Who we are
Dunprint is run by Oleh Dyshliuk, 81 Caithness Rd, East Kilbride, Glasgow G74 3JQ. We are the controller of the personal data described in this notice. For anything to do with your data, email [email protected].
What we collect and why
| What we collect | Why, and our lawful basis |
|---|---|
| Order details: your name, email, phone number (if you give one), delivery address, the items and sizes you choose, and the names you add for the back of each shirt (other people's names too, when you order for a group) | To make, send and support your order, and to email you about it. Lawful basis: contract |
| Payment details | Payments are handled by Stripe. We never see or store your full card number; we only get confirmation that you've paid. Lawful basis: contract |
| Your designs: the text you type, your descriptions for AI designs, and the designs you save | To create, show and print your design. Lawful basis: contract, and legitimate interests (running the designer) |
| Your email address, if you give it to keep designing or to hear from us | To lift the design limit for you and, only if you tick the box, to send you offers and news. Every email has an unsubscribe link. Lawful basis: legitimate interests; consent for marketing emails |
| Messages you send us | To answer you and sort out any problem. Lawful basis: legitimate interests |
| Technical data: an anonymous visitor ID, a scrambled (hashed) version of your IP address, browser type | To keep your saved designs on your device, prevent abuse, apply fair-use limits and keep the site secure. Lawful basis: legitimate interests |
| Analytics and advertising data: pages visited, the ad that brought you here, purchases | To see which pages and ads work. Only if you accept analytics or marketing cookies. Lawful basis: consent |
If you accept marketing cookies and then place an order, we also send the purchase to Meta from our server (the Meta Conversions API) so it can be matched to an ad you saw. Your email, phone, name and address are hashed (turned into a one-way code) before they leave us. Without marketing consent, we don't send this.
Advertising and analytics tags never run on pages that show your personal details: your order page (apart from the moment you land on it straight after paying, when we record the purchase: its value, number of items and order reference only), the group organiser page, checkout, and anything opened from a private link. They are also set up not to read what you type into forms.
Please don't put personal details, such as full names with addresses or anything sensitive, into AI design descriptions: they are sent to our AI provider to create the design.
Who we share it with
We only share what each provider needs to do its job, and we never sell your personal data.
- Stripe: takes your payment. Stripe also uses some payment data for its own fraud prevention, as a separate controller.
- Anthropic: its AI model, Claude, creates AI designs from your description.
- Royal Mail: delivers your parcel, so it gets your name, address and, for tracking updates, your email or phone number.
- Our hosting and email providers: run the website and database, and send order emails (Resend).
- Google, Meta and TikTok: analytics and advertising, only if you accept those cookies.
- Professional advisers and authorities, such as our accountant or HMRC, when the law requires it.
Some of these providers store or process data outside the UK, for example in the United States. When that happens, your data is protected by UK adequacy regulations or the ICO's approved data transfer contracts.
How long we keep it
- Orders and invoices: 6 years, because HMRC requires it.
- Saved designs that never became an order: 24 months.
- Your email for marketing: until you unsubscribe.
- An email you gave only to keep designing (no marketing): 24 months.
- Server logs: 30 days.
- Cookies: see our cookie policy for how long each one lasts.
Your rights
Under UK data protection law (UK GDPR) you can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that's wrong
- delete your data, where we don't need to keep it (for example, for tax records)
- restrict or object to how we use it, including stopping marketing at any time
- send your data to you or another company in a machine-readable format
You can withdraw consent at any time: change your cookie choices with the “Cookie settings” link at the bottom of every page, or unsubscribe from emails. Email [email protected] to use any of your rights. We'll reply within one month. We don't make decisions about you based only on automated processing.
Complaints
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Children
You need to be 18 or over to place an order. We sell kids' sizes, but orders must be placed by an adult, and we don't knowingly collect personal data from children.
Keeping your data safe
The site runs over an encrypted connection (HTTPS), card details go straight to Stripe and never touch our servers, and only the people who make and manage your order can see it.
Changes to this notice
If we change how we use personal data, we'll update this page and the date at the top. For big changes we'll tell you by email if we have your address.