Privacy policy
Last updated 12 September 2026
Your artwork never reaches us. Files are read and fixed by code running inside your own browser, and are never sent to our servers. What we hold is an email address, which plan you are on, how many downloads you have left, and a line per download.
Who we are
We Do Print is the data controller for personal data collected through artworkfixer.com. Artwork Fixer is a trading name of We Do Print.
77 Aldwick Close, Farnborough, Hampshire, GU14 8LL
Registered with the Information Commissioner's Office.
For anything about your data, email [email protected].
Your artwork
This deserves its own section because it is unusual, and because it is the answer to most privacy questions people have about a tool like this.
When you drop a file onto Artwork Fixer, it is opened and examined by code running in your browser, on your own computer. The print-ready PDF is built there too. The file is never transmitted to us, never stored by us, and never seen by us. We could not hand it to anyone else, because we do not have it.
The one thing that does leave your browser when you download a finished PDF is the file's name, which we record so we can answer questions like "it took two off my allowance for one job". If your file names contain client or project names you would rather we did not hold, rename the file before you upload it, or email us and we will remove those records.
What we collect, and why
| What | Why | Lawful basis |
|---|---|---|
| Email address | To create your account, sign you in, and send service messages about your plan. | Performance of a contract |
| Plan and allowance | To know what you have paid for and how many downloads remain. | Performance of a contract |
| Download history | A date, time and file name per download, so we can answer billing and allowance queries. | Legitimate interests — running the service and supporting customers |
| Marketing consent | Whether you agreed to marketing emails, and when. We keep the timestamp because the law expects us to be able to show it. | Consent |
| Billing details | Held by Stripe, not by us. We store only Stripe's reference for your customer and subscription. | Performance of a contract |
| Invoice records | Stripe keeps the invoices behind your payments, which we are required to retain for tax purposes. | Legal obligation |
We do not collect a password, because there isn't one — signing in uses a one-time code sent to your email. We have no analytics, no advertising tags and no third-party trackers on the site.
Who else is involved
Running the service needs a small number of suppliers. Each only handles what its job requires.
| Supplier | Role | What they handle |
|---|---|---|
| Supabase | Database and sign-in | Your account record and the sign-in system. This is where your email address, plan and remaining allowance are stored. |
| Stripe | Payments | Takes the payment and holds the card details, which never reach us. Also issues your invoices and runs the billing portal. |
| Resend | Email delivery | Sends the sign-in codes and account emails. |
| Cloudflare | Hosting and domain | Serves the website, manages the domain, and forwards mail sent to our address. |
| Zoho | Our own email | The mailbox behind [email protected], where your emails to us arrive. |
We do not sell your data, and we do not share it for anyone else's marketing.
Where your data is held
Our database is hosted in the region we selected when the project was created. Some of our suppliers are based in the United States, and where data reaches them it is transferred under the UK's approved safeguards — the International Data Transfer Addendum to the European Commission's standard contractual clauses, or an equivalent mechanism the supplier has in place.
Two ordinary web requests are worth mentioning, because they are easy to overlook: the site loads its typefaces from Google Fonts and its sign-in library from the jsDelivr network. Like any request your browser makes, these tell those services your IP address. Neither receives your artwork, your email address or anything about your account. If you would rather they did not see the request at all, a content blocker will stop them; the checking tool itself still works, because it is built into the page.
How long we keep it
- Your account — for as long as you have one, and for twelve months after you close it, in case you come back.
- Download history — twelve months, then deleted.
- Marketing consent — while you are subscribed to marketing, and for two years after you unsubscribe, so we can show we honoured it.
- Invoices and payment records — six years, which is what HMRC requires.
Marketing emails
Creating an account includes agreeing to occasional emails about artwork tips, print guides and product news. Every one has an unsubscribe link, and unsubscribing takes effect promptly and never affects your plan or your account.
Service emails — your sign-in code, a receipt, a notice that a price is changing — are not marketing and continue regardless, because they are part of providing the service you have paid for.
Cookies and browser storage
We use no advertising or analytics cookies, so there is no consent banner to dismiss. What the site does store on your device is strictly necessary to make it work:
- Your sign-in session, kept in your browser's local storage so you are not asked for a code on every page.
- A small amount of page state, such as settings you have chosen on the upload screen.
Clearing your browser's data for this site removes all of it and signs you out. Stripe sets its own cookies on its checkout pages, which are covered by Stripe's privacy policy.
Security
There are no passwords to steal, because we never create any. Access to your account depends on access to your email. Data is encrypted in transit, our database restricts each account to its own row, and the keys that could read more are held on the server and never in the web page.
No system is perfectly secure. If a breach ever affects your rights, we will tell you and the ICO within the time the law requires.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything inaccurate;
- delete your data, where we have no continuing reason or legal duty to keep it;
- restrict or object to how we use it;
- provide it in a portable form;
- withdraw consent to marketing at any time.
Email [email protected] and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.
Changes to this policy
If we change this policy the date at the top will change with it. If a change materially affects how we use your data, we will email you.