Privacy Policy
Last updated: July 20, 2026
Printful respects your privacy. This policy explains what personal information we collect when you visit or buy from our store, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It also covers our use of cookies and similar technologies.
1. Who is responsible for your data
The controller of your personal information is [YOUR REGISTERED LEGAL ENTITY NAME], trading as Printful, of [YOUR REGISTERED BUSINESS ADDRESS]. For any privacy question or request, contact [YOUR PRIVACY CONTACT EMAIL].
[IF YOU HAVE APPOINTED A DATA PROTECTION OFFICER OR AN EU/UK REPRESENTATIVE, ADD THEIR NAME AND CONTACT DETAILS HERE — OTHERWISE DELETE THIS SENTENCE]
2. Information we collect
We collect three kinds of information.
Information you give us. Your name, email address, billing and shipping addresses, phone number, order contents, account login details, any message you send our support team, and any review or content you post. Payment card details are entered directly into our payment provider's secure form — we receive only a token, the card type and the last four digits, never the full number.
Information collected automatically. When you browse the store we collect your IP address, device and browser type, operating system, referring page, the pages you view and how you interact with them, and cookie identifiers. This comes from cookies and similar technologies (see section 4).
Information from others. Our payment providers tell us whether a payment succeeded and flag suspected fraud; carriers give us delivery and tracking status; if you sign in or interact with us through a social or marketplace platform, that platform may share limited profile information with us.
We do not deliberately collect special-category data (such as health, religion or biometric data). Please don't send it to us in support messages.
3. Why we use it, and our legal basis
| Purpose | Legal basis (EEA/UK) |
|---|---|
| Taking, processing and delivering your order; handling returns and refunds | Performance of a contract with you |
| Taking payment and preventing fraud or abuse | Contract; legitimate interests (protecting our business); legal obligation |
| Providing customer support and responding to your messages | Contract; legitimate interests (serving our customers well) |
| Keeping accounting, tax and transaction records | Legal obligation |
| Sending marketing emails and offers | Consent, or legitimate interests where you are an existing customer and can opt out at any time |
| Analytics, and measuring and improving the store | Consent for non-essential cookies; otherwise legitimate interests |
| Personalising what you see and remembering your cart | Consent for non-essential cookies; contract for the cart itself |
| Securing the site and defending legal claims | Legitimate interests; legal obligation |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you may object at any time (see section 9).
4. Cookies and similar technologies
Cookies are small files placed on your device. We also use comparable technologies such as local storage and tracking pixels. We group them as follows.
| Category | What it does | Set without consent? |
|---|---|---|
| Strictly necessary | Signs you in, keeps your basket, processes checkout, protects against fraud and balances traffic. The store cannot work without these. | Yes — exempt from consent |
| Functional | Remembers preferences such as language, currency and region. | No |
| Analytics | Tells us, in aggregate, which pages are visited and where people get stuck, so we can improve the store. | No |
| Marketing / advertising | Measures campaigns and lets us and our partners show you relevant ads on other sites. | No |
Where the law requires it, we ask for your consent before setting anything other than strictly necessary cookies, and you can change your choice at any time through our cookie settings. You can also block or delete cookies in your browser settings — note that blocking strictly necessary cookies will break checkout. Where supported, we honour Global Privacy Control (GPC) browser signals as an opt-out of sale or sharing.
[LIST THE SPECIFIC SERVICES YOU USE — FOR EXAMPLE GOOGLE ANALYTICS, META PIXEL — AND LINK TO THEIR PRIVACY POLICIES]
5. Who we share it with
We do not sell your personal information for money. We share it only with parties who need it to run the store, each bound to protect it and to use it solely on our instructions:
- Payment providers, to take payment and screen for fraud.
- Shipping carriers and fulfilment partners, to deliver your order and give you tracking.
- Technology providers — hosting, email delivery, customer support tooling, analytics.
- Professional advisers such as accountants and lawyers, where needed.
