Privacy Policy
This Privacy Policy explains how Creative Canvas processes personal data in connection with its photo and art printing services, website use, consultations, file review, proofing, production, and collection arrangements.
Data We Collect
We may collect identification and contact details, order and consultation information, uploaded image files, file specifications such as size, resolution, crop, paper, and finish preferences, proofing and approval records, payment-related information, collection details, and technical data such as device, browser, and usage logs. Where needed for printing, we also process content contained in customer files, including artwork and other materials provided by the customer.
How We Collect Data
We receive personal data when you submit an inquiry, upload files, book a consultation, approve a proof, place an order, or communicate with us by other available channels. We also obtain limited technical data automatically when you use the website, and we may receive order-related information from payment or service providers involved in completing the transaction.
Types of Cookies
The website may use essential cookies to support core functions, preference cookies to remember selected settings, and analytics cookies to understand general site use. Cookies may be session-based or persistent depending on their purpose. We do not use cookies to collect more information than is reasonably needed for the stated function.
Cookie Controls
You can manage cookies through your browser settings and, where available, through the cookie controls shown on the website. Blocking some cookies may affect site functions, form handling, or preference storage. Essential cookies may still be used where they are necessary for the operation of the site.
Depending on your location and the applicable law, you may have rights relating to access, correction, deletion, restriction, objection, and portability of your personal data. Some requests may be limited where processing is necessary for contract performance, legal compliance, or the establishment, exercise, or defence of legal claims.
To exercise a privacy right, we may ask for information needed to verify your identity and understand the request. We will assess the request and respond within the period required by applicable law. If a request cannot be fully granted, we will explain the reason where permitted.
We keep personal data only for as long as needed for the relevant inquiry, order, proofing, accounting, or legal recordkeeping purpose. When data is no longer required, we delete it or anonymise it unless a longer retention period is needed to comply with law, resolve disputes, or maintain business records.
If we make material changes to this Privacy Policy, we will update the policy text on the website and may provide additional notice where appropriate. The version in force is the one published at the time of your visit or interaction, unless a later version states otherwise.
Purposes of Processing
We use personal data to respond to inquiries, review uploaded files, assess resolution and crop suitability, discuss size and paper options, prepare quotes, manage test print review and final approval, produce printed items, arrange packaging and collection, process payments, maintain records, operate the website, and meet legal or accounting obligations. We may also use limited technical data to secure the site, prevent misuse, and improve basic functionality.
Service Providers and Partners
We may share personal data with service providers that support website hosting, technical maintenance, file handling, communication, payment processing, and related operational tasks. Where external providers are used, they are expected to process data only on our instructions or for their own independent role in the transaction, as applicable.
Legal Disclosures
We may disclose personal data to public authorities, courts, or other parties when required to comply with legal obligations, respond to lawful requests, protect rights and safety, or support the handling of disputes and claims. Any disclosure is limited to what is reasonably necessary for the relevant purpose.
GDPR Overview
Creative Canvas acts as a controller for the personal data processed through this website and related studio services. Processing is carried out on one or more lawful bases, including performance of a contract, compliance with legal obligations, legitimate interests, and, where required, consent. We apply data minimisation and process only what is needed for the relevant purpose.
Where the GDPR applies, it governs our processing of personal data of individuals in the European Economic Area and, in some cases, related cross-border processing.
Your GDPR Rights
Where the GDPR applies, you may have the right to access your data, request rectification or erasure, restrict or object to certain processing, and request data portability where applicable. If processing is based on consent, you may withdraw consent for future processing. You may also lodge a complaint with the competent supervisory authority if you consider that your rights have been affected.