Privacy Policy

Last updated: 15 January 2026

1. Overview

Pick a Printer ("we", "us", "our") operates the website pickaprinter.com (the "Site"). This Privacy Policy explains what personal information we collect from visitors, how we use it, and the rights you have under applicable privacy laws — including the General Data Protection Regulation (GDPR) in the EU/UK and the California Consumer Privacy Act (CCPA) in the United States.

We are committed to processing the minimum amount of personal information necessary to operate the Site and provide the services you request. We do not sell your personal information to third parties.

2. Information we collect

2.1 Information you provide directly

When you complete our contact or newsletter form, we collect the information you enter: name, email address, optional phone number, service of interest, subject and message body. We collect only what is strictly needed to respond to your enquiry or send you the newsletter you requested.

2.2 Information collected automatically

When you visit the Site, our servers and our analytics providers automatically collect certain technical information:

Internet Protocol (IP) address (truncated where legally required)
Browser type, version and language
Operating system and device type
Referring website (how you found us)
Pages visited, time spent on each page, click paths
Date and time of your visit

2.3 Information from cookies

We use first- and third-party cookies. Section 5 covers cookies in detail; the Cookie Policy is the authoritative reference.

3. How we use your information

We process personal information for the following purposes, each with the legal basis set out in parentheses:

To respond to enquiries you send us (performance of a contract or legitimate interest)
To deliver the newsletter you subscribed to (consent — you can unsubscribe any time)
To provide the services you buy from us (contract)
To analyse Site usage and improve our content (legitimate interest, subject to your cookie choice)
To detect and prevent fraud, abuse, or security incidents (legitimate interest)
To comply with legal obligations (legal obligation)

We share personal information only with the following categories of recipients, and only to the extent necessary:

Service providers — hosting (Vercel), email delivery (Postmark), analytics (Plausible), payment (Stripe). Each is contractually bound to protect your data and use it only for the services we've engaged them for.
Professional advisers — accountants, lawyers, auditors where required.
Law enforcement or courts — where required by law or valid legal process.
Acquirers — in the event of a merger, acquisition or sale of assets, subject to the new entity honouring this policy.

We never sell or rent your personal information.

5. Cookies & tracking

We use essential cookies to make the Site work (session, security), and — with your consent — analytics cookies (Plausible, which is privacy-respecting and cookieless by default). We do not use advertising or cross-site tracking cookies. You can manage your preferences at any time via the cookie banner or your browser settings. See our full Cookie Policy.

6. Your rights

Under GDPR (EU/UK) and similar laws, you have the right to:

Access the personal information we hold about you
Rectify inaccurate personal information
Erase your personal information ("right to be forgotten")
Restrict our processing of your personal information
Object to processing based on legitimate interest
Portability — receive your data in a machine-readable format
Withdraw consent at any time, where processing is based on consent
Complain to the relevant data protection authority (in the EU, your local DPA; in the UK, the ICO)

Under the CCPA, California residents additionally have the right to know what personal information we collect, request deletion of personal information, and not be discriminated against for exercising these rights.

To exercise any of these rights, email [email protected]. We respond within 30 days.

7. Data retention

We keep personal information only as long as necessary for the purpose it was collected:

Contact form submissions — 24 months after last correspondence
Newsletter subscribers — until you unsubscribe, then 30 days for suppression
Analytics data (aggregated) — 24 months
Records required by law (invoices, tax records) — 7 years

8. Security

We use industry-standard technical and organisational measures to protect your personal information: TLS encryption in transit, encryption at rest for sensitive data, principle-of-least-privilege access controls, mandatory two-factor authentication for team members, quarterly penetration testing and annual staff privacy training. However, no method of transmission or storage is 100% secure; we can never guarantee absolute security.

9. Children

The Site is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy here with a new "Last updated" date. Material changes will be communicated by email (to subscribers) or a prominent notice on the Site.

11. Contact

For any question about this Privacy Policy or your personal information:

Email: [email protected]
Post: Pick a Printer, Attn: Data Protection, 128 Print Ave, Suite 400, Brooklyn, NY 11201, USA