- Authorities, where we are legally required to disclose information or need to establish or defend legal claims.
- A buyer of our business, if we are sold or reorganised — your information would remain subject to this policy.
Some advertising and analytics cookies may amount to "selling" or "sharing" personal information under California law. See section 10 for how to opt out.
6. International transfers
We are based in [YOUR COUNTRY], and some of our providers are located elsewhere, so your information may be transferred outside your country — including outside the EEA or UK. Where that happens, we rely on an adequacy decision or on Standard Contractual Clauses (and the UK Addendum where relevant), together with additional safeguards where appropriate. You can request a copy of the safeguards we use by writing to [YOUR PRIVACY CONTACT EMAIL].
7. How long we keep it
- Order and transaction records: for as long as needed to fulfil the order and then for the period our tax and accounting law requires — typically [NUMBER] years.
- Account data: while your account is open, and for a short period afterwards in case you return.
- Support messages: normally up to [NUMBER] years after the enquiry is closed.
- Marketing data: until you unsubscribe, plus a suppression record so we do not contact you again.
- Analytics data: in line with the retention settings of the tools listed in section 4.
When we no longer need information, we delete it or irreversibly anonymise it.
8. How we protect it
We use encryption in transit (TLS), restrict access to those who need it, and work only with providers who maintain appropriate security. No system is perfectly secure, so we cannot guarantee absolute security; if a breach affects your rights we will notify you and the relevant regulator as the law requires.
9. Your rights
Depending on where you live, you may have the right to: access the personal information we hold about you; have it corrected; have it deleted; restrict or object to how we use it, including profiling and direct marketing; receive it in a portable format; and withdraw consent at any time without affecting processing already carried out.
To exercise any of these, write to [YOUR PRIVACY CONTACT EMAIL]. We will respond within the period the law allows — one month in the EEA/UK, 45 days in California — and may need to verify your identity first. Exercising your rights is free unless a request is manifestly unfounded or excessive.
If you are in the EEA or UK and are unhappy with how we have handled your data, you may complain to your national supervisory authority — in the UK, the Information Commissioner's Office. We would appreciate the chance to address it first.
10. California residents
If you are a California resident, the CCPA as amended by the CPRA gives you specific rights. In the past 12 months we have collected the categories of personal information described in section 2: identifiers, customer records, commercial information (your purchases), internet activity, approximate geolocation derived from IP address, and inferences drawn from these. We collect them from you, from your device, and from the sources in section 2, for the purposes in section 3, and we disclose them to the categories of recipient in section 5.
We do not sell personal information for money, and we do not knowingly sell or share the personal information of anyone under 16. However, our use of advertising and analytics cookies may be treated as "selling" or "sharing" for cross-context behavioural advertising. You have the right to know, delete, correct, opt out of sale or sharing, limit the use of sensitive personal information, and not be discriminated against for exercising any of these rights.
To opt out, use our cookie settings, send a Global Privacy Control signal from your browser, or write to [YOUR PRIVACY CONTACT EMAIL]. An authorised agent may submit a request on your behalf with proof of authorisation.
11. Children
Our store is not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, contact [YOUR PRIVACY CONTACT EMAIL] and we will delete it.
12. Marketing choices
You can unsubscribe from marketing emails using the link at the bottom of any of them, or by writing to us. We will still send transactional messages you need — order confirmations, dispatch notices and refund notifications — because those are part of fulfilling your order.
13. Automated decision-making
We do not make decisions with legal or similarly significant effects about you by automated means alone. Our payment providers do run automated fraud checks, which may result in an order being declined; if that happens you can contact us for a human review.
14. Changes to this policy
We may update this policy as our store, our providers or the law change. The "last updated" date above shows when it last changed, and we will tell you directly if a change materially affects your rights.
15. Contact us
For any privacy question or request, write to [YOUR PRIVACY CONTACT EMAIL] or [YOUR BUSINESS MAILING ADDRESS].