Privacy policy

We collect what we need to print your order, deliver it and account for it, and we hold it no longer than we have to. We do not sell personal data, and we do not share it with anyone except the companies that print, deliver, charge and email on our behalf. You can ask for a copy of everything we hold about you, or ask us to delete it.

Last reviewed 17 Sep 2026.

1. Who is responsible for your data

Discoverprint (VRVC Investotech Limited) is the data controller. We are registered in the Republic of Ireland under company number 639082, at Discoverprint, The Crescent, Northwood, Santry, Dublin.

For anything in this policy, write to sales@discoverprint.ie or to the address above. We answer within one month.

2. What we hold, why, and on what basis

Under the GDPR we have to have a lawful basis for each thing we hold. This is the whole list.

What we hold, why we hold it and our lawful basis
What	Why	Lawful basis
Your name, email address, phone number and addresses	To take the order, send the proof, deliver it and answer questions about it	Performance of our contract with you
What you ordered, the options you chose and what you paid	To print the right thing and to keep the accounts	Contract, and legal obligation for the tax record
Artwork and the details you type for your print	To prepare your proof and print it	Performance of our contract with you
Your account and password, if you make one	So you can track orders, approve proofs and reorder	Performance of our contract with you
Messages to the assistant or to our team	To answer you, and to see where the assistant is getting it wrong	Our legitimate interest in answering and improving support
Your email address for offers and news	To send marketing you asked for. Every one carries an unsubscribe link	Your consent, withdrawable at any time
Basket contents and the email you typed at checkout	To send at most two reminders if you leave without ordering	Your consent, given at the point you typed it
Technical logs and error reports	To keep the site up, to find faults and to stop abuse	Our legitimate interest in a working, secure site

We do not ask for, and do not want, any special category data: nothing about health, beliefs, politics or anything else in that class. Please do not send it to us in artwork or in a message.

3. Children

This is a business to business print shop and it is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us something, tell us and we will delete it.

4. Who else processes it

We use the following companies to run the service. Each acts on our instructions under a contract, and none of them may use your data for their own purposes.

The companies that process data on our behalf
Who	What they do for us	Where
Supabase	Database, file storage and sign in	European Union
Vercel	Hosting and delivery of the website	European Union, with a global edge network
Stripe	Card payments. We never see or store your card number	European Union and United States
Google (Gmail API)	Sending the email we owe you: proofs, receipts, updates	European Union and United States
Anthropic	The assistant that answers questions on the site	United States
Sentry	Error reports when something breaks	European Union

We also pass your name, address and phone number to the courier carrying your parcel, and we give our print suppliers only the artwork and the specification of the job. Where a transfer goes outside the European Economic Area it is covered by the European Commission’s standard contractual clauses.

We will disclose data if the law requires it, and we will pass it to our accountants, insurers or solicitors where they need it. We do not sell it, and we never will.

5. How long we keep it

How long each kind of data is kept
What	How long
Orders, invoices and the tax record	Six years after the end of the tax year, as Irish tax law requires
Artwork files attached to an order	24 months after the order, then deleted automatically
A basket you never ordered from	Idle after 30 days, deleted at 90 days
Chat conversations	12 months, then deleted automatically
Your account	Until you ask us to close it
Marketing consent and unsubscribes	Kept as a record of the choice, so we can prove we honoured it

6. Your rights

Under the GDPR you have the right to:

Ask what we hold about you, and get a copy of it.
Have anything wrong corrected.
Have it deleted, where we have no continuing reason or legal duty to keep it.
Restrict what we do with it while a question about it is settled.
Receive what you gave us in a portable form, or have us send it to someone else.
Object to processing we do on the basis of legitimate interests.
Withdraw consent at any time, for marketing or for anything else you consented to. Withdrawing it does not undo what was lawful before.

Exercising any of these is free and you do not have to give a reason. Email sales@discoverprint.ie. If you are not satisfied with how we handle it, you can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, or at dataprotection.ie. We would rather you came to us first so we can put it right.

7. How we look after it

The site runs over HTTPS. Passwords are hashed and never stored in a readable form, and we never see your card number: Stripe takes the payment on its own systems. Access to customer data is limited to the people who need it to do the job, and every admin action is logged. Files you upload are private and are served only through short lived signed links.

No system is perfect. If a breach ever puts your rights at risk we will tell the Data Protection Commission within 72 hours and tell you without undue delay.

8. Cookies

Cookies get their own page, because there is a lot to say and it should be easy to find. See the cookie policy for every cookie we set, what it does and how long it lasts.

9. Changes to this policy

If we change how we handle data we will update this page and change the date at the top. Where the change is significant we will tell customers by email rather than expecting anyone to notice a web page.