Privacy policy

Last Updated: June 22, 2026

 

POLICY STATEMENT

This Privacy Policy describes how ROLKA Marketing Ltd., a private limited company registered in England and Wales with company registration number 15453602 and registered office at 20 Wenlock Road, London, N1 7GU, United Kingdom, operating the SNAPTOONIFY online store through https://snaptoonify.com (“SNAPTOONIFY”, “Snaptoonify”, “Company”, “we”, “us” or “our”), collects, uses, discloses, retains, secures and otherwise processes personal information in connection with the website, customer account areas, product pages, checkout flows, upload tools, online editor features, AI-assisted image tools, product customisation tools, order forms, communications and related services that link to this Privacy Policy (together, the “Services”).

Snaptoonify provides an ecommerce service for made-to-order wall art products, including personalised canvas prints, framed fine art prints and related custom printed physical products. Products may be created from photos, images, artwork, graphics, text, prompts, design ideas, AI-assisted outputs or other content uploaded, selected, generated, edited, submitted or approved by customers. Each product is prepared for a specific order according to the product type, size, layout, orientation, framing, edge style, image treatment, quantity, delivery details and other specifications selected or approved before checkout.

We operate the online store, customisation experience, order-management process and customer support functions. Production, post-production, quality checks, packaging, fulfilment and shipping may be carried out by third-party print providers, fulfilment partners, packaging providers, technology providers and professional courier services. Personal information and customer-submitted content may be disclosed to those providers where reasonably necessary to process orders, produce custom products, deliver finished items, provide customer support, prevent misuse, comply with legal obligations and protect our rights and legitimate business interests.

For the purposes of applicable privacy law, we are responsible for personal information under our control. Where the UK GDPR or the Data Protection Act 2018 applies, we act as controller for personal information where we determine how and why that personal information is processed. Where PIPEDA or applicable Canadian provincial private-sector privacy law applies, we are accountable for personal information under our control. Where service providers process personal information for us, we seek to use contractual, technical and organisational measures appropriate to the nature of the information and the services provided.

This Privacy Policy is intended to support compliance with privacy, data protection and electronic communications requirements that may apply to our UK-operated, Canada-facing ecommerce activities, including the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations, the Personal Information Protection and Electronic Documents Act (“PIPEDA”), applicable Canadian provincial private-sector privacy laws, Canada’s Anti-Spam Legislation (“CASL”), and relevant privacy regulator guidance. It also addresses transparency expectations relating to consent, cookies, analytics, advertising technologies, AI-assisted image tools, customer-uploaded content, commercial electronic communications, safeguards, retention, access rights and third-party service providers.

This Privacy Policy applies when you:

- visit the website or any other page, online store or digital property we operate that links to this Privacy Policy;

- create, access or use a customer account;

- upload, submit, select, generate, edit, enhance, transform, preview or approve photos, images, artwork, graphics, design files, prompts, instructions or other content through the Services;

- use our online editor, AI-assisted image tools, product customisation tools, checkout features or related functionality;

- purchase, customise, order, cancel, return, replace or request support for personalised wall art products;

- subscribe to, receive or interact with emails, marketing communications, promotional messages, advertisements, remarketing, customer surveys or social media content; or

- communicate with us, including by submitting enquiries, support requests, order questions, privacy requests, consent withdrawal requests, unsubscribe requests, complaints or formal legal correspondence.

CUSTOM-MADE PRODUCTS: The Services are used to create personalised, made-to-order products based on customer-selected specifications and customer-submitted or customer-approved content. Because products are customised, personal information and uploaded content may need to be processed for design preparation, preview generation, production, quality control, fulfilment, delivery, customer support, returns, replacements, dispute resolution, fraud prevention and legal compliance.

CUSTOMER-UPLOADED CONTENT: You are responsible for ensuring that any photos, images, artwork, graphics, prompts, design ideas, text, names, likenesses, personalisation details or other content you upload, submit, select, generate, edit or approve is lawful and that you have all rights, permissions and consents required for us and our service providers to process it for the purposes described in this Privacy Policy and our Terms of Service. You should not upload content containing sensitive personal information unless it is necessary for your order and you have all required rights, permissions and consents.

AI-ASSISTED IMAGE TOOLS: Where AI-assisted image features are made available, those features may process uploaded images, prompts, design instructions, selected settings, previews and related technical information to generate, enhance, transform, edit or prepare artwork. Use of AI-assisted features may be optional. If you do not want your content processed through AI-assisted image tools, you should not use those features and may instead place an order using your own uploaded or selected image without requesting AI generation, enhancement or transformation, where that option is available.

UK-OPERATED, CANADA-FACING SERVICES: The Services are operated from the United Kingdom by a company registered in England and Wales. We do not currently operate through a local Canadian entity, branch or subsidiary. The Services are made available to customers in Canada, including Ontario, subject to availability, shipping restrictions, payment restrictions, legal requirements and operational limitations. We may process limited location information derived from your IP address, billing address, shipping address, device settings or similar technical indicators for service administration, fraud prevention, security, tax calculation, shipping, legal compliance, analytics, advertising measurement and jurisdictional tailoring purposes.

