Privacy policy

We are a print shop, not an advertising company. We collect what we need to quote your job, print it, and get it to you, plus a small amount of traffic data so we know which pages are worth keeping. We do not sell your information. This page says exactly what that means in practice.

What we collect, and when

When you ask for a quote or send the contact form

Your name, email address, and whatever else you choose to fill in: organization, phone number, project type, quantity, your message, and a link to artwork if you give us one. If you arrived from an ad we also record the campaign parameters in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content) so we know which ads actually produce work.

When you order from the shop

Your name, email address, phone number if you give it, the items and sizes you ordered, and a shipping address when the order ships. Payments run through PayPal. Card numbers go to PayPal directly and never touch our servers or our database. We receive a confirmation that the payment succeeded, the amount, and a PayPal capture reference.

When you create an account

Your email address, your name, and a password. The password is stored only as a PBKDF2-SHA256 hash with a salt unique to your account, which means we cannot read it and neither can anyone who obtains a copy of the database.

When you use the cookie banner

We record which categories you agreed to, the version of this policy you agreed under, and the date. Your IP address is hashed before it is stored, so the record proves a choice was made without keeping anything that identifies you.

Automatically, on every visit

Our host, Cloudflare, logs standard request data such as IP address, user agent, and the page requested, for security and abuse prevention. That is ordinary server logging and happens whether or not you accept cookies.

Cookies and tracking

Nothing that tracks you loads until you say yes. No Google Analytics script, no Google Ads tag, and no Meta Pixel is fetched on your first visit. The banner has two separate toggles and both start switched off. Rejecting takes one click and it is the same size and prominence as accepting.

• Essential. Always on. Keeps you signed in if you have an account and remembers your cookie choice so we stop asking. This cannot be switched off, because without it the site cannot do what you asked it to.
• Analytics. Google Analytics 4, property G-1JBJSDRG0K. Tells us which pages are read and which are ignored. IP anonymisation is on.
• Advertising. Google Ads (AW-17105900738) and the Meta Pixel (1437587125059600). Tells us which ad led to a quote so we do not keep paying for the ones that do not.

You can change your mind at any time.Reopen the cookie settings. Clearing your browser storage also resets the choice, and we will ask again.

Why we are allowed to hold it

For quotes and orders, because we need it to do the thing you asked for, which is a contract or the steps leading to one. For analytics and advertising, because you gave consent, and only for as long as that consent stands. For security logging, because a site that cannot block abuse does not stay online.

Who else sees it

Only the companies that make the site work, and only the part each one needs:

• Cloudflare hosts the site and the database, and serves every page.
• PayPal processes payments. Their privacy policy governs what they do with card data.
• Resend delivers our transactional email, such as order confirmations.
• Google receives analytics and ad data, but only if you accepted those categories.
• Meta receives pixel data, but only if you accepted the advertising category.

We do not sell personal information, and we do not share it for cross-context behavioural advertising in the sense the California Consumer Privacy Act uses those terms. If that ever changes, this page changes first and the banner asks again.

How long we keep it

• Quote requests: three years, because repeat customers reorder and the old spec is useful.
• Orders and their line items: seven years, which is what tax record-keeping requires.
• Account records: until you ask us to delete the account.
• Login sessions: 30 days, then they expire on their own.
• Consent records: two years from the date of the choice.

Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Emailshawn@570creative.com and we will answer within 30 days. We will ask you to confirm you are who you say you are, which usually means replying from the email address on the record.

If you are in California, that includes the right to know, the right to delete, the right to correct, and the right not to be treated differently for exercising any of them. If you are in the UK or the European Economic Area, it also includes the right to object, the right to restrict processing, the right to data portability, and the right to withdraw consent at any time without affecting what happened before you withdrew it. You may also complain to your data protection authority.

Children

This site is not aimed at children under 13 and we do not knowingly collect their information. We print a great deal of youth team apparel, but the person placing the order is a coach, a parent, or a club officer. If a child has sent us something, email us and we will delete it.

Where your data is held

On Cloudflare infrastructure in the United States. If you are contacting us from outside the United States, your information is transferred there.

Security

The site is served over HTTPS only. Passwords are hashed and salted. Session tokens are stored as hashes, so a copy of the database does not hand anyone a working login. Payment card data never reaches our systems. No system is perfect, and we will tell affected customers promptly if something goes wrong.

Changes to this policy

When we change something that affects what we collect or who sees it, we update the date at the top and the banner asks for your cookie choice again rather than assuming the old answer still applies.

Contact