Who we are

PosterZap is operated by Matthew Steen, responsible for processing your personal data. Contact: hello@posterzap.com.

Your order

We use your name, email address, delivery address, poster details and any photos or route files you provide to make and deliver your poster and communicate with you about your order. Required fields are needed to fulfil your order; photos are optional. Files are uploaded when you add them, before checkout.

The legal basis is fulfilling our contract with you or taking steps you request before ordering (Art. 6(1)(b) GDPR). We answer other enquiries based on our legitimate interest in responding to them (Art. 6(1)(f)).

For gifts, we receive the recipient’s details from the buyer and process them for our and the buyer’s legitimate interest in making and delivering the requested poster (Art. 6(1)(f)).

Service providers

We use:

• Cloudflare to host the website, store order information and uploads, and provide related technical services.
• Resend to send order emails and messages from our contact form.
• Google for our mailbox, including your emails to us and our order notices.
• Backblaze to store backups, and GitHub to run the backup job.
• Specialist printing and delivery providers to print and deliver orders. They receive the necessary delivery details and poster files.

Some service providers process personal data outside the European Economic Area, including in the United States and the United Kingdom. Transfers to the United Kingdom rely on the European Commission’s adequacy decision. Transfers to US providers rely on the EU–US Data Privacy Framework where applicable, or the European Commission’s standard contractual clauses. You can request a copy of the applicable contractual safeguards at hello@posterzap.com.

Website and browser storage

We process connection information, including IP addresses and browser information, to operate and protect the website. We collect basic usage statistics, including pages visited, referring websites and a visitor identifier that changes daily. Our statistics do not store your full IP address.

The legal basis is our legitimate interest in operating, securing and improving the shop (Art. 6(1)(f) GDPR).

We do not use cookies. We save your cart, poster drafts, photo previews and route recordings in your browser so you can continue your order for up to 30 days. Temporary checkout information expires after one hour.

How long we keep your data

We delete unfinished uploads and server-side drafts after 30 days. We keep order information and personalised poster files for 12 months after delivery to handle questions and reprints, then delete them or remove identifying information.

Accounting and business records are retained where legally required, generally for six, eight or ten years depending on the record (Art. 6(1)(c) GDPR).

Usage statistics are kept for 13 months. Our email delivery provider normally keeps sent messages for 30 days. Backup copies may remain for about 90 days after deletion from our active systems.

Your rights

Under the conditions set out in the GDPR, you can request access, correction, deletion, restriction of processing and data portability.

You may object to processing based on legitimate interests for reasons relating to your particular circumstances.

Email hello@posterzap.com to exercise your rights. You can also complain to a data protection supervisory authority, including one where you live or work.