Privacy notice

This website is run by Ross Boag, a freelance designer based in Glasgow, Scotland. Print orders are sold by Ross Boag Print, a trading name of Ross’s company VIZN AI LTD (registered in Scotland, SC874293; registered office 3/2, 4 Orkney Place, Glasgow G51 2DA, United Kingdom).

VIZN AI LTD is the controller of the information collected through the print shop, including print orders and print or design requests. Ross Boag is the controller of other enquiries sent through this website. Either way, Ross handles it personally, and “I” and “me” in this notice mean him. Contact me about your information at rossboag1@gmail.com, or write to the registered office above.

• Enquiries: what you enter in the contact form, such as your name, business, email, phone number and project details.
• Print orders and requests: your name, email, phone number, business, delivery address, the artwork or reference files you upload, your brief or notes, and what you ordered and paid. Card details are entered on Stripe’s secure checkout and never reach me.
• Site usage: anonymous, aggregated visit statistics from Vercel Web Analytics: the pages viewed, the site that sent you, your browser, device type and rough location, and a few actions such as starting checkout. It doesn’t use cookies and doesn’t identify you. If you arrive from a campaign link or a social site, its source is kept in your browser for that visit so an enquiry, print request or order can say where you found me.
• Advertising cookies, only if you accept them: Meta’s pixel records the pages you view here and a few actions, such as viewing a print product, starting checkout, completing an order, sending an enquiry or tapping my phone number. See Cookies below.

• To reply to enquiries and quote for work, because it’s in our legitimate interests to discuss work you asked about.
• To make, deliver and support your print order, and to quote for design or print you’ve asked about, because that’s needed to perform our contract or take steps you’ve asked for before one.
• To take payment and prevent fraud, because that’s needed for our contract and it’s in our legitimate interests to keep payments secure.
• To keep order and payment records, because tax and company law require it.
• To understand how the site is used and which links bring people to it, so I can improve it, because that’s in my legitimate interests. You can turn this off (see Cookies below).
• To show my adverts on Facebook and Instagram to people who’ve visited this site, and to measure whether they work, only if you accept advertising cookies (your consent). You can withdraw it at any time.

No, but I need your name, email address and delivery address to make and deliver an order, and a way to contact you to reply to an enquiry. I don’t make automated decisions about you.

Only with services that help me run this site and fulfil orders, and only what each one needs:

• Stripe, to take card payments, check them for fraud and keep payment records.
• A UK trade printer, which receives your artwork and delivery details to print and deliver your order, and its courier.
• Vercel, which hosts this website, stores uploaded artwork (in London) and provides the site’s Web Analytics.
• Resend, which sends order and enquiry emails.
• Google, which provides the email inbox where order and enquiry emails reach me.
• Meta Platforms Ireland, only if you accept advertising cookies (see Cookies below).

Some of these providers, including Stripe, Vercel, Resend, Google and Meta, may process information outside the UK, for example in the US. Where they do, they use safeguards recognised under UK data protection law, such as the UK–US data bridge or the ICO’s international data transfer agreement. I never sell your information, and it’s only used for advertising if you accept advertising cookies.

• Uploaded artwork is deleted from my file storage automatically 90 days after upload.
• Order and payment records, including emails about orders, are kept for six years, as HMRC requires.
• Enquiries and print or design requests that don’t lead to work are deleted within two years.
• Analytics are kept only as aggregated statistics that don’t identify you.
• Meta’s cookie in your browser expires after 90 days. Meta keeps what the pixel sends it under its own privacy policy.

You can ask for a copy of your information, ask me to correct or delete it, ask me to limit how it’s used, object to how it’s used, or ask for information you gave me in a format you can take elsewhere. It’s free. Email me and I’ll respond within one month. Some records, such as payment records, must be kept for legal reasons.

If you’re unhappy with how I’ve handled your information, please tell me first by email. I’ll acknowledge your complaint within 30 days and let you know what I’ve done about it. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

This site sets no cookies of its own unless you accept advertising cookies (below). Vercel Web Analytics doesn’t use cookies or store anything in your browser. The site keeps two small items in your browser’s session storage, which is cleared when you close the tab:

• portfolio:anchor-scroll: which home page section you picked from the menu, so the page can scroll to it. It’s deleted as soon as it’s used.
• rb_campaign: if you arrive from a link with campaign tags (utm_…) or from a social site such as Facebook, Instagram or LinkedIn, where you came from, so an enquiry, print request or order, or a tap on my phone number or email address, can be counted against it.

If you’d rather not be counted, turn analytics off below. That stops Web Analytics and campaign tracking in this browser. Your choice is saved in your browser’s local storage (rb_analytics_off) so it’s remembered.

Advertising cookies (Meta Pixel). Only if you accept them in the cookie banner, the site loads Meta’s pixel. It tells Meta which pages you view here and when you view a print product, start checkout, complete an order (its value and reference), send an enquiry or request, or tap my phone number or email address, with the kind of page it happened on (for example a website design page) and your IP address and browser details. It never sends what you type into a form. If you use Facebook or Instagram, Meta can link this to your account, so I can show my adverts to people who’ve visited and see whether they work. Meta doesn’t tell me who you are. Meta and I are joint controllers for collecting and sending this information (Meta’s Controller Addendum), and Meta is responsible for what it does with it afterwards, as described in its privacy policy.

• _fbp (this site, 90 days): identifies your browser to Meta.
• _fbc (this site, 90 days): set only if you arrive from a link on Facebook or Instagram, to record which one. If you accept on a later page of the same visit, the site sets it from the link you arrived on.
• Meta may also read its own cookies, such as fr, if you’re logged in to Facebook or Instagram.

The pixel never runs on artwork upload or review links, and order confirmation links are removed from the address bar before anything is sent. Your choice is saved in your browser’s local storage (rb_ads_consent) and asked again after a year. While advertising cookies are on, the references of orders and requests already reported are kept there too (rb_meta_sent), so one isn’t counted twice. Change it here or from “Cookie settings” at the foot of any page. Turning advertising cookies off stops the pixel and deletes its cookies and records from this site.

Stripe sets its own cookies on its checkout pages (checkout.stripe.com) to prevent fraud and keep payments secure.