Legal
Privacy Policy
How PrintWisp (ABN 17 461 812 303) ("PrintWisp", "we") collects, uses, shares and protects personal information. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth). Where other privacy laws apply to you, such as the GDPR, the rights they give you are covered here too.
The short version
- We collect what we need to run PrintWisp: account and billing details from businesses, and photos, designs and order details from their shoppers.
- For shoppers' information the store is in charge; we handle it on the store's behalf.
- Card details go to Stripe. We never see full card numbers.
- We do not sell personal information, use advertising cookies, or use shoppers' photos for anything but their order.
- Unordered projects are deleted on each business's own schedule, and shoppers are emailed first. You can ask to see, correct or delete your information at any time.
The short version helps you read the full text; the full text is what applies.
1. Who we are and our role
In short We are responsible for businesses' data; for shoppers' data we act for the store.
PrintWisp is a white-label product designer that businesses use in their own online shops or in a PrintWisp Store. That means we hold two kinds of personal information:
- Information about our customers (the businesses and their staff). We decide how it is used and are responsible for it.
- Information about shoppers (people who design or buy in a store). The store decides why it is collected; we handle it on the store's behalf, under our Terms of Service. Shoppers should also read the store's own privacy policy and contact the store first with requests.
2. What we collect
In short Only what the service needs.
| Category | Examples | From |
|---|---|---|
| Account | Business name, your name, email, password (stored only as a secure hash), role, last sign-in | You |
| Billing | Plan, billing status, fees, charges; card brand and last four digits (the card itself is held by Stripe) | You, Stripe |
| Store content | Products, layouts, fonts, logo, colours and settings | You |
| Shoppers' projects | Uploaded photos, designs, answers to product questions, and the name or reference the store attaches to a project | Shoppers, the store |
| Orders paid through PrintWisp | Shopper email, delivery name and address, items and amounts paid | Shoppers, Stripe |
| Technical | IP address, browser, pages requested and error logs | Your device |
We do not ask for sensitive information, such as health or ethnicity, and ask stores not to collect it through the designer.
3. How we use it
In short To provide, secure and bill for the service.
- to provide the Service: the designer, saved projects, print files, previews, PrintWisp Stores and checkouts;
- to charge plans and fees, and keep financial records;
- to give support and send service messages (security notices, billing, changes to the Service, and the email warning shoppers before a project is deleted);
- to keep the Service secure, prevent fraud and abuse, and fix problems;
- to meet legal obligations.
We send marketing emails only to business customers, and you can unsubscribe at any time. We do not make decisions about anyone by automated means alone. Where the GDPR applies, our legal bases are performing our contract with you, our legitimate interest in running a secure service, and legal obligations.
5. Shopify stores
In short What the PrintWisp app reads from a Shopify store, and what it never asks for.
A store that installs the PrintWisp app from the Shopify App Store connects it to its PrintWisp account. The app then:
- creates and updates the products the store picks, and reads which of them it made;
- reads paid orders, but keeps only what it needs to make the print file: the order number, and for each personalised item its design, size, quantity and price. It does not collect the shopper’s name, email, phone or address — those stay in Shopify, with the store;
- reads the store’s plan with us through Shopify Billing, so the plan and fees appear on the store’s Shopify bill. We never see the store’s payment details.
The shopper’s photos and designs are handled as described above, for the store. When a store uninstalls the app, Shopify tells us, and 48 hours later the app deletes everything it keeps for that store (its connection, keys and order numbers). Requests Shopify passes on from shoppers to see or delete their information are answered: the app holds no shopper contact details, and anything in the store’s PrintWisp account is handled as in “Your rights” below.
6. Overseas transfers
In short Some providers are outside Australia, and we make sure they protect it.
Some providers above store or process information outside Australia, including in the United States. Before disclosing information overseas, we take reasonable steps to make sure the recipient handles it in line with the Australian Privacy Principles, for example through contractual commitments. Where the GDPR applies, we rely on recognised transfer safeguards such as standard contractual clauses.
7. How long we keep it
In short No longer than needed.
| Information | Kept for |
|---|---|
| Unordered projects and their photos | The period the business sets under Retention policy, counted from the last change. A business that sets none keeps them until it deletes them. Shoppers are emailed before a saved project is deleted. |
| Ordered designs and print files | So an order can be reprinted: while the business has its account, and up to 30 days after it closes. |
| PrintWisp Store order records | As long as the store's account is open, then as tax and consumer law require. |
| Account and billing records | While the account is open, then as long as tax and corporations law require (generally 5 to 7 years). |
| Technical logs | 90 days. |
8. Cookies and similar technologies
In short Only cookies the service needs. No advertising cookies.
| Cookie | Purpose | Lasts |
|---|---|---|
PHPSESSID | Keeps you signed in to the PrintWisp portal and protects forms | Up to 30 days |
pw_cart | Remembers a shopper's cart in a PrintWisp Store | 60 days |
pw_preview | Lets a store owner preview a store before it opens | Until the browser closes |
These are strictly necessary, so they do not need consent. Blocking them stops sign-in and the cart from working. We use no analytics or advertising tools on our public site today. If we add them (for example Google Analytics, Google Tag Manager or the Meta pixel), we will update this policy first and ask for your consent where the law requires it.
9. How we protect it
In short Encryption, hashing, least access, and breach notification.
Connections are encrypted (HTTPS). Passwords are stored only as secure hashes. Design links and carts use long random tokens, and links to print files expire. Each store's data is kept separate, and our access is limited to people who need it.
No system is perfectly secure. If a data breach is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires. For shoppers' data, we will tell the store without undue delay so it can meet its own duties.
10. Your rights
In short See, correct or delete your information.
You can ask to access the personal information we hold about you, correct it, or have it deleted. Where the GDPR or similar laws apply, you can also object to or restrict processing, ask for a copy in a portable format, and complain to your local data protection authority. California residents may ask what we collect and ask us to delete it; we do not sell or share personal information for advertising.
Email hello@printwisp.com. We may need to confirm who you are. We reply within 30 days. Shoppers: please contact the store you dealt with first; we help stores answer such requests. We may keep some information where the law requires it.
11. Children
In short PrintWisp is for businesses.
Our customer accounts are for businesses and adults. Stores are responsible for their own shoppers. We do not knowingly collect children's information directly. Contact us if you believe a child has given us information, and we will delete it.
12. Complaints
In short Tell us first; the OAIC is there if we fall short.
If you are concerned about how we have handled your information, email hello@printwisp.com. We will acknowledge your complaint promptly and respond within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
13. Changes to this policy
In short We date every version and email you about big changes.
We may update this policy as the Service or the law changes. The effective date at the top shows the current version, and we email account holders about significant changes before they take effect.
14. Contact
PrintWisp, ABN 17 461 812 303
Suite 329, 98-100 Elizabeth Street, Melbourne VIC 3000, Australia
Privacy Officer: privacy@printwisp.com
See also our Terms of Service.
This is a working draft for review before launch.