ADULT USERS ONLY: The Services are not directed to children or minors. Customers must be at least the age of majority in their province, territory or country of residence to create an account, place an order, upload content, use product customisation tools or use AI-assisted image tools. We do not knowingly collect personal information directly from minors without appropriate parent or legal guardian involvement where legally permitted.

We implement reasonable administrative, technical and physical safeguards designed to protect personal information under our control, taking into account the sensitivity of the information, the purposes for which it is processed, the nature of our Services and the risks associated with ecommerce, custom production, user-uploaded content, online payments, AI-assisted tools and third-party fulfilment. We seek to apply purpose limitation, data minimisation, limited retention, need-to-know access controls and appropriate service provider oversight consistent with applicable privacy law.

Where required by applicable law, we will seek valid consent before collecting, using or disclosing personal information, before sending commercial electronic messages, or before activating non-essential cookies and similar technologies. Where applicable law permits processing without separate express consent, including where processing is necessary to provide requested products or services, complete a transaction, prevent fraud, comply with legal obligations or protect legal rights, we will process personal information as described in this Privacy Policy and in accordance with applicable law.

This Privacy Policy includes our disclosures about cookies, pixels, tags, scripts, local storage, analytics tools, advertising measurement technologies, consent management tools and similar technologies. We do not publish or rely on a standalone Cookie Policy for the Services.

If you wish to contact us about privacy-related matters, including withdrawal of consent, access requests, correction requests, deletion requests, account requests, complaints, unsubscribe requests, cookie and tracking technology enquiries, advertising preference requests or other data protection matters, contact us at privacy@snaptoonify.com or using the contact details in section 15.

 

TABLE OF CONTENTS

1. INFORMATION WE COLLECT
2. USE OF PERSONAL INFORMATION
3. CONSENT, LEGAL BASES AND PERMITTED PROCESSING
4. DISCLOSURE OF PERSONAL INFORMATION
5. COOKIES AND TRACKING TECHNOLOGIES
6. ARTIFICIAL INTELLIGENCE-BASED PRODUCTS AND FEATURES
7. RETENTION OF PERSONAL INFORMATION
8. SAFEGUARDS AND SECURITY
9. MINORS
10. PRIVACY RIGHTS AND CHOICES
11. DO-NOT-TRACK CONTROLS
12. UPLOADED CONTENT AND AI-ASSISTED IMAGE TOOLS
13. UPDATES TO THIS PRIVACY POLICY
14. ACCESS, CORRECTION AND DELETION REQUESTS
15. CONTACT DETAILS AND DATA ENQUIRIES

 

1. INFORMATION WE COLLECT

We collect personal information in a manner that depends on how you interact with the Services, the products you order, the features you use, the choices you make and the communications you have with us. This information may be provided directly by you, generated through your use of the Services, collected through cookies or similar technologies, or received from service providers and other sources described in this Privacy Policy.

We do not collect every type of personal information from every customer or visitor. The categories collected will depend on whether you browse the website, create an account, place an order, upload content, use the online editor, use AI-assisted image tools, contact customer support, subscribe to marketing, submit a review, manage cookie preferences or otherwise interact with the Services.

1.1 Personal information you provide to us

We collect personal information that you voluntarily provide when you create or use an account, place an order, use the checkout, upload or submit content, use customisation tools, use AI-assisted image tools, request customer support, communicate with us, subscribe to marketing communications, respond to surveys, submit reviews or otherwise interact with the Services.

The personal information we collect may include:

- full name;

- email address;

- phone number;

- billing address;

- shipping address;

- account username and login information;

- contact preferences and communication preferences;

- order history, product selections, quantities and checkout details;

- payment status, transaction identifiers and limited payment-related information;

- uploaded photos, images, graphics, artwork, design files and related metadata;

- prompts, design instructions, personalisation details, names, messages and text provided for custom products;

- editor settings, product customisation choices, previews, proofs and approval information;

- customer support messages, emails, complaint details, return or replacement requests and related correspondence;

- reviews, ratings, testimonials, feedback and survey responses; and

- any other information you choose to provide through the Services or in communications with us.

Personal information supplied by you should be accurate, complete and kept up to date. If you provide inaccurate account details, contact information, billing information, shipping information, order details or support information, this may affect account access, order processing, production, delivery, customer support, refunds, replacements, privacy requests and our ability to communicate with you.

1.2 Sensitive personal information

We do not intentionally request sensitive personal information for ordinary use of the Services. Sensitive personal information may include information such as health information, biometric information, government identification numbers, financial account credentials, information about children, precise geolocation, or information revealing racial or ethnic origin, religious beliefs, political opinions, sexual orientation or similar sensitive matters.

Because the Services allow customers to upload images, artwork, prompts, text and personalisation details, Customer Content may sometimes contain sensitive personal information or information about identifiable individuals. You should not upload sensitive personal information unless it is necessary for your order and you have all required rights, permissions and consents. We do not intentionally use uploaded customer images, prompts or custom artwork files to infer sensitive personal information for advertising targeting.

