Privacy policy

Last updated: October 2026

This Privacy Policy describes how Sticker it (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Who we are

Sticker it is a trading name of Kartdavid Ltd, a company registered in England and Wales (company number 08234971). Our registered office is Stonehaven, Breach Hill, Chew Stoke, Bristol, BS40 8YG, United Kingdom, and we trade from 14 Filwood Green, Bristol, BS4 1ET. Kartdavid Ltd is the controller of your Personal Information under the UK General Data Protection Regulation (“UK GDPR”) and, for visitors in the European Economic Area (“EEA”), the EU GDPR. We are registered with the Information Commissioner’s Office (ICO) under registration number ZA732180.

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at info @ stickerit . co

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

  • Device information:
    • Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
    • Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
    • Disclosure for a business purpose: shared with Google (Analytics and Ads), Meta and Microsoft Advertising if you accept analytics or marketing cookies, and with our processor Shopify when you check out.
    • Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
  • Order information:
    • Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
    • Source of collection: collected from you.
    • Disclosure for a business purpose: shared with our processor Shopify and Sendcloud our shipping partner.
    • Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.
  • Chat with Si, our AI assistant:
    • Purpose of collection: to answer your questions about our products, materials, artwork and orders; to look up your orders when you choose to confirm who you are; and to check and improve the quality of Si’s answers.
    • Source of collection: collected from you when you type in the chat, and from your Sticker it account or order records when you sign in or confirm your email address.
    • Disclosure for a business purpose: shared with our processors Anthropic (which generates Si’s answers), Fly.io (which hosts the chat), Neon (our database), Mailgun (which sends email codes), and Shopify and our production system (for order look-ups).
    • Personal Information collected: your messages and Si’s replies; the language and page you chatted on; your ratings and feedback; a one-way code made from your IP address, which changes every day and is used only to stop abuse; and, if you sign in or confirm your email, your email address or account reference and the details of the orders Si looks up for you.
  • Contact form:
    • Purpose of collection: to answer your enquiry, and to protect the form from spam.
    • Source of collection: collected from you.
    • Disclosure for a business purpose: shared with our processors Mailgun (which delivers your message to our support inbox), Groove (our customer service system) and Cloudflare (whose Turnstile check confirms you’re not a bot).
    • Personal Information collected: your name, email address, phone number and order number (both optional), the topic and your message, any files you attach, and our chat with you if you choose to include it.
  • Emails to our support team:
    • Purpose of collection: to answer you. We use AI to help write a first draft of our reply and to check your order’s status; a member of our team reads, edits and sends every reply.
    • Source of collection: collected from you, and from your order records.
    • Disclosure for a business purpose: shared with our processors Groove (our customer service system) and Anthropic (which helps draft replies).
    • Personal Information collected: your name, email address and the content of your email, the order details we look up, and the draft reply.
  • Your Sticker it account (account.stickerit.co):
    • Purpose of collection: to let you sign in; see, reorder and track your orders; approve proofs; manage your addresses, invoices and payment methods; run a trade account and its team; and give you the benefits of our loyalty programme.
    • Source of collection: collected from you, and from our order records in Shopify and our production system.
    • Disclosure for a business purpose: shared with our processors Clerk (sign-in and teams), our production system Glide (orders, proofs and artwork), Shopify (orders and address book), Stripe (payments and saved cards; we never see your full card number), Xero (trade invoices), Klaviyo (loyalty emails), Mailgun (email), Neon (our database), Fly.io (hosting) and Upstash (error monitoring).
    • Personal Information collected: your name and email address; your organisation and role if you’re part of a trade account; addresses and phone numbers in your address book; invoice details (company name and number, VAT number, billing address); your orders and total spend, which set your loyalty tier; your saved designs; whether you agree to us sharing your designs; and, for trade API users, an API key, which we store encrypted. Your password is held by Clerk, not by us.
  • Design tools (the designer, vectoriser, cutline, background remover and upscaler):
    • Purpose of collection: to process the images you upload, produce your files, save your designs, send your downloads, count free downloads and credits, and keep the tools fair and free of abuse.
    • Source of collection: collected from you.
    • Disclosure for a business purpose: shared with our processors Tigris (file storage), Upstash (download counts and sign-in codes), Mailgun (codes and files by email), Cloudflare (Turnstile bot check), Picsart (image upscaling), RunPod and Modal (background removal), and Google Fonts (fonts in the designer).
    • Personal Information collected: the images and files you upload and the designs you make; your email address when you download or save; download and credit counts; a random device identifier used for usage statistics; and your IP address, used for rate limits and fair use and kept for no more than two days.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

  • We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
  • We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
  • If you belong to a trade account, other members of that organisation can see the orders, designs and delivery addresses placed under it, and the account’s owners can also see its invoices and billing details.
  • A saved design in our design tools can be opened by anyone who has its link, so only share that link with people you trust.

Si, our AI assistant

Si is an AI assistant, not a person, and the chat says so. Si can make mistakes, so please check anything important with our team.

  • Si’s answers are generated by Claude, an AI model made by Anthropic. Anthropic processes your messages only to produce Si’s replies, under its Commercial Terms of Service and Data Processing Addendum. Those terms do not allow Anthropic to train its models on them, and Anthropic deletes them within 30 days.
  • Si only looks up orders after you’ve confirmed who you are: by signing in to your Sticker it account, or with a six-digit code we email to the address you ordered with. Si can only see orders linked to that account or email.
  • Si can’t issue refunds or reprints, change an order, or make any other decision about you. Those requests go to a member of our team.
  • You don’t have to use Si. The contact form and info@stickerit.co always reach a person.
  • Please don’t type passwords, payment card details or other sensitive information into the chat.

Behavioural Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

  • We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
  • We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).
  • We use Shopify Audiences to help us show ads on other websites with our advertising partners to buyers who made purchases with other Shopify merchants and who may also be interested in what we have to offer. We also share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants may make offers you may be interested in.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: https://optout.aboutads.info/.

Using Personal Information

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfilment of your order, and keeping you up to date on new products, services, and offers.

Lawful basis

Under the UK General Data Protection Regulation (“UK GDPR”), and the EU GDPR for visitors in the European Economic Area (“EEA”), we rely on the following lawful bases:

  • The performance of our contract with you;
  • Compliance with our legal obligations;
  • Our legitimate interests, which do not override your fundamental rights and freedoms;
  • Your consent, for marketing cookies and our newsletter.

We answer your chat messages, contact form enquiries and emails, and look up your orders, because it is necessary to provide our service to you (contract) and in our legitimate interest in helping our customers quickly. We review chats and ratings to improve Si’s answers, which is also in our legitimate interest.

We run your account and our design tools because it is necessary to provide the service you ask for (contract), and we keep them secure and free of abuse in our legitimate interest. We set analytics and advertising cookies, and send our newsletter, only with your consent, which you can withdraw at any time.

Retention

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.

  • Si chats: your conversation, ratings and feedback are deleted automatically 90 days after your last message.
  • Email codes: stored only in a form that can’t be read back, and deleted within a day.
  • Contact form: our record of your submission is deleted automatically after 90 days. Your message and any files you attach are sent to our support inbox and kept there with your other emails (below).
  • Emails to our support team: kept in our customer service system for six years, so we can deal with questions about past orders and meet our tax and accounting obligations.
  • AI draft replies: each draft, and our record of how your email was handled, is deleted automatically after two years.
  • Your account: kept while you have an account. Ask us at info@stickerit.co to close it and delete your details; we keep only what we must for tax and accounting.
  • Design tool uploads and results: the images you upload and the files we make from them are deleted automatically after 7 days, unless you save the design.
  • Saved designs: deleted automatically 90 days after you last saved them, unless you keep them in your account, in which case they stay until you ask us to delete them.
  • Artwork and print files for orders: kept with your order records, so we can reprint or reorder for you.
  • Design tool sign-in codes and download counts: codes expire after 10 minutes; download and credit counts are deleted after 45 days. Error reports, which include your browser and the page you were on, are deleted after 40 days.

Automatic decision-making

Under UK GDPR, and the EU GDPR for visitors in the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We do not make decisions about you that have a legal or similarly significant effect based solely on automated processing. Si, our AI assistant, answers questions and looks up information. Decisions such as refunds, reprints and changes to orders are always made by a member of our team, as is every email reply we send.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

  • Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
  • Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days. 

Your rights

GDPR

Under UK GDPR, and the EU GDPR for visitors in the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information above.

Our own systems are hosted in London, United Kingdom, and Paris, France, with our main databases in Frankfurt, Germany. Some of our providers process data elsewhere, mainly in the United States: Shopify (also Ireland and Canada), Anthropic, Groove, Clerk, Stripe, Klaviyo, Google, Meta and Microsoft, among others. Mailgun processes our email in the EU. Where Personal Information leaves the UK, we rely on adequacy regulations or on safeguards such as the UK International Data Transfer Addendum. For how Shopify’s transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

CCPA

If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information above.

If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address above.

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

These are the cookies and similar browser storage we use, grouped as in our cookie banner. “Stored in your browser” means local or session storage, which works like a cookie but isn’t sent to our servers automatically.

Strictly necessary (always on)

  • fs-cc (Finsweet, our cookie banner): remembers your cookie choices. 120 days.
  • sit_cart, sit_cart_n (Sticker it): keep your basket, and its item count, across our website, design tools and account area. 10 days.
  • sit_cart_id (Sticker it, stored in your browser): a backup of your basket’s ID for browsers that block the cookie above. Kept until you clear your browser storage.
  • si_chat_v1 (Sticker it, stored in your browser for the visit): keeps your conversation with Si while you move between pages. Cleared when you close the tab, and after 12 hours at most.
  • stickerit-designer-token and other stickerit-designer- items (Sticker it, stored in your browser): keep you signed in to our design tools (up to 180 days) and save your work in progress.
  • __session, __client_uat, __client (Clerk, on account.stickerit.co): keep you signed in to your account. From the end of your visit to 1 year.
  • __cf_bm, _cfuvid (Cloudflare): protect sign-in and our forms from bots. 30 minutes, or the end of your visit.

Personalisation

  • si_geo (Sticker it, stored in your browser for the visit): remembers which country we think you’re in, so we show the right currency and delivery options. Only with Personalisation consent. Cleared when you close the tab.
  • si_geo_country (Sticker it, stored in your browser): remembers a country you chose yourself. Kept until you clear your browser storage.

Analytics

  • _ga, _ga_<ID> (Google Analytics): counts visits and shows us how people use the site. 2 years.
  • sit_did (Sticker it, stored in your browser): a random identifier our price calculator uses to count how often it’s used. Kept until you clear your browser storage.
  • stickerit-designer-device (Sticker it, stored in your browser): a random identifier our design tools use for usage statistics. Kept until you clear your browser storage.

Marketing (only with your consent)

  • _gcl_au (Google Ads): measures which ads lead to orders. 90 days.
  • _fbp (Meta): measures and targets our Facebook and Instagram ads. 90 days.
  • _uetsid, _uetvid, MUID (Microsoft Advertising): measures and targets our Bing ads. 1 day, 13 months and 13 months.

When you check out, our payment page at checkout.stickerit.co is run by Shopify, which sets its own cookies there. Shopify lists them in its cookie policy.

Google Analytics and the marketing cookies above are only set if you accept them in our cookie banner (choose Customise to pick categories). To change your choice later, clear this site’s cookies in your browser and the banner will ask again.

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Complaints

As noted above, if you would like to make a complaint, please contact us by e-mail using the details provided under “Contact” above.

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with a data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EEA, your local data protection authority.