Privacy Notice
How fPrint (Four Point Digital Limited) collects, uses and protects your personal data, who we share it with, how long we keep it and your rights under UK data protection law.
Last updated 13 October 2026
Who we are
fPrint is a trading name of Four Point Digital Limited, a company registered in England and Wales (company number 12573128, registered office Vision Accounting, Fortis House, Cothey Way, Ryde, Isle of Wight, PO33 1QT). We are the controller of the personal data described in this notice, which means we decide how it is used. For any question about your data, or to use your rights, email hello@fprint.co.uk.
What we collect
- When you order: your name, email address, delivery address, phone number and company name if you give them, a purchase order number if you add one, how you heard about us if you tell us, the artwork files you upload, your proof approvals, and the details of what you ordered and paid.
- When you claim the charity discount: your organisation's type, name and registration number, and the result of our check against the public register.
- When you save your details or sign in: your name, email address, company, phone number and default delivery address. You sign in with a one-time link we email you; we record the time and the IP address it was requested from.
- When you save your basket: your email address and the contents of your basket, and whether you asked for a reminder.
- When you contact us or ask for a quote: your name, email address, phone number and company if you give them, your message or quote details, any file you attach, and, for contact messages, your IP address and browser type, to help us deal with spam.
- When you use the site: a record of your basket as you build it (the products, prices, delivery postcode and the type of device), how you arrived at the site (the website you came from, the first page you landed on and any campaign tags in the link), and, only if you accept analytics cookies, information Google Analytics collects about your visit (see our cookie notice). Our web server also records standard technical information, such as IP addresses and pages requested.
We do not collect your card details: Stripe processes card payments on its own secure page.
How we use it, and our lawful basis
| What we use it for | Lawful basis under UK GDPR |
|---|---|
| Taking, checking, printing and delivering your order, sending proofs, order updates and artwork reminders, and dealing with any problem with it | Contract (to perform our contract with you, or take steps at your request before it) |
| Keeping accounting and VAT records | Legal obligation |
| Checking a charity discount claim | Contract, and our legitimate interest in preventing misuse of the discount |
| Your account and saved details, and saved baskets you ask us to email you | Contract (providing the service you asked for) |
| Answering messages and quote requests | Legitimate interests (replying to you), or contract where it is about an order or a quote you asked for |
| Understanding which sources bring customers, and how baskets are built and left, to improve the site and our service | Legitimate interests (running and improving our business). These records are not used to market to you |
| Google Analytics, and sending Google Analytics a record of your purchase | Consent (you accept analytics cookies). If you have not accepted, neither happens |
| A reorder reminder after your order, or a reminder about a saved basket | Consent (you tick the box). One email at most each time, and you can unsubscribe at any time |
| Keeping the site secure and preventing fraud and spam | Legitimate interests |
| Dealing with legal claims, and complying with requests from authorities | Legal obligation, or legitimate interests (establishing or defending legal claims) |
We do not send marketing emails without your consent, we do not sell your personal data, and we do not make decisions about you by automated means that have legal or similarly significant effects.
Where we rely on legitimate interests, we have weighed our interests against yours; you can ask us for details, and you can object (see Your rights below). You do not have to give us your personal data, but we need your name, email address and delivery address to fulfil an order.
Who we share it with
We share only what each recipient needs:
- Our print production partners, in the UK and the European Economic Area, who receive your delivery name, company, address and phone number (if given), your artwork and the order specification, so they can print and send your order.
- Couriers, who receive your delivery details from us or our print partners to deliver your parcel.
- Stripe, to take your payment and prevent fraud. Stripe receives the details you enter on its payment page and the amount and order reference.
- Resend, which sends our emails, and our email provider, which holds our mailbox.
- Our web hosting provider, which stores the website, its database and uploaded files.
- Google, for Google Analytics, only if you accept analytics cookies.
- HMRC, the police or other authorities, where the law requires it, and our professional advisers (such as our accountant) where needed.
These providers act on our instructions, except where they are controllers in their own right for some of their own purposes (for example Stripe for fraud prevention and its legal obligations, and couriers for delivery).
Transfers outside the UK
Some of our providers, such as Stripe, Google and Resend, are based in, or use servers in, the United States, and some of our print partners are in the European Economic Area. Where your data is transferred outside the UK, it is protected by UK adequacy regulations (which cover the EEA, and US companies certified under the UK extension to the EU-US Data Privacy Framework) or by the ICO's international data transfer agreement or addendum to the EU standard contractual clauses. You can ask us for more information.
How long we keep it
| Data | How long |
|---|---|
| Orders, invoices and payment records | Six years after the end of the financial year of the order, as tax law requires, then deleted or anonymised |
| Artwork files and proofs on paid orders | With the order record, so we can deal with faults and reorders. Ask us and we will delete them sooner, unless we still need them for an open claim |
| Artwork uploaded to a basket that was never ordered, or to an order never paid for | 7 days |
| Basket records | Deleted 180 days after the basket was last used. An email address saved with a basket is removed after 30 days |
| Saved baskets | 30 days |
| Your account and saved details | Until you ask us to delete them, subject to the order records above |
| Contact messages and quote requests | As long as they may be needed for your enquiry or a related order. Ask us and we will delete them |
| How you arrived at the site | In a cookie for 90 days. If you order, it is kept with the order record |
| Our application logs | 14 days |
Your rights
Under UK data protection law you have the right to:
- access your personal data and get a copy;
- have it corrected if it is wrong or incomplete;
- have it deleted, where we no longer need it or you withdraw consent or object;
- restrict how we use it while a concern is checked;
- object to our use of it where we rely on legitimate interests;
- data portability: receive the data you gave us in a common electronic format, or have it sent to another organisation, where we use it under contract or consent;
- withdraw your consent at any time, where we rely on consent, without affecting what we did before. For analytics cookies, use "Cookie settings" at the foot of every page; for reminder emails, use the unsubscribe link or email us.
Some rights have exceptions: for example, we must keep order records for tax purposes even if you ask us to delete them. To use any of these rights, email hello@fprint.co.uk. We reply within one month and do not charge a fee.
Complaints
If you are unhappy with how we handle your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk.
Security
We use secure (HTTPS) connections across the site, keep access to personal data to the people who need it, and never handle your card details ourselves. Links to your orders, proofs and saved baskets contain long random codes; please do not share them.
Cookies
See our cookie notice.
Changes
We may update this notice. The date at the top shows when it last changed.
Last reviewed