Where you upload or submit content relating to another person, including a child, family member, friend, customer, employee, public figure or other identifiable individual, you are responsible for ensuring that the upload, processing, production and delivery of the product are lawful and that all required consents have been obtained.

You should not upload identification documents, financial account information, medical information, private images, non-consensual images, information about children, confidential information or other sensitive material unless it is necessary for the specific product you are ordering and you have a lawful basis and all required permissions to do so.

If we become aware that uploaded content contains sensitive personal information that is unnecessary, unlawful, unsafe, prohibited by our Terms of Service or inappropriate for the Services, we may delete, restrict, refuse, cancel, suspend or decline to process that content or any related order, subject to applicable law.

1.3 Payment and transaction information

Payments are processed by third-party payment processors and payment service providers, which may include Shopify Payments, PayPal, credit card networks and other payment methods made available at checkout. We do not claim to store full payment card numbers or full card security codes on our own systems.

We may receive and process payment-related information needed to complete transactions, prevent fraud, process refunds, manage chargebacks, comply with legal and financial obligations and maintain checkout security. This may include payment status, transaction identifiers, billing details, payment method type, fraud-screening results, refund status, chargeback information and limited payment details supplied by payment processors.

Your payment information may be collected and processed directly by payment providers in accordance with their own privacy notices and terms. You should review those notices where they are made available during checkout or by the relevant provider.

Payment-related information may also be used to verify orders, detect suspicious activity, prevent unauthorised transactions, confirm refunds, respond to payment disputes, document transaction history and comply with accounting, tax, anti-fraud, chargeback, audit and legal obligations.

1.4 Information collected automatically

We automatically collect certain information when you visit, use or navigate the Services. This information may not identify you directly on its own, but it may be associated with you, your device, your account, your browsing activity, your order activity or your interactions with the Services.

Automatically collected information may include:

- IP address;

- browser type and version;

- device type, device identifiers and operating system;

- language preferences and regional settings;

- referring URLs and landing pages;

- pages, products, files, features and checkout steps viewed;

- dates, times and duration of visits;

- clicks, scrolls, searches, selections, form interactions and other website actions;

- editor, upload, preview, AI-assisted tool and customisation interactions;

- product options selected, cart activity and checkout activity;

- approximate location derived from IP address or similar technical indicators;

- session identifiers, cookie identifiers, advertising identifiers and consent records;

- error logs, performance data, diagnostic data and security logs; and

- information used for fraud prevention, analytics, attribution, advertising measurement and service improvement.

We collect this information to operate the Services, maintain security, detect errors, prevent fraud, support checkout functionality, remember preferences, measure performance, understand user interactions, improve products and services, manage advertising and analytics, and comply with legal and operational requirements.

Automatically collected information may be collected directly through our website or through Shopify-related services, hosting providers, analytics providers, advertising providers, consent management tools, fraud-prevention tools, payment providers, security tools, performance tools or other service providers used to operate and improve the Services.

1.5 Cookies, pixels, tags and similar technologies

We use cookies, pixels, tags, scripts, web beacons, local storage and similar technologies in connection with the Services. Some of these technologies are necessary for the website, account areas, checkout, cart, security, fraud prevention, consent management and ecommerce functionality to operate properly. Others may support analytics, advertising measurement, conversion tracking, remarketing, attribution, personalisation and service improvement, subject to consent where required by applicable law.

Information collected through these technologies may include cookie identifiers, session data, consent preferences, device and browser information, IP address, approximate location, pages viewed, referral sources, clicks, scrolls, product interactions, cart activity, checkout activity, purchase-related events and other usage or technical data.

This Privacy Policy includes our cookie and tracking technology disclosures. We do not maintain a standalone Cookie Policy for the Services. More information about the technologies used on the Services, including categories of technologies, purposes, consent choices and how to manage or refuse certain cookies, is set out in section 5 of this Privacy Policy.

1.6 Information from other sources

We may receive information about you from service providers and other sources where reasonably necessary for the purposes described in this Privacy Policy. These sources may include Shopify-related services, payment processors, fraud-prevention providers, shipping carriers, fulfilment partners, analytics providers, advertising platforms, customer support tools, social media platforms, email service providers, review platforms and publicly available sources.

Information received from other sources may include payment status, fraud-screening information, shipping and delivery updates, address validation information, customer support history, advertising attribution data, campaign interaction data, communication preferences, review or social media information, and information used to update, verify or improve our records.

We do not purchase or use third-party data for purposes that would be inconsistent with this Privacy Policy, applicable law or your consent choices. Where we use third-party advertising or analytics platforms, their collection and use of information may also be governed by their own privacy notices, settings and opt-out mechanisms.

Where information is received from another source, we use it only where it is reasonably relevant to the Services, your account, an order, fraud prevention, delivery, support, analytics, advertising measurement, legal compliance or another purpose described in this Privacy Policy.

