Privacy Policy

1. Who is responsible

Space Digital FZE, Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates, email: [email protected] ("we"). We process personal data in line with the EU General Data Protection Regulation (GDPR).

2. Visiting the website

When you open our website, our server automatically logs technical data: IP address, date and time, page requested, browser and operating system. We need this to deliver the website and keep it secure (Art. 6(1)(f) GDPR). Server logs are deleted after 14 days at the latest.

• Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Our server is located in Germany.
• Content delivery and security: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare passes all requests to our website through its network to deliver it quickly and protect it against attacks. Cloudflare is certified under the EU-US Data Privacy Framework.

3. Cookies

We only use cookies that are technically necessary: a session cookie and a security token (CSRF) so that your cart, customiser and login work. We do not use tracking, analytics or advertising cookies. If this changes, we will ask for your consent first.

4. Photos and logos you upload

To create your card you upload a photo and, optionally, a logo. We process them on our own server to remove the background and to render your card; no other service sees them. We use them only to create your digital card or your print order (Art. 6(1)(b) GDPR), never for advertising without your separate consent, and we never publish them.

• Uploads that do not become part of an order and free digital cards are deleted automatically after 30 days.
• Photos on a print order are kept until the order has been produced, delivered and any complaint has been dealt with, then deleted.

Please only upload photos you are allowed to use. If a photo shows another person, they (or, for children, their parents or guardians) must agree.

5. Customer account

If you create an account, we store your name, email address, a securely hashed password and your orders (Art. 6(1)(b) GDPR). You must be at least 16 years old to create an account. You can also sign in with Google; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, then shares your name and email address with us. You can delete your account at any time by writing to us.

6. Orders and payment

For an order we process your name, email address, delivery address, the items you ordered and the payment status (Art. 6(1)(b) GDPR). We keep invoice and order data as long as tax and commercial law requires (usually up to 10 years).

Payments are handled by the payment provider you choose; it receives the data needed for the payment:

• Stripe (card, Apple Pay, Google Pay): Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
• Bank transfer: your bank and ours.

We never see or store your full card details.

To ship your card we pass your name and delivery address to the shipping company.

7. Email

We send emails that belong to your order (confirmation, download link, shipping notice) and answer messages you send us (Art. 6(1)(b) and (f) GDPR). Our mailbox is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. We do not send newsletters.

8. Transfers outside the EU

We are based in the United Arab Emirates. Where personal data is transferred outside the EU, we use the EU Standard Contractual Clauses or an adequacy decision (for example the EU-US Data Privacy Framework) to protect it.

9. Your rights

You have the right to access, correction, deletion, restriction of processing, data portability and to object to processing based on our legitimate interests (Art. 15–21 GDPR). Write to [email protected]. You can also complain to a data protection supervisory authority, in particular in the EU country where you live.

10. Changes

We update this policy when our services change. The current version is always on this page.