Stiff Paper

1. Introduction

Stiff Paper ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website at stiffpaper.co.uk and our greeting card services.

2. Information We Collect

We collect the following types of information:

Information You Provide

Order Information: Name, email address, delivery address, and phone number when you place an order.
Card Content: The text prompts, recipient names, occasions, and design preferences you provide to create cards.
Contact Information: Any information you provide when contacting us for support.

Information Collected Automatically

Usage Data: Information about how you interact with our website, including pages visited and features used.
Device Information: Browser type, operating system, and device identifiers.
Analytics: We use Vercel Analytics to understand website usage patterns.

3. How We Use Your Information

We use your information to:

Process and fulfil your orders
Generate personalised card designs using AI technology
Send order confirmations and delivery updates
Respond to your enquiries and provide customer support
Improve our website and services
Comply with legal obligations

4. Third-Party Services

We share your information with the following third-party services to operate our business:

Stripe: Payment processing. Stripe handles all payment card information securely. See Stripe's privacy policy at stripe.com/privacy.
Prodigi: Our print and fulfilment partner who prints and ships your cards. They receive your delivery address and order details.
fal.ai: AI image generation service that processes your design prompts to create card artwork.
Supabase: Database hosting for storing card designs and order information.
Vercel: Website hosting and analytics.
Resend: Email delivery service for order confirmations and updates.

5. AI-Generated Content

When you use our card creation service, your text prompts and design preferences are sent to AI image generation services to create your card designs. These prompts may be processed and temporarily stored by our AI providers in accordance with their privacy policies. We recommend not including sensitive personal information in your card design prompts.

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, including to satisfy legal, accounting, or reporting requirements. Card designs in our public library may be retained indefinitely unless you request removal. Order records are retained for 7 years for accounting purposes.

7. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate personal data.
Erasure: Request deletion of your personal data in certain circumstances.
Restriction: Request restriction of processing of your personal data.
Portability: Request transfer of your personal data to another service.
Objection: Object to processing of your personal data for certain purposes.

To exercise any of these rights, please contact us at hello@stiffpaper.co.uk.

8. Cookies

We use essential cookies to enable core website functionality. We also use analytics cookies (via Vercel Analytics) to understand how visitors use our website. These cookies do not collect personally identifiable information and are used solely for improving our service.

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. All payment transactions are encrypted using SSL technology and processed by Stripe's PCI-compliant infrastructure.

10. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at hello@stiffpaper.co.uk