2. USE OF PERSONAL INFORMATION

We use personal information for purposes reasonably connected to operating the Services, providing custom products, managing orders, communicating with customers, maintaining security, complying with law, improving the Services and conducting lawful marketing activities. The purposes for processing may vary depending on your relationship with us, your choices, the features you use and the information involved.

We may use personal information to:

(a) create, authenticate, maintain and manage customer accounts;

(b) operate the website, product pages, cart, checkout, upload tools, editor features, AI-assisted image tools, product customisation tools and related Services;

(c) receive, review, prepare, edit, preview and process uploaded images, artwork, design files, prompts, text, personalisation details and other Customer Content;

(d) prepare previews, proofs, mockups, production files and order records;

(e) process, accept, refuse, cancel, produce, fulfil, ship, return, replace, refund or otherwise manage orders;

(f) coordinate production, post-production, quality control, packaging, fulfilment and shipping with print providers, fulfilment partners, packaging providers and carriers;

(g) process payments, authorisations, refunds, chargebacks, transaction records, fraud checks and payment disputes;

(h) calculate taxes, shipping charges, delivery options, order totals, discounts and checkout disclosures;

(i) provide customer support, respond to enquiries, manage complaints, assess delivery issues, evaluate damaged or defective product claims and resolve disputes;

(j) send transactional, administrative and service communications, including order confirmations, payment notices, production updates, shipping notices, account notices, policy notices and security communications;

(k) send marketing communications, promotional messages, newsletters, abandoned cart messages, product updates or offers where permitted by applicable law and your consent or communication preferences;

(l) operate cookies, pixels, tags, scripts, local storage, analytics, advertising measurement, conversion tracking, attribution, remarketing, consent management and similar technologies, subject to applicable consent requirements and the cookie and tracking technology disclosures in this Privacy Policy;

(m) measure website traffic, product interactions, checkout performance, campaign performance, customer journeys and usage trends;

(n) improve the Services, products, customer experience, website functionality, editor tools, AI-assisted features, marketing performance, fraud controls and operational processes;

(o) request feedback, reviews or survey responses, and manage user-submitted reviews or testimonials in accordance with applicable law;

(p) detect, investigate and prevent fraud, security incidents, misuse, prohibited content, infringement concerns, unauthorised transactions, improper chargebacks and violations of our Terms of Service;

(q) maintain records, enforce agreements, manage legal claims, respond to lawful requests and comply with tax, accounting, consumer protection, privacy, anti-spam, ecommerce and other legal obligations; and

(r) carry out other purposes that are disclosed to you at or before the time of collection, or that are otherwise permitted or required by applicable law.

We limit our use of personal information to purposes that a reasonable person would consider appropriate in the circumstances, taking into account the nature of the Services, the sensitivity of the information, your relationship with us and applicable privacy law.

2.1 Custom product purposes

Because the Services involve made-to-order and personalised products, personal information and Customer Content may be used to prepare custom artwork, generate or display previews, process uploaded files, apply selected product options, create production files, coordinate printing and framing, conduct quality checks, package products, arrange shipping, provide tracking, assess support requests and resolve order issues.

Customer Content may be processed by us and by service providers where reasonably necessary to complete these purposes. Customer Content may include personal information about you or other identifiable individuals. You should ensure that you have all rights, permissions and consents required before uploading, submitting, selecting, generating, editing, approving or ordering any content through the Services.

2.2 Account, checkout and order purposes

We use account, checkout and order information to identify customers, authenticate account access, maintain account features, display order history, process carts, calculate order totals, verify payment status, process refunds, detect fraud, confirm shipping information, manage order status and provide customer support.

We may also use account, checkout and order information to document customer approvals, confirm product specifications, maintain transaction records, respond to disputes, manage chargebacks, comply with tax and accounting requirements and enforce our Terms of Service.

2.3 Communications and customer support

We use contact information and communications to respond to enquiries, provide customer support, investigate complaints, resolve order issues, process refund or replacement requests, respond to privacy requests, deliver legal notices and maintain records of communications.

We may use email, account notices, website notices, order messages or other available communication channels to contact you about the Services, your account, your order, production, fulfilment, shipping, returns, refunds, replacements, policy updates, privacy matters, security issues or other transactional and service-related matters.

Transactional, administrative, legal, support and security communications are not marketing communications. You may continue to receive those communications where necessary for the Services or permitted by law, even if you unsubscribe from marketing communications.

2.4 Marketing, advertising and measurement

Where permitted by applicable law and your consent or communication preferences, we may use personal information to send marketing communications, promotional messages, product updates, abandoned cart reminders, offers, surveys, review requests and other commercial electronic messages.

We may also use analytics, advertising measurement, attribution, conversion tracking, remarketing and similar technologies to understand website activity, measure advertising effectiveness, improve campaigns, show or measure advertisements and understand customer journeys.

Where required by applicable law, we will seek consent before sending commercial electronic messages or before using non-essential cookies, pixels, tags, advertising, remarketing or similar technologies. You may unsubscribe from marketing emails or manage certain cookie and tracking choices as described in this Privacy Policy.

