Privacy Policy

• When you order: your name, email address, phone number, shipping and billing address, and what you bought. We use it to take payment, make and deliver your order, email you a confirmation and tracking link, help with returns or problems, and keep the records the law requires.
• Card details: you enter these on Stripe's secure checkout page. They go straight to Stripe — we never see or store your full card number.
• Order tracking: the order number and email address you type on our tracking page, only to find your order. We don't keep them.
• Newsletter: your email address, if you sign up, to tell you about new designs and restocks. You can unsubscribe at any time.
• When you email us: whatever you choose to send, so we can reply.
• When you browse: our host records technical details such as your IP address and browser, to keep the site running and secure. We hold your IP address for about a minute to stop abuse, and we count visits without cookies and without tracking you across other websites. If your cookie choice allows it, Google's ad cookies note which of our Google ads brought you here, so we can tell whether an ad led to a sale.

Your cart is saved in your own browser, on your device. We don't see it until you check out.

Our website doesn't set cookies of its own. If your choice allows it, Google sets ad cookies (such as _gcl_au) that let us see which of our Google ads led to a sale. We don't use them to show you ads on other websites. In the UK and Europe they're off until you accept; elsewhere they're on unless you choose Reject. You can change your choice at any time with “Cookie settings” at the bottom of every page; we remember it in your browser.

Stripe's checkout page uses its own cookies for security and fraud prevention — see Stripe's privacy policy.

Only the services that help us run the shop, and only what each one needs:

• Stripe takes your payment and holds the order record
• Printful makes and ships your order, and passes your address to the delivery carrier
• Resend sends order and shipping emails, and holds newsletter sign-ups
• Vercel hosts the website and provides privacy-friendly visitor statistics
• Upstash briefly stores IP addresses to block abuse
• Cloudflare runs our domain and forwards emails you send us
• Google (Gmail) holds our support inbox
• Slack sends us order alerts, which contain no names, emails or addresses
• Google (Ads) tells us which of our Google ads led to a sale, using ad cookies if your choice allows them

We don't sell or rent your personal information. Apart from Google's ad cookies described above, we don't use advertising trackers. We'll disclose information if the law requires it.

These services are based in, and store data in, the United States and other countries, so your information may be processed outside the country you live in. We use established providers that protect it with their own security and legal safeguards.

• Order records: as long as tax and accounting rules require.
• Newsletter sign-ups: until you unsubscribe.
• Emails you send us: as long as we need them to help you.
• IP addresses for abuse protection: about a minute.
• Google's ad cookies: up to 90 days, in your browser.

You can ask us for a copy of the personal information we hold about you, and ask us to correct it or delete it — except where we have to keep it, such as order records for tax. You can unsubscribe from the newsletter at any time. Email orders@dotcreativealley.com; we reply within 2 business days and act on requests within the time the law allows.

If you're unhappy with how we've handled your information, you can complain to the privacy or data-protection authority where you live.

UK and EU visitors: we use your information to perform our contract with you (your order), with your consent (the newsletter, and Google's ad cookies), for our legitimate interests (keeping the site secure, understanding visits) and to meet legal obligations (records).

The whole site uses HTTPS, payments are handled by Stripe, and access to order information is limited to what's needed to fulfil it.

Our shop isn't aimed at children under 16, and we don't knowingly collect their information.

If we change how we handle personal information, we'll update this page and its date. See also our Terms.