Privacy notice

This notice explains what personal data FatPrint collects, why, who we share it with and the rights you have under UK data protection law.

Who this privacy notice covers and who is responsible #

The data controller is FatPrint, the online print shop at fatprint.co.uk. Contact us about privacy at hello@fatprint.co.uk.

What we collect and why #

• Orders: your name, delivery and billing address, email, phone number, what you ordered and your artwork. We need this to make and deliver your order and to keep business records (lawful basis: contract and legal obligation).
• Payments: card payments are handled by Stripe. We receive confirmation of payment and the last four digits of the card, never the full card number (lawful basis: contract).
• Accounts: if you create an account, your login details and order history (contract).
• Enquiries and product questions: the name, email, phone and message you send us (legitimate interests: replying to you). If you ask a product question, we may publish the question and our answer on the product page with your first name only.
• Reviews: only people who bought a product can review it, from the link in our review email or from their account. We publish your star rating, your review, the date and your name as first name and initial (for example “Sarah K.”) with a “Verified owner” label. We never show your surname, email address or order details. We keep the order number, your email address and the IP address the review was sent from with the review, to check it is genuine and to stop spam. We publish every genuine review, good or bad, and only hold back spam, abuse or personal details. Ask us at any time and we will take your review down (lawful basis: consent).
• Review request email: about a week after your order is marked complete, we send one email asking how it went, with links to review what you bought. We only send it to customers who paid for an order, once per order, and never with a discount or gift in return. The review links only work for the products in that order and stop working after 60 days. Every email has an unsubscribe link, and you can also tick the box at checkout to say no. Once you opt out we keep a scrambled (hashed) copy of your email address so we never send you another one (lawful basis: legitimate interests, as allowed for existing customers by the Privacy and Electronic Communications Regulations).
• Analytics: only if you accept analytics cookies, Google Analytics collects information about how you use the site (consent). See our cookie policy.

Community discount and trade accounts #

If you sign up for our community discount or open a trade account, we collect the name of your organisation or business and what kind it is, a charity number if you give one, your name, email, phone, address, website if you give one, the password you choose, and the date you signed up.

• Why: to open and run your account, apply the discount to your orders, and check the account is the kind of organisation the discount is for (lawful basis: contract, and our legitimate interest in making sure discounts go to the groups they are meant for).
• Charity numbers: if you give a charity number, we may look it up on the public register of the Charity Commission for England and Wales, the Scottish Charity Regulator or the Charity Commission for Northern Ireland. Only the number is sent. We never turn down a sign-up because of the result.
• Marketing: we only email you offers and news if you tick the box to say yes (consent). You can stop at any time by replying to one of those emails or contacting us, and we keep a record of when you said yes.

Who we share it with #

• The Charity Commission for England and Wales, only the charity number you give us, to check it against the public register.
• Stripe, to take card payments.
• Our UK trade print partner, for items they produce for us. They receive the artwork and, where they deliver directly, your delivery name, address and phone number.
• Couriers, to deliver your order.
• Hostinger, who host this website and its database.
• Telegram, which we use to send our own team an instant alert when an order, enquiry or question arrives. The alert contains the order or message details.
• Google, for analytics if you consent.

Some of these providers may process data outside the UK. Where they do, they use safeguards approved under UK law, such as the UK International Data Transfer Addendum. We never sell your data.

How long we keep it #

We keep order and accounting records for six years after the end of the financial year they relate to, as required for tax purposes. Enquiries that do not lead to an order are deleted after two years. Artwork files are kept for two years so you can reorder, unless you ask us to delete them sooner. Community discount and trade account details are kept while your account is open, and deleted within two years of your last order or sign-in if the account is not used. Order records tied to them follow the six-year rule above. Your marketing consent record is kept for as long as we email you, plus two years.

Your rights under this privacy notice #

You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To use any of these rights, contact us using the details above. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Last updated 1 October 2026.

The Information Commissioner’s Office explains your data protection rights in more detail. How we use cookies is set out in our cookie policy, and the terms of your order are in our terms and conditions.