Privacy Policy

There are two different kinds of personal information on letmepersonalise.com, and our responsibility for them is not the same.

Your own account information. Your name, your email, your business, what you spend. We decide what to do with this, so we are the controller of it and this policy is the full account of how we handle it. Ask us about it directly.

Your customers’ information. The name, delivery address and engraving text on each order. That reaches us from your shop, because you sent it to us to have something made and posted. You decide what happens to it; we only act on your instructions. In data-protection terms you are the controller and we are your processor.

What that means in practice: if one of your customers asks what is held about them, or asks for it to be deleted, that request is properly addressed to you, not to us — and we will help you answer it. It also means your own privacy policy needs to tell your customers that a fulfilment partner makes and ships their order.

• Account and business. Your name, email address, password (stored only as a hash we cannot reverse), your business name, and — if you sign in with Google — the email address and name Google gives us. We never receive your Google password.
• Sales-channel credentials. The API key and secret for the store account you connect. Held encrypted; see clause 7.
• Money. Wallet top-ups, what each order cost, and a permanent ledger of every movement. If you pay by bank transfer we see what your bank shows us — typically the sending account name and any reference you write.
• What you send us to make. Artwork files you upload, and where you placed each one on the product.
• Messages. Anything you write to us through the Messages page, and our replies.
• Technical. Your session cookie, and ordinary server logs — IP address, time, and which page was requested — kept for security and to work out what went wrong when something breaks.

When we import an order from a store you have connected, we receive what that store holds about the sale:

• the buyer’s name and delivery address, and their email or phone where the channel supplies it;
• the order number, the items, and what was paid on your shop;
• the personalisation itself — the name, date, message or uploaded image the buyer asked to have engraved. This is the part that is most likely to be sensitive: it is frequently a family name, a wedding date, a memorial, or a pet.

We use it to make the item, put it in a parcel, address the parcel, and tell your channel it has been shipped. We do not market to your customers, we do not add them to any list, and we never contact them ourselves.

Our staff can read the personalisation and the notes on an order, because the person operating the machine has to know what to engrave. Access is limited to the staff who need it to do that job.

• To perform our contract with you — running your account, importing your orders, taking payment, making and shipping the items.
• Because we have to by law — keeping records of what was sold and what was charged, for tax and accounting, and customs information for a parcel crossing a border.
• Because we have a legitimate interest in keeping the service secure, preventing fraud and abuse, and being able to establish what happened if a job or a payment is disputed.
• On your instructions, for everything in clause 3 — we process your customers’ information because you asked us to fulfil their order, and for nothing else.

We do not sell personal information, and we do not share it for anyone else’s advertising. We use a small number of suppliers to run the service, and each sees only what it needs:

We will also disclose information where the law requires it, or to establish or defend a legal claim. If the business is ever sold or merged, information moves with it, and you would be told before anything about you came under a different privacy policy.

On servers in the United States. If you or your customers are in the United Kingdom or the European Economic Area, that is a transfer out of your region, and where one is needed we rely on the standard contractual clauses approved for it.

• Everything travels to and from the site over an encrypted connection.
• Your store credentials are encrypted with a key of their own, which is itself encrypted by a master key held apart from the database. Somebody reading the database alone cannot use them.
• Artwork is kept in private storage that is not reachable from the web. There are no public links to it. Every view goes through this site on a signed link that expires, so access follows the account rather than the URL.
• One seller cannot read another’s data. Separation is enforced by the database itself rather than by each query remembering to ask for it, so a mistake in one screen cannot expose another tenant.
• Passwords are stored only as hashes. Nobody here can read yours, including us.
• Staff access is limited by role — the people who run the machines cannot change pricing or suppliers.

No system is perfectly secure. If a breach affects your information we will tell you, and the relevant regulator, as quickly as the law requires and as quickly as we can.

• Account information — while your account is open, and for a short period after it closes so the closure can be undone if it was a mistake.
• Orders, and the financial ledger behind them — kept for as long as tax and accounting law requires, usually several years. These records are permanent by design: money that has moved cannot be un-recorded, and entries are never edited or deleted, only offset by a later entry.
• Artwork and personalisation — while the order is live and afterwards as our record of what we were asked to make, so a dispute about a finished item can be settled. Ask us and we will delete artwork for an order that is complete and undisputed.
• Store credentials — deleted when you remove the connection.
• Server logs — a short period, then discarded.

We use one kind of cookie, and it is the one that keeps you signed in. Without it the site cannot tell one request from another and you would be signed out constantly.

There is no analytics on this site, no advertising or tracking pixel, and nothing that follows you to another site. That is why you are not asked to consent to cookies here: there is nothing to consent to beyond what the site needs to work.

Depending on where you live, you can ask us to give you a copy of what we hold about you, correct it, delete it, hand it over in a portable form, or stop a particular use of it. You can also object to processing we do on the basis of a legitimate interest.

Ask through the Messages page in your account and we will answer within one month. There is no charge.

Some of it we cannot delete on request: a completed order and its ledger entries are records we are required to keep, and deleting them would leave our accounts wrong.

If you are a customer of one of our sellers and want to know what is held about you, ask the shop you bought from. They hold the relationship and we act on their instructions; sending your request to them gets it answered properly. If you write to us instead, we will pass it to them.

You can also complain to the data-protection authority where you live if you think we have got this wrong.

The service is for businesses and is not directed at children. We do not knowingly create accounts for anyone under 18. Personalised items are frequently made for or about children, and the details a buyer supplies for one are treated like any other personalisation — used to make the item and nothing else.

If we change this policy in a way that matters, we will tell account holders before it takes effect. The date at the top tells you which version you are reading.

GrowthRelay is responsible for the information described in this policy. The fastest route to us is the Messages page inside your account.