3. CONSENT, LEGAL BASES AND PERMITTED PROCESSING

We rely on consent and other lawful grounds permitted under applicable privacy and data protection law to collect, use and disclose personal information. The form of consent or lawful basis may vary depending on the sensitivity of the information, your reasonable expectations, the context of collection, the purpose for processing and the law that applies.

Consent may be express, such as when you create an account, place an order, upload content, agree to receive marketing emails, accept cookies through a consent tool, use AI-assisted image features or contact us with a request. Consent may also be implied where the purpose is obvious and reasonably necessary to provide the Services you request, such as processing your shipping address to deliver an order or sharing order details with a fulfilment partner.

Where UK data protection law applies, we may rely on lawful bases including contract performance, consent, legitimate interests, legal obligation and, where applicable, establishment, exercise or defence of legal claims. Where Canadian privacy law applies, we process personal information on the basis of valid consent or another authority permitted by law.

We may collect, use or disclose personal information with consent for purposes such as:

(a) creating and managing your account;

(b) processing and fulfilling orders;

(c) preparing custom products from uploaded or approved Customer Content;

(d) communicating with you about orders, accounts, support requests, policy updates and service matters;

(e) sending marketing communications where permitted by applicable law;

(f) using non-essential cookies, analytics, advertising, remarketing or similar technologies where consent is required; and

(g) using optional AI-assisted image features when you choose to use those features.

We may also collect, use or disclose personal information without separate express consent where permitted or required by applicable law. These circumstances may include where processing is necessary to complete a transaction, provide a requested product or service, prevent or investigate fraud, address security incidents, collect a debt, comply with tax or accounting obligations, respond to lawful requests, manage legal claims, enforce our Terms of Service, protect rights or safety, or conduct a business transaction subject to appropriate safeguards.

We may rely on service providers to process personal information on our behalf for the purposes described in this Privacy Policy. Where we transfer personal information to a service provider, we remain accountable for personal information under our control and use contractual or other measures designed to require appropriate protection of that information.

You may withdraw consent at any time, subject to legal, contractual and operational restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide certain Services, process orders, maintain an account, send communications, use optional features or complete a transaction. Withdrawal of consent does not affect processing that occurred before withdrawal or processing permitted or required by law.

3.1 UK lawful bases

Where the UK GDPR applies, we may process personal information on one or more of the following lawful bases:

(a) Contract performance: where processing is necessary to enter into or perform a contract with you, including account creation, checkout, payment, order processing, custom product production, fulfilment, delivery, customer support, returns, refunds, replacements and related communications.

(b) Consent: where you have given consent for a specific purpose, including optional marketing communications, non-essential cookies and similar technologies, or optional AI-assisted image features where consent is required.

(c) Legitimate interests: where processing is necessary for our legitimate business interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and freedoms. Legitimate interests may include operating and improving the Services, preventing fraud, maintaining security, measuring performance, managing customer relationships, handling disputes, enforcing rights, protecting service integrity and conducting appropriate business communications.

(d) Legal obligation: where processing is necessary to comply with legal obligations, including tax, accounting, consumer protection, privacy, anti-spam, ecommerce, payment, regulatory, reporting, recordkeeping or lawful request obligations.

(e) Legal claims: where processing is necessary for the establishment, exercise or defence of legal claims, including disputes, complaints, payment claims, chargebacks, intellectual property notices, privacy complaints, contract enforcement and regulatory matters.

3.2 Canadian consent and permitted processing

Where Canadian privacy law applies, we seek to collect, use and disclose personal information with valid consent, except where a collection, use or disclosure is otherwise permitted or required by law.

The form of consent may depend on the sensitivity of the information and the reasonable expectations of the individual. Express consent may be required for more sensitive information, optional marketing communications, certain cookies or tracking technologies, or other processing where applicable law requires express consent. Implied consent may be appropriate where the purpose is obvious, reasonably expected and necessary to provide the requested product or service.

We may process personal information without separate express consent where permitted by law, including for fraud prevention, debt collection, legal compliance, investigation of a breach of an agreement or law, emergency circumstances, business transactions subject to safeguards, or other purposes authorised by applicable Canadian privacy law.

3.3 Consent withdrawal

You may withdraw consent by contacting us at privacy@snaptoonify.com or by using available settings, unsubscribe links or consent preference tools where provided.

Withdrawal of consent may mean that we cannot provide some or all of the Services. For example, if you withdraw consent for processing Customer Content required to produce a personalised product, we may be unable to complete the order. If you withdraw consent for marketing communications, we will stop sending marketing emails in accordance with applicable law, but we may still send transactional, service, legal, account or support communications.

If you withdraw consent for non-essential cookies or similar technologies, essential technologies may still be used where necessary for the Services, security, checkout, fraud prevention, consent management or legal compliance.

