Privacy Policy

This policy explains what personal data Moby Posters collects when you use our site or place an order, why we collect it, who we share it with, and what rights you have over it. We've named every third-party tool we actually use rather than describing them vaguely, since that's the part that matters most to you.

If you have any questions about this policy or how your data is handled, email us at support@mobyposters.co.uk.

1. Who we are

Moby Posters ("we", "us", "our") is the data controller for the personal data described in this policy. We're a UK-based online poster printing service at mobyposters.co.uk.

2. The personal data we collect

We only collect what we need to take your order, deliver it, and support you. Depending on how you use the site, this can include:

• Order & account details - your name, email address, phone number, and delivery address.
• The files you upload - the photo or design file you send us to be printed, and anything you tell us or send us about your order.
• Order history - what you've ordered, when, and its status (processing, dispatched, tracking information).
• Account login details - your email address and a securely hashed password, if you choose to create an account. We never store your password in plain text, and we can't see or recover it - only reset it.
• Payment information - handled entirely by our payment provider, Stripe. We never see or store your full card details - see Section 6 below.
• Support & chat messages - anything you send us via our live chat/support widget or by email.
• Technical & usage data - your IP address, browser/device type, and how you use our site, collected via cookies and analytics tools - see Section 5 below.

3. How we use your data

• To process, print, and deliver your order.
• To create and manage your account, if you choose to have one.
• To communicate with you about your order - confirmations, dispatch and tracking updates, and responding to any support questions.
• To provide live chat and customer support.
• To detect and prevent fraud, and to keep our site secure.
• To understand how our site is used and improve it, using analytics.
• To meet our legal obligations - for example, keeping financial records for tax purposes.

We only send marketing emails (such as discount offers) if you've agreed to receive them, and you can opt out at any time using the unsubscribe link in any such email.

4. Our legal basis for using your data

We rely on one of the following legal bases, depending on the data and how it's used: performing our contract with you (taking and fulfilling your order), our legitimate business interests (keeping the site secure, understanding and improving how it's used), your consent (marketing emails, non-essential cookies), and our legal obligations (tax and accounting records).

5. Cookies & similar technologies

We use cookies and similar browser storage (such as local storage) for a few different purposes:

• Strictly necessary - keeping track of your cart and current order session as you move between pages, and keeping you logged in if you have an account. The site can't function without these.
• Analytics - we use Google Analytics and PostHog to understand how visitors use our site (which pages are visited, general usage patterns) so we can improve it. Both may set cookies and collect technical data such as your IP address and device/browser information.
• Live chat & support - our support widget is provided by Sonny. If you use live chat, Sonny will process the messages you send and some technical information about your visit in order to provide that conversation to our support team.

You can control or delete cookies through your browser settings at any time, and most browsers let you block non-essential cookies - though this may affect analytics and chat functionality rather than checkout itself, since the necessary cookies/storage above are what keeps your cart and order working.

6. Payment information

All payments are processed securely by Stripe. When you enter your card or bank details at checkout, they're sent directly to Stripe - we never see, receive, or store your full card number, expiry date, or security code on our own systems. We only ever hold a payment reference from Stripe against your order, which we use to confirm your payment succeeded.

7. Who we share your data with

We share personal data with the following third parties, only to the extent needed for them to provide their service to us:

• Stripe - to process your payment.
• Google Analytics and PostHog - to understand site usage, as above.
• Sonny - to provide live chat and support.
• Our courier and delivery partners - your name, delivery address, and phone number, so they can deliver your order.
• Our email delivery provider - to send order confirmation, dispatch, and account-related emails on our behalf.
• Our cloud file storage and hosting providers - to securely store the files you upload and host our website.

We don't sell your personal data to anyone, for any reason.

8. International data transfers

Some of the third parties listed above (including Stripe, Google Analytics, PostHog, and Sonny) may process data outside the UK. Where this happens, we rely on their own compliance with recognised data protection safeguards, such as the UK's International Data Transfer Agreement or the EU-US Data Privacy Framework, as applicable.

9. How long we keep your data

We keep order and payment records for as long as required by UK tax and accounting law (currently six years). If you have an account, we keep your account details until you ask us to delete it, subject to us needing to retain order records as above. Uploaded files remain linked to your order history unless you ask us to remove them.

10. Your rights

Under UK data protection law, you have the right to:

• Ask us what personal data we hold about you, and get a copy of it.
• Ask us to correct inaccurate data.
• Ask us to delete your data, where we're not required to keep it (for example, for tax records).
• Ask us to restrict how we use your data, or object to certain uses.
• Ask for your data in a portable format.
• Withdraw consent at any time, where we rely on consent (such as marketing emails).

To exercise any of these rights, email support@mobyposters.co.uk. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you're unhappy with how we've handled your data.

11. Children's privacy

Our site is not directed at children, and we don't knowingly collect personal data from anyone under 18.

12. Keeping your data secure

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), encrypted password storage, and restricted access to personal data within our own team.

13. Changes to this policy

We may update this policy from time to time, for example as our services or the tools we use change. The current version will always be available on this page.

14. Contact us

Questions about this policy or your data? Email us at support@mobyposters.co.uk - we're always happy to help.