts are deleted after 90 days. Anonymised metadata (call time, duration, outcome) is retained for 6 years to meet UK accounting record-keeping requirements.
• You can request a copy of your call records at any time via your account’s data export, or by emailing support@presswift.com.

Sub-processors used by the AI phone line

We rely on the following service providers, all of whom process data under UK GDPR-adequate transfer mechanisms (Standard Contractual Clauses):

• Twilio — UK telephony (number, call routing).
• Vapi — voice agent orchestration and call recording storage.
• ElevenLabs — text-to-speech.
• Anthropic — large language model (Claude).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last updated” date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us: