Privacy Policy

1. Introduction

PrintRune runs the online store at printrune.com, where you can buy made-to-order print-on-demand apparel and goods. Every order placed on the site is a purchase directly from PrintRune — we act as the merchant of record for all transactions.

Who is responsible for your data

PrintRune LLC (Wyoming, USA) is the data controller. Registered office: 30 N Gould St Ste N, Sheridan, WY 82801, United States.

Scope

This policy describes the personal information we gather, why we gather it, who receives it, and the choices and rights you have. It covers our website (printrune.com), customer accounts, and the emails we send. It does not cover payment-provider websites (Stripe, PayPal, and other processors publish their own privacy policies), external sites we link to, or the social platforms where we maintain profiles.

Where our customers are, and the laws we follow

We sell to customers in the United States, the United Kingdom, and Canada, and we comply with the privacy laws that protect them:

• United Kingdom — UK GDPR and the Data Protection Act 2018
• United States (California) — the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA)
• Canada — the Personal Information Protection and Electronic Documents Act (PIPEDA)

2. Information We Collect

Browsing (no account needed)

Collected automatically when you visit:

• IP address, browser, device type, and operating system
• Pages viewed, time on site, and the referring website
• Approximate country or region (never precise GPS location)

Creating an account

• You give us: your name, email address, and a password (stored only in encrypted form)
• We create: a customer ID, the account creation date, and an account status

Placing an order

• You give us: your full shipping address, a phone number for delivery updates, and your product selections
• We create: the order number, timestamps, totals, currency, and order status
• Our payment processors send us: an approved/declined result, a transaction ID, and the payment method type only (for example, "card ending 1234") — full card numbers never reach our systems
• Our fulfilment partners send us: production status, tracking numbers, and delivery confirmations

Signing in with Google (optional)

If you use "Sign in with Google", Google shares your email address and basic profile details (name, profile picture) so we can create or match your account.

Contacting support

We keep the details of your inquiry, the order number if relevant, any photos or videos you attach, a ticket number, and our correspondence history.

From third parties

• Payment processors (Stripe, PayPal, Airwallex): payment confirmations, transaction IDs, refund and chargeback notices
• Fulfilment partners (facilities in the United States, Vietnam, and China): production updates, quality reports, tracking numbers, delivery confirmations
• Shipping carriers (USPS, Royal Mail, Canada Post, FedEx, UPS, DHL, and regional or cross-border services): tracking events and delivery outcomes
• Analytics and security services: Google Analytics (aggregated traffic data), advertising pixels (campaign performance), Cloudflare (security and performance metrics)

What we never collect

We do not collect government ID numbers, precise geolocation, health data, or full payment card numbers.

3. How We Use Your Information

Legal bases (UK users)

• Contract — fulfilling your orders and providing the services you request
• Legal obligation — tax compliance, responding to lawful requests, enforcing our terms
• Legitimate interests — fraud prevention, customer support, analytics, and marketing to existing customers (always with an opt-out)
• Consent — non-essential cookies and marketing to non-customers; you can withdraw consent at any time

What we do with it

• Fulfil orders — route your order to the appropriate production facility, pass your shipping address to the fulfilment partner, generate tracking, coordinate delivery, and handle returns and refunds
• Process payments — send order details to the payment processor, receive confirmations, issue refunds, and respond to chargebacks with transaction evidence
• Support you — answer inquiries, investigate order and quality issues, and track tickets to resolution
• Protect the platform — detect suspicious activity, prevent payment fraud, block bots and scraping, and secure accounts
• Meet legal duties — calculate and remit sales tax, VAT, and GST; respond to valid legal process
• Improve the store — analyse sales trends and site performance using aggregate data
• Communicate — transactional emails (order, shipping, and security notices — these cannot be opted out of) and marketing emails (unsubscribe at any time)

4. Who We Share Your Information With

We never sell your personal information for money. We do "share" certain identifiers with advertising partners for cross-context behavioural advertising, which California law treats like a sale — you can opt out at any time (see Sections 6 and 8).

Legal disclosures

• Authorities — when compelled by a valid subpoena, court order, or warrant, or in emergencies involving imminent harm
• Tax authorities — tax reporting, aggregated wherever possible
• Business transfers — in a merger, acquisition, or asset sale, data may be disclosed under confidentiality or transferred to a successor; we will notify you of any ownership change and you may close your account if you object

5. Security and Retention

How we protect your data

• HTTPS encryption across the entire site
• Firewall and DDoS protection via Cloudflare
• Access restricted to staff who need it, with multi-factor authentication
• Regular patching and automated alerts for unusual activity

No system is completely secure, and we cannot promise absolute security. Please keep your password confidential and report any suspected issue to legal@printrune.com.

How long we keep it

If a breach happens

We will investigate immediately, secure the affected systems, and notify as the law requires — the UK ICO within 72 hours for high-risk breaches, California residents without unreasonable delay, and the Office of the Privacy Commissioner of Canada where there is a real risk of significant harm. Affected users receive a direct notice explaining what happened, what data was involved, and what to do next.

6. Your Privacy Rights

United Kingdom (UK GDPR)

• Access, correction, and deletion — responses within one month (deletion is subject to legal exceptions such as tax records)
• Restriction — pause processing while a dispute is resolved
• Portability — receive your data in a machine-readable format
• Objection — object to legitimate-interest processing; marketing opt-outs are always honoured immediately
• Withdraw consent — at any time, for future processing

We make no automated decisions with significant effects — humans make all final decisions. If you are unsatisfied, you may complain to the Information Commissioner's Office (ico.org.uk).

California (CCPA/CPRA)

• Know, delete, and correct — responses within 45 days
• Opt out of sale/sharing — we do not sell data for money, but sharing for cross-context advertising can be opted out of by contacting support@printrune.com or via your cookie preferences
• Global Privacy Control — we honour the GPC browser signal as a valid opt-out of sale/sharing
• Non-discrimination — exercising your rights never affects your service or pricing
• Authorised agents — someone may act for you with written authorisation

Canada (PIPEDA)

• Request access to and correction of your personal information
• Withdraw consent to processing, subject to legal or contractual limits
• Complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca)

Making a request

Email legal@printrune.com (fastest), or write to PrintRune LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. Include your name, account email, and what you would like us to do. We may verify your identity before acting. Complex requests can take longer — we will let you know if we need more time.

7. International Data Transfers

Your data is stored, processed, or accessed in:

• United States — primary operations and cloud services (PrintRune LLC)
• Vietnam — operations staff handling orders and support
• Worldwide — Cloudflare's CDN and storage network

Manufacturing partners in China receive shipping addresses only, strictly for producing and dispatching your order, under contractual data-protection obligations.

For UK users, transfers to countries without a UK adequacy decision are protected using the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, the UK–US Data Bridge for certified US recipients where applicable, and encryption in transit and at rest. You can request a copy of the relevant transfer mechanism at legal@printrune.com.

8. Cookies and Tracking

Cookies are small files saved on your device that help the site work and let us understand how it is used.

• Essential cookies (always on) — shopping cart, login sessions, security tokens, and your cookie preferences. They do not track you across other sites; without them checkout and login cannot function.
• Analytics and marketing cookies (optional) — Google Analytics for traffic insight, and advertising pixels for conversion tracking and retargeting. These can persist for up to 13–24 months. We also use pixels in marketing emails to measure opens and clicks.

Your choices

• UK users — we request consent before setting optional cookies, and you can change your choice at any time
• US and Canada users — optional cookies are on by default; opt out through your browser settings or the industry tools at optout.aboutads.info and optout.networkadvertising.org
• Global Privacy Control — honoured as an opt-out of sale/sharing for California residents. We do not respond to legacy Do Not Track signals, as no common standard exists.

You can also block or delete cookies in your browser, although blocking all cookies disables the cart and login.

9. Children's Privacy

PrintRune is for adults. Our Terms of Service require users to be at least 18, registration asks you to confirm this, and we do not knowingly collect information from anyone under 18. If we learn a user is underage, we close the account and delete the data. Parents or guardians can reach us at legal@printrune.com.

10. Changes to This Policy

We may revise this policy as our practices or legal requirements change. For material changes we email active account holders, give a notice period, and post a banner on the site; for minor changes we update the "Last updated" date, effective on posting. Continuing to use PrintRune after the effective date means you accept the revised policy. Previous versions are available on request.

11. Contact Us

• Privacy questions and requests: legal@printrune.com
• General support: support@printrune.com
• Mail: PrintRune LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States