Privacy policy

Last updated: 2026-10-23

This policy explains which personal data we collect when you visit christmasposter.com or place an order, why we collect it, how long we keep it and the rights you have.

1. Who is responsible

The data controller is the company identified in our Legal notice, trading as Christmas Poster. Contact: [email protected].

2. Data we collect

• Orders: name, email, delivery and billing address, phone number (for the carrier), the items ordered and the order history.
• Payment: handled by our payment provider; we receive a confirmation and the last digits of the card, never the full card number.
• Personalised posters: the text and images you upload to the Custom Studio.
• Account and newsletter: email address and preferences, if you create an account or subscribe.
• Customer service: the content of your emails and messages.
• Browsing: technical data (IP address, device, pages viewed) through cookies and analytics, as described below.

3. Why we use it

• To process, print, ship and track your order (performance of the contract).
• To answer your questions and handle returns.
• To send order and shipping emails.
• To send our newsletter, only with your consent, with an unsubscribe link in every email.
• To measure and improve the site, prevent fraud and meet legal and accounting obligations.

4. Who receives it

Your data is shared only with the providers needed to run the shop: our print and shipping partners (name and address), carriers, our payment provider, our email provider, our hosting provider and, with your consent, analytics and advertising tools. Each provider acts under a contract that limits the use of your data.

5. Retention

Order data is kept for as long as required by accounting and tax law. Custom Studio uploads are deleted after production unless you ask us to keep them for a reprint. Newsletter data is kept until you unsubscribe. Analytics data is kept for a maximum of 13 months.

6. Cookies

We use strictly necessary cookies (cart, session, security) and, with your consent, analytics and marketing cookies. You can change your choice at any time through the cookie settings link in the footer or your browser settings. Blocking necessary cookies may prevent checkout from working.

7. International transfers

Our print and hosting partners are located in the US. Where data of customers outside the US is transferred, we rely on contractual safeguards recognised by the applicable law.

8. Your rights

Depending on your country, you may have the right to access, correct, delete or export your data, to object to or restrict certain processing, and to withdraw consent at any time. Write to [email protected]; we reply within one month. You may also lodge a complaint with your local data protection authority.

9. Security

Payments are processed over encrypted connections by a PCI-DSS certified provider. Access to customer data is limited to the people who need it to process your order.

10. Changes

We may update this policy; the date at the top indicates the latest version.