Privacy Policy

Important Information and Who We Are

Purpose of this Privacy Policy

This Privacy Policy is intended to inform you how PrintSprout Inc. ("PrintSprout", "we", "our", or "us") collects, uses, and protects your personal information through your use of our website, dashboard, and related services (collectively, the "Services"). This includes any personal information you may provide when:

• Signing up for an account or demo
• Using our website or dashboard
• Placing or managing an order
• Subscribing to emails or alerts
• Contacting our customer support
• Responding to surveys, feature requests, or providing content or suggestions

We encourage you to read this Privacy Policy together with any other privacy notice or fair processing notice we may provide on specific occasions. These notices are intended to work together to give you a complete picture of how we handle your information. This policy is meant to supplement—not override—any other notices.

Children Under 16

Our Services are not intended for children under 16 years of age. We do not knowingly collect personal information from anyone under the age of 16. If you are under 16, please do not use our Services or provide any personal information to us, including your name, address, telephone number, or email address.

If we become aware that we have collected personal information from a child under 16 without verified parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us immediately at support@printsprout.shop.

Who We Are: Data Controller and Processor

PrintSprout acts as a data controller when we collect and process personal information related to your direct interaction with our website or dashboard (for example, account creation, billing, and user activity).

PrintSprout acts as a data processor when Retailers (our customers) use our platform to upload or manage their customers’ order information. In these cases, the Retailer is the data controller, and PrintSprout processes that data on their behalf in accordance with their instructions. This Privacy Policy does not apply to personal data for which PrintSprout is acting solely as a processor.

Contact Details

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. All changes will be posted to our website and noted with a revised “last updated” date. We encourage you to review this policy periodically to stay informed of how we are protecting your personal information.

Please ensure that any personal information you provide is accurate and up to date. If your information changes, please notify us during the course of your relationship with us.

Third-Party Links

Our website or dashboard may contain links to third-party websites, applications, or services. Clicking on those links or enabling those connections may allow third parties to collect or share your personal data. We do not control these third-party websites and are not responsible for their privacy practices. We recommend reviewing the privacy policy of each site you visit.

The Information We Collect About You

Personal Data We Collect

"Personal Data" (or "personal information") refers to any information about an identifiable individual, either directly or indirectly. This does not include anonymous data where the individual’s identity has been removed or cannot be linked back.

PrintSprout may collect, use, store, and transfer various types of Personal Data, which we group as follows:

• Identity Data – Includes your first name, last name, username, or similar identifier.
• Contact Data – Includes your billing address, shipping address, email address, and phone number.
• Financial Data – Includes partial payment details; however, full credit card data is handled by third-party processors such as Stripe or Chargebee and is never stored by PrintSprout.
• Transaction Data – Includes details about payments to and from you, orders placed, and the Services you purchase from us.
• Technical Data – Includes your IP address, device type, browser type and version, time zone setting, location, operating system, platform, login data, and other technology used to access our website or dashboard.
• Profile Data – Includes your username and password, past orders, preferences, account settings, feedback, and survey responses.
• Usage Data – Includes how you use our website and dashboard, including pages viewed, buttons clicked, time spent, search queries, product interactions, and session timestamps.
• Marketing and Communications Data – Includes your preferences regarding marketing communications and how you want to be contacted.

Aggregated Data

We may also collect, use, and share Aggregated Data, such as statistical or demographic information, for business analysis and platform improvement. Aggregated Data is not considered personal information under the law if it cannot be used to identify you.

Example: We may aggregate Usage Data to calculate the percentage of resellers using a certain tool or feature. However, if we link Aggregated Data with your personal information in a way that identifies you, we treat it as Personal Data and protect it accordingly.

Sensitive Data

PrintSprout does not collect any Special Categories of Personal Data, such as:

• Racial or ethnic origin
• Religious or philosophical beliefs
• Sexual orientation or activity
• Political opinions
• Union membership
• Health or medical information
• Biometric or genetic data
• Criminal conviction or offense history

Please do not submit this type of information through our platform. If we become aware that such data has been submitted, we will take steps to delete it securely.

