Privacy Policy

1. Who we are

This service is operated by Unified Retail Services Ltd("we", "us", "our"), a company incorporated in England & Wales under company number 15752391, with registered office at Unit 1, Incubator 1, Alconbury Weald, Huntingdon, Cambridgeshire, PE28 4XA.

We are registered with the UK Information Commissioner's Office (ICO) under registration number ZB736537. For the purposes of UK data protection law, we are thecontroller of personal data processed through printplatformpro.com and the Print Platform Pro applications.

For any privacy queries, contact privacy@printplatformpro.com.

2. What data we collect

We process the following categories of personal data:

• Account data — email address, password hash (Argon2id, never the password itself), display name (optional), preferred locale, two-factor settings.
• Verification + recovery tokens — short-lived random tokens to verify your email address and to allow password resets.
• Licence data — the licences issued to your account, the devices on which they are activated, and per-device hostnames, platform identifiers, and IP addresses recorded at activation and last validation.
• Session data — opaque session tokens stored in HTTP-only cookies, plus the IP address and user-agent string of the originating browser. Sessions are revocable by row-level deletion.
• Billing data — when you buy a subscription, our payment processor (Stripe) handles your card details; we receive only a customer ID, the billing address and any VAT number you give for the invoice, your plan, and its renewal status. We never see or store your card number.
• Analytics, only if you agree — if you accept analytics cookies, Google Analytics records which pages you visit (with any codes, tokens or email addresses removed from the address first), the site that sent you, your browser, device and approximate location, and how long you stay. It does not receive your name, email address or anything you design or print. See section 4.
• Support correspondence — any emails, attachments, or in-app feedback you send us.
• Server logs — diagnostic logs from our application servers, retained for 30 days and used only for debugging and abuse prevention. These include request paths, status codes, IP addresses, and timestamps.

Where you use our software offline (the Browser Print helper on Windows, macOS or Linux) we do not collect telemetry. The applications phone home only to validate your licence at installation and at periodic intervals defined by your plan; no usage analytics are transmitted.

3. Lawful bases for processing

We rely on the following lawful bases under Article 6 of the UK GDPR:

• Contract (Article 6(1)(b)) — to provide the service you signed up for: account creation, licence issuance, activation tracking, billing.
• Legitimate interests (Article 6(1)(f)) — to operate the service securely, prevent abuse, and ensure infrastructure reliability. We have assessed that these interests are not overridden by your fundamental rights given the limited data scope and security measures applied.
• Legal obligation (Article 6(1)(c)) — to retain accounting records as required by HMRC and to respond to lawful requests from regulators or law enforcement.
• Consent (Article 6(1)(a)) — for analytics cookies (Google Analytics) and any optional marketing communications. You can withdraw it at any time, as easily as you gave it.

4. Cookies

printplatformpro.com and the web app use strictly necessary first-party cookies, which need no consent, and analytics cookies only if you accept them.

Strictly necessary

• pppro_session — opaque session token, HTTP-only, Secure, SameSite=Lax. Keeps you signed in. Lasts 30 days, or until you sign out.
• pppro_google_state, pppro_post_login andpppro_signup_locale — set only when you choose "Continue with Google". They protect that sign-in against forgery, remember which page to return you to and the language you were using. Deleted as soon as the sign-in completes, and never kept longer than 10 minutes.
• ppp_locale — the language you chose, from the language menu or by following a link from a page in that language, so pages appear in it. Lasts a year; choosing another language replaces it.
• ppp_consent — your answer to the cookie banner, so we don't ask on every page. One answer covers both printplatformpro.com and the web app. Lasts six months, then we ask again.
• pppro_admin_session — for our staff only, on our admin system. Lasts 12 hours.

Analytics, only if you accept

• _ga and _ga_XX298MWKH5 — set by Google Analytics to tell one visit from another and count returning visitors. Each lasts up to two years.

Google Analytics is not loaded at all unless you press Accept. We have turned off Google signals and ad personalisation, so the data is used for our analytics and nothing else: we use it to see which pages help people and where they get stuck. Google keeps it for no longer than 14 months. You can change your mind at any time from Cookie settings, at the foot of every page of this site and in the account menu of the web app; rejecting deletes the analytics cookies.

We set no advertising or other third-party tracking cookies, and our fonts are served from our own servers rather than from Google or any other third party. If you pay through Stripe or sign in with Google, those services set their own cookies on their own sites under their own policies.

5. How long we keep your data

• Account data — for the lifetime of your account, plus 30 days after closure (to allow restoration if closed in error).
• Verification + recovery tokens — auto-expire within 24 hours of issue.
• Licence + activation data — for 7 years after the licence's last validation, to satisfy UK accounting record-keeping obligations.
• Sessions — until expiry (default 30 days) or explicit logout.
• Server logs — 30 days, then deleted.
• Support correspondence — 24 months after the conversation closes.

6. Where your data is stored and processed

Our application servers and primary database are hosted inAmazon Web Services London (eu-west-2). Database backups are encrypted and stored within the same region. We do not transfer personal data outside the United Kingdom or the European Economic Area for routine operational purposes.

The following processors may, under their own terms, transfer data outside the UK; where they do, the transfers are covered by the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses with the UK Addendum:

• Amazon Web Services, Inc. — hosting (UK region; replication and metadata may transit US infrastructure).
• Stripe Payments Europe, Ltd. — payment processing and invoices.
• Twilio Inc. (SendGrid) — sending account email: verification, password resets and receipts (US).
• Google LLC — Google Analytics, only if you accept analytics cookies (US, under the EU–US Data Privacy Framework and its UK Extension); and "Continue with Google", if you choose to sign in that way.

7. Your rights

Under the UK GDPR you have the following rights, exercisable free of charge in most circumstances:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — request deletion where the data is no longer needed for the purpose collected, subject to legal retention obligations above.
• Right to restrict processing — limit how we use your data while a query is being resolved.
• Right to data portability — receive a structured, machine-readable export of the data you provided to us.
• Right to object — to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, emailprivacy@printplatformpro.com. We will respond within one calendar month, or notify you within that period if more time is needed (up to a further two months for complex requests, per Article 12(3)).

If you are unhappy with our response, you can complain to the UK Information Commissioner's Office:ico.org.uk/concernsor 0303 123 1113.

8. Security

Passwords are hashed using Argon2id and never stored or logged in plain text. All traffic to printplatformpro.com is served over TLS 1.2 or higher. Database connections from our application servers use SSL. Session tokens are opaque and revocable. Production access is gated behind AWS IAM with least-privilege roles and short-lived credentials via OIDC. We do not have a dedicated Data Protection Officer (DPO) but you can reach the person responsible for data protection atprivacy@printplatformpro.com.

9. Children

Print Platform Pro is a B2B service. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Automated decision-making

We do not use any automated decision-making (within the meaning of Article 22 UK GDPR) that produces legal or similarly significant effects on you. Licence validation is rule-based, not profiling.

11. Changes to this policy

If we make material changes (e.g. a new processor, a new lawful basis, a new transfer destination), we will email registered users at least 14 days before the changes take effect. Minor clarifications will be reflected in the "Last updated" date at the top of this page.