3.4 Purpose limitation and reasonable expectations

We collect, use and disclose personal information only for purposes that are identified in this Privacy Policy, disclosed at the time of collection, reasonably necessary to provide the Services, or otherwise permitted or required by applicable law.

We seek to limit personal information to what is reasonably necessary for the relevant purpose. The amount and type of information needed may vary depending on whether you browse the Services, create an account, upload content, use AI-assisted tools, place an order, request support, participate in marketing or submit a privacy request.

4. DISCLOSURE OF PERSONAL INFORMATION

We disclose personal information only where reasonably necessary for the purposes described in this Privacy Policy, where you have consented, or where permitted or required by applicable law. Disclosures may involve service providers acting on our behalf, third-party platforms used to operate the Services, payment and shipping providers, professional advisers, legal authorities, business transaction parties and other recipients described below.

We do not sell personal information in the ordinary sense of transferring customer information to a third party for money. We may, however, use advertising, analytics, conversion measurement and remarketing technologies that involve disclosure or making available of limited device, usage, event, cookie or advertising identifier information to advertising and analytics providers, subject to applicable law, consent requirements and your available privacy choices.

4.1 Service providers and operational partners

We may disclose personal information to vendors, consultants, contractors, partners and other service providers that perform services for us or on our behalf. These providers may require access to personal information to perform their functions, but they are expected to process personal information only for authorised purposes and with safeguards appropriate to the nature of the information and services involved.

Categories of service providers and operational partners may include:

- Shopify and Shopify-related ecommerce infrastructure providers;

- website hosting and cloud storage providers;

- customer account, authentication and checkout providers;

- payment processors, payment gateways, card networks and payment dispute providers;

- fraud-prevention, security, verification and risk-management providers;

- print production partners;

- fulfilment, packaging, warehousing and order-management providers;

- shipping carriers, courier services and delivery partners;

- AI-assisted image, image-processing, file-preparation and editor technology providers;

- customer support, helpdesk and communication tools;

- email service providers and messaging tools;

- analytics, performance monitoring and diagnostic providers;

- advertising, retargeting, attribution and conversion-measurement platforms;

- consent management and cookie preference tools;

- review, survey, feedback and social media tools;

- finance, accounting, tax, legal and compliance service providers; and

- professional advisers, insurers, auditors and other business support providers.

Where service providers process personal information for us, we seek to use contractual, technical and organisational measures appropriate to the services being provided and the sensitivity of the information involved. Service providers may only access the personal information reasonably necessary for their functions.

4.2 Shopify and ecommerce infrastructure

The Services may be operated using Shopify and Shopify-related services. Shopify may process personal information to support storefront functionality, checkout, customer accounts, payments, order processing, tax calculation, fraud analysis, analytics, app integrations, fulfilment workflows and related ecommerce functions.

Information processed through Shopify-related services may include account information, contact details, billing and shipping details, order details, payment status, cart and checkout activity, device and usage information, fraud indicators, tax information and customer communications. Shopify and related services may process information in accordance with their own privacy notices and service terms where applicable.

Shopify-related infrastructure may also support cookies, checkout sessions, customer account features, fraud analysis, analytics, app integrations, payment routing, tax tools, order records, customer communications and other ecommerce functions used to provide the Services.

4.3 Payment processing and fraud prevention

When you make a purchase, personal information may be disclosed to payment processors, payment gateways, payment networks, PayPal, Shopify Payments, fraud-prevention providers and related financial service providers. These providers may process payment, billing, transaction, device and fraud-screening information to authorise payments, complete transactions, prevent fraud, process refunds, manage disputes, handle chargebacks and comply with financial, tax and legal obligations.

We do not represent that we store full payment card numbers on our own systems. Payment providers may collect payment information directly from you and process it under their own privacy notices and legal obligations.

Payment and fraud-prevention providers may use automated or manual checks to assess transaction risk, verify payment details, detect suspicious activity, confirm payment authorisation, prevent unauthorised transactions, process refunds, respond to chargebacks and comply with payment network rules.

4.4 Production, fulfilment and shipping

Because products are made to order, we may disclose order information, Customer Content and delivery details to print providers, image-preparation providers, production partners, fulfilment partners, packaging providers, shipping carriers and courier services.

The information disclosed may include your name, shipping address, phone number, email address, order number, product selections, quantities, uploaded images, design files, prompts, approved artwork, production specifications, delivery instructions, tracking details, support notes and information needed to assess damaged, defective, lost, delayed or incorrect orders.

These providers use the information to prepare production files, print or finish products, conduct quality checks, package items, ship orders, provide tracking, investigate delivery issues, process returns or replacements and support fulfilment-related obligations.

Customer Content may need to be shared with production and fulfilment providers so that the personalised product can be created. This may include images, artwork, graphics, prompts, text, names, messages, previews, proof approvals, production files and product specifications.

4.5 AI-assisted image and file-processing providers

If you choose to use AI-assisted image features, image-processing tools or related customisation functionality, we may disclose uploaded images, prompts, design instructions, selected settings, previews, generated outputs, technical data and related information to providers that help operate those features.

