We keep this short. We collect the minimum data needed to take your order, print it, and ship it. We don't sell anything to anyone and we don't run advertising or behavioural-tracking pixels.
What we collect
- Order data — name, email, delivery address, phone number, the poster + size + paper you ordered, the amount paid. Provided by you at checkout via Stripe.
- Server logs — your IP address, user agent, and requested URL are recorded by Cloudflare (the CDN that fronts this site) for abuse prevention and basic operational metrics. Logs are retained for 7 days.
- Cookies — none from us. Stripe sets a small number of strictly-necessary cookies during checkout to keep your session alive; see Stripe's privacy policy for details.
Who we share it with
- Stripe — handles payment. They see your card details (we do not).
- Prodigi — our print & ship partner. They receive your name, address, and the poster file we want printed.
- Cloudflare — the CDN serving this site, and our file storage provider for poster images.
That's it. No advertisers, no data brokers, no analytics resellers.
Our TikTok app
We run a small internal app that uploads videos we make to our own TikTok accounts as drafts, so we can review and post them ourselves. It uses TikTok's official Login Kit and Content Posting API and only ever connects to TikTok accounts we own.
- What it gets from TikTok — the connected account's basic profile (its TikTok ID and display name) and the access tokens TikTok issues so the app can upload for that account.
- What it does with them — uploads our own videos to that account's TikTok inbox as drafts. Nothing else: it doesn't read videos, messages, followers or anything about viewers.
- Where it's kept — the tokens are stored only on our own servers, never shared, and deleted when the account is disconnected.
- Disconnecting — access can be removed at any time from the app permissions in TikTok's settings, or by emailing hello@decoisles.com.
Anything posted on TikTok is covered by TikTok's own privacy policy.
How long we keep it
Order records are kept for 7 years to comply with HMRC requirements for VAT-registered businesses. Server logs are retained 7 days. We don't keep marketing lists.
Your rights (UK GDPR)
You can ask us for a copy of any data we hold about you, ask us to correct it, or ask us to delete it (subject to our HMRC retention obligations). Email hello@decoisles.com and we'll respond within 30 days.
You can also complain to the Information Commissioner's Office at ico.org.uk if you think we've mishandled your data.
Contact
Data controller queries: hello@decoisles.com.