If You Choose Not to Provide Personal Data

In some cases, we are required by law or by contract to collect certain Personal Data. If you do not provide this information when requested, we may not be able to fulfill our obligations—such as processing your orders or providing access to your account. If this situation arises, we will inform you at the time and explain the potential consequences, including any interruption or cancellation of services.

How Personal Information is Collected

We collect personal information from users through a combination of direct input, automated technologies, and third-party sources. This includes the following methods:

1. Direct Interactions with You

You may provide us with Identity, Contact, and limited Financial Data by filling out forms, connecting your eCommerce store (e.g., Shopify or WooCommerce), or communicating with us via email, phone, or support channels. This occurs when you:

• Sign up for a demo of our platform
• Create an account or reseller profile with PrintSprout
• Subscribe to email alerts, product updates, or newsletters
• Purchase a subscription or place an order using our dashboard
• Submit online forms to access reports, case studies, or other content
• Download or access guides, PDFs, or training materials
• Contact our support team for technical or order-related help
• Request marketing communications or updates
• Provide feedback through surveys, interviews, or chat interactions

2. Automated Technologies and Interactions

When you interact with our website or dashboard, we may automatically collect Technical Data and Usage Data about your device, browsing behavior, and interaction patterns. This information is gathered using:

• Cookies and similar tracking technologies
• Server logs and diagnostic tools
• Session monitoring tools (e.g., for performance or error tracking)

We may also receive Technical Data when you visit third-party websites that integrate PrintSprout tracking tools or advertising pixels.

3. Third-Party Sources and Publicly Available Information

We may collect personal data from third-party services and public sources to support account creation, analytics, and marketing. These sources include:

• Analytics Providers (e.g., Google Analytics) – for understanding how visitors use our website
• Payment and Billing Platforms (e.g., Stripe, Chargebee) – to process subscriptions and transactions securely
• Ecommerce Integrations (e.g., Shopify, WooCommerce) – to enable real-time product and order sync
• CRM or marketing partners – to provide onboarding support or analyze user engagement
• Public platforms (e.g., LinkedIn, Instagram, business directories) – to gather basic business contact information when legally permitted

We only collect this data when it is relevant to your use of our services and in accordance with Applicable Law.

How We Use Your Personal Information

PrintSprout will only use your personal information when legally permitted to do so. Most commonly, we rely on the following lawful bases:

• To perform a contract we are about to enter into or have entered into with you (e.g., setting up your account, processing orders).
• For our legitimate business interests, provided these do not override your rights and freedoms (e.g., improving services, preventing fraud).
• To comply with legal or regulatory obligations (e.g., tax laws, financial recordkeeping).
• With your consent, in cases where it is required (e.g., email marketing from third parties).

Purposes for Which We Use Your Information

Here we describe the ways we plan to use your personal data and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Marketing Preferences

We offer clear choices about how your personal information is used for marketing:

• Promotional Offers: If you’ve opted in or previously engaged with us, we may send you product updates or offers relevant to your activity. You can opt out at any time.
• Third-Party Marketing: We will always request your explicit consent before sharing your information with third parties for marketing purposes.
• Opting Out: You can opt out of any marketing communications by following the unsubscribe link in emails or contacting us at support@printsprout.shop. This will not affect service-related messages (e.g., order confirmations or account notices).

Cookies (Website Only)

Our website uses cookies and similar technologies to improve performance and analyze usage. You can adjust your browser settings to block or alert you to cookies. Note that disabling cookies may affect the functionality of the site.

Change of Purpose

We will only use your personal data for the purpose it was collected. If we need to use it for a different reason that is compatible with the original purpose, we will notify you and explain the legal basis. In rare cases, we may process your data without your knowledge or consent where required or permitted by law.

Disclosures of Your Personal Information

We may need to share your personal information with third parties to support the purposes outlined in the "How We Use Your Personal Information" section above. Categories of third parties we may share your data with include:

• Service Providers: Trusted third-party vendors who help us operate our platform, including providers of IT infrastructure, cloud storage, email delivery, analytics, and system administration services.
• eCommerce Platforms & Integrations: If you connect your PrintSprout account to an online store (e.g., Shopify, WooCommerce, Etsy), we may share relevant data as needed to fulfill your orders, sync products, or manage your account integrations.
• Professional Advisors: This includes lawyers, accountants, auditors, insurers, and financial institutions based in Canada and the United States who provide legal, financial, or compliance-related services to PrintSprout.
• Government Authorities or Regulators: We may be required to disclose data to law enforcement agencies, courts, tax authorities, or other regulatory bodies in Canada or the U.S. when legally required to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of PrintSprout assets, we may transfer your personal information to a third party as part of that transaction. The new owner will be required to handle your information in a manner consistent with this Privacy Policy.

We require all third parties with whom we share data to uphold strict confidentiality and security obligations. They are not permitted to use your personal information for their own purposes and may only process your data based on our written instructions and for the intended purpose.

Data Security

PrintSprout has implemented industry-standard security measures to help protect your personal information from accidental loss, unauthorized access, misuse, alteration, or disclosure.

We limit access to your personal information to employees, contractors, agents, and service providers who have a legitimate business need to access it. These individuals and organizations are bound by confidentiality agreements and are only permitted to process your information based on our instructions.

We also maintain policies and procedures to detect, respond to, and contain any suspected personal data breaches. In the event of a confirmed data breach, we will notify affected users and any applicable regulatory authorities if required by law.

Data Retention

How Long We Keep Your Personal Information

PrintSprout will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to meet legal, financial, and regulatory obligations.

When determining how long to keep your data, we consider:

• The nature, sensitivity, and volume of the data
• The purpose for which it was collected and whether those purposes can be fulfilled through other means
• Any potential risks of unauthorized use or disclosure
• Applicable legal, tax, or regulatory requirements

In accordance with legal obligations, we may retain certain types of personal information (such as Contact, Identity, Financial, and Transaction Data) for up to six years after your relationship with PrintSprout ends, primarily for tax, compliance, or dispute resolution purposes.

Your Legal Rights

Under applicable privacy laws in Canada and the United States, you may have rights regarding how we handle your personal information. These rights include:

1. Request Access: You may request a copy of the personal information we hold about you to verify that we are processing it lawfully.
2. Request Correction: You can request that we correct any incomplete or inaccurate personal information we hold. We may need to verify the accuracy of the updated data before making changes.
3. Request Erasure: You have the right to request deletion of your personal information where there is no lawful reason for us to continue processing it. This includes instances where you have withdrawn consent, the data was unlawfully processed, you object to processing and there are no overriding legitimate grounds, or we are required to delete it under the law. Note: We may retain certain data when required for legal, regulatory, or contractual purposes, and we will notify you if this applies.
4. Object to Processing: You can object to us processing your personal information when we rely on our legitimate interests (or those of a third party) and your specific situation justifies it. You may also object at any time to your data being used for direct marketing purposes.
5. Request Restriction of Processing: You can ask us to limit how we process your personal information in certain situations, such as while we verify its accuracy or consider your objection.
6. Request Data Portability: In certain cases, you can request that we transfer your personal data to you or another organization. This applies to data you provided to us with your consent or to fulfill a contract, and the processing is carried out by automated means.
7. Withdraw Consent: Where we rely on your consent to process your personal information (e.g., for marketing), you may withdraw it at any time. Withdrawal does not affect any processing that occurred before your request.

How to Exercise Your Rights

If you would like to exercise any of the rights above, please contact us at support@printsprout.shop.

We may need to request additional information to verify your identity before proceeding with your request. This is a security measure to ensure your data is not disclosed to anyone without proper authorization.

No Fee Usually Required

You will not be charged to access your personal data or exercise your rights. However, we may charge a reasonable fee or refuse to act on a request if it is clearly unfounded, repetitive, or excessive.

Response Time

We aim to respond to all valid requests within 30 days. If your request is complex or you have made multiple requests, we may need more time. If so, we will let you know and keep you updated on progress.