AI-assisted tools may process Customer Content to generate, enhance, transform, edit, format, upscale, crop, adapt, preview or prepare artwork. These tools may produce unexpected results and may not generate outputs that are unique, legally protectable, non-infringing, error-free or suitable for every print size or purpose.

If you do not want Customer Content processed through AI-assisted image tools, you should not use those optional features. You may instead place an order using your own uploaded or selected image without requesting AI generation, enhancement or transformation, where that option is available.

AI-assisted image and file-processing providers may process technical information associated with feature use, including upload status, file metadata, processing settings, error logs, generated output identifiers, quality checks, content moderation signals or other information needed to operate, troubleshoot, secure and improve the relevant feature.

4.6 Analytics, advertising and marketing providers

We may disclose or make available limited personal information, device information, usage information, cookie identifiers, advertising identifiers, event data and purchase-related information to analytics, advertising, attribution, remarketing and marketing providers. These providers may include Google Analytics, Google Tag Manager, Google Ads, Microsoft Advertising, Microsoft Universal Event Tracking and similar services configured for the Services from time to time.

These technologies may help us understand website traffic, measure advertising performance, attribute visits or purchases to campaigns, analyse customer journeys, improve product pages, detect technical issues, support remarketing and measure conversion events. Where required by applicable law, we will seek consent before using non-essential analytics, advertising, remarketing or similar technologies.

We do not intentionally use sensitive personal information, uploaded customer images, prompts or custom artwork files for advertising targeting unless this is expressly disclosed, lawful and consented to where required. We do not intentionally direct personalised advertising to minors.

Analytics, advertising and marketing providers may process information in accordance with their own terms, privacy notices, platform rules, settings and opt-out mechanisms where applicable. Your choices may depend on your browser, device, account settings, location and the technologies used by the relevant provider.

4.7 Customer communications and marketing messages

We may disclose personal information to email service providers, SMS or messaging providers, customer support tools, marketing platforms and communication service providers to send transactional, administrative, customer support and marketing communications.

Transactional and administrative communications may include order confirmations, payment notices, production updates, shipping notices, account notices, security notices, policy notices, support replies and messages needed to provide the Services. Marketing communications may include newsletters, promotions, abandoned cart messages, product updates, review requests, customer surveys and offers, where permitted by applicable law and your communication preferences.

Commercial electronic messages will be sent in accordance with CASL where it applies and with any applicable UK electronic communications requirements. Marketing messages will identify the sender and include an unsubscribe mechanism where required. You may unsubscribe from marketing communications without affecting our ability to send transactional, service, legal or account-related communications.

4.8 Legal compliance, protection and enforcement

We may disclose personal information where reasonably necessary to comply with applicable law, respond to lawful requests, cooperate with regulators or law enforcement, protect legal rights, enforce our Terms of Service, investigate fraud, prevent misuse, protect security, manage disputes, collect amounts owed, respond to claims, or protect the rights, safety and property of customers, third parties, service providers or Snaptoonify.

This may include disclosure to courts, regulators, law enforcement, government authorities, payment processors, fraud-prevention providers, legal advisers, insurers, auditors, rights holders or other relevant parties.

We may also disclose information where reasonably necessary to respond to intellectual property complaints, privacy complaints, content complaints, prohibited content concerns, chargebacks, payment disputes, shipping disputes, suspected fraud, security incidents, customer support claims, regulator enquiries or legal proceedings.

4.9 Business transactions

We may disclose or transfer personal information in connection with an actual or proposed business transaction, including a merger, acquisition, financing, reorganisation, restructuring, sale of assets, transfer of operations, insolvency process or similar transaction. In those circumstances, personal information may be disclosed to prospective or actual purchasers, investors, lenders, advisers or other transaction participants, subject to confidentiality and safeguards appropriate to the transaction and applicable law.

If a business transaction is completed, personal information may be transferred to the successor or acquiring organisation for purposes consistent with this Privacy Policy, unless otherwise required or permitted by applicable law.

Where required by applicable law, we will provide notice or obtain consent in connection with a business transaction.

4.10 Cross-border processing

We and our service providers may process, store or access personal information in the United Kingdom, Canada, the United States, the European Union and other jurisdictions where we or our service providers operate. Personal information processed outside your province, territory or country may be subject to the laws of those jurisdictions, including lawful access requests by courts, law enforcement, regulators or government authorities.

We seek to use contractual, technical and organisational measures designed to provide an appropriate level of protection for personal information processed by service providers outside your jurisdiction, taking into account the nature of the information, the services provided and applicable legal requirements.

Cross-border processing may involve Shopify-related services, payment processors, fraud-prevention providers, hosting providers, analytics providers, advertising providers, email service providers, customer support tools, consent management providers, AI-assisted image providers, image-processing providers, print providers, fulfilment partners, packaging providers, shipping carriers, legal advisers and other service providers.

By using the Services or submitting personal information to us, you acknowledge that personal information may be processed outside your province, territory or country as described in this Privacy Policy, subject to applicable law.

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, pixels, tags, scripts, web beacons, local storage, session storage and similar technologies to operate the Services, support ecommerce functionality, maintain security, remember preferences, measure performance, understand user interactions, support advertising and comply with legal and operational requirements. Some technologies are necessary for the Services to function properly, while others are used for analytics, advertising, conversion measurement, remarketing, attribution or service improvement, subject to consent where required by applicable law.

This section provides our cookie and tracking technology disclosures for the Services. We do not publish or rely on a standalone Cookie Policy. Any prior or external reference to a Cookie Policy should be read as a reference to this section and the wider cookie and tracking technology disclosures in this Privacy Policy.

5.1 Cookie technologies and their function

Cookies and similar technologies are used to recognise browsers or devices, maintain sessions, remember preferences, secure services, measure performance and support online functionality. Their operation depends on the type of technology used, the provider that sets it, the purpose it serves and your consent choices where consent is required.

Cookies are small text files or alphanumeric identifiers stored on, or accessed from, your browser or device when you visit a website. Similar technologies may include pixels, tags, scripts, web beacons, SDKs, local storage, session storage, IndexedDB, device identifiers and server-side event tracking.

Cookies and similar technologies may be categorised according to who sets them, how long they remain active and the purpose they serve.

FIRST-PARTY COOKIES

First-party cookies are set directly by the website you visit. On the Services, first-party cookies may support page delivery, navigation, cart functionality, checkout continuity, customer account access, consent management, system stability, security controls, product customisation tools, editor sessions and related operational features.

THIRD-PARTY COOKIES

Third-party cookies are set by authorised third-party providers integrated with the Services. These providers may include Shopify-related ecommerce services, payment processors, fraud-prevention tools, analytics providers, advertising platforms, consent management providers, customer support tools, hosting providers, image-processing providers, AI-assisted tool providers and other technical service providers.

Third-party cookies may support analytics, advertising measurement, conversion tracking, remarketing, fraud prevention, checkout security, consent signalling, technical diagnostics, service delivery and similar purposes. Third-party providers may process information in accordance with their own privacy notices and legal obligations where applicable.

SESSION COOKIES

Session cookies are temporary and usually expire when you close your browser. They are commonly used to support secure browsing, session continuity, navigation, cart operation, checkout progression, account authentication, editor sessions, upload workflows and fraud-prevention controls.

PERSISTENT COOKIES

Persistent cookies remain stored on your browser or device for a defined period or until deleted. They may be used to remember preferences, maintain consent choices, recognise returning browsers, preserve selected settings, support analytics and enable functionality across visits.

STRICTLY NECESSARY COOKIES

Strictly necessary cookies are required for the Services to function properly. They support essential functions such as page delivery, security, account login, cart operation, checkout, payment processing, fraud prevention, consent preference storage, load balancing and order submission. These cookies cannot be disabled through our website controls.

FUNCTIONAL COOKIES

Functional cookies enable enhanced usability and personalisation by remembering user preferences, settings and interface configurations. They may support optional features such as region preferences, interface choices, accessibility settings, customer account preferences, product configuration choices and editor settings. Where functional cookies are not strictly necessary, they are used only where permitted by applicable law and, where required, based on consent.

ANALYTICS AND PERFORMANCE COOKIES

Analytics and performance cookies collect information about how the Services are accessed and used. This may include navigation behaviour, interaction patterns, product views, cart activity, checkout activity, editor interactions, AI-assisted tool interactions and performance metrics. This information helps us analyse usage, improve functionality, optimise performance and troubleshoot issues. These cookies are used only where permitted by applicable law and, where required, based on consent.

ADVERTISING AND MEASUREMENT COOKIES

Advertising and measurement cookies are used to measure advertising performance, attribute user actions to marketing campaigns and, where enabled, support remarketing or personalised advertising. Their use is subject to applicable legal requirements, advertising platform rules and your consent choices where consent is required.

SIMILAR TECHNOLOGIES

In addition to cookies, the Services may use pixels, web beacons, tags, scripts, SDKs, local storage, session storage, IndexedDB, device identifiers and server-side event tracking. These technologies may perform functions similar to cookies, including measuring interactions, storing preferences, managing consent choices, detecting fraud, supporting security, enabling advertising attribution and maintaining ecommerce functionality.

The specific cookies and similar technologies used on the Services may change over time depending on website configuration, Shopify settings, installed applications, consent settings, analytics tools, advertising platforms, security services, AI or image-processing tools and other service providers.

5.2 Essential technologies

Essential technologies support core website and ecommerce functions. They may be used to maintain cart functionality, enable checkout, keep account sessions active, remember privacy choices, detect fraud, secure the Services, balance traffic, diagnose errors, support payment processing and ensure that pages and features operate properly.

Because essential technologies are necessary for the Services to function, they may be used even if you decline non-essential cookies, subject to applicable law.

Essential technologies may be set by us, Shopify-related services, hosting providers, payment providers, security providers, fraud-prevention providers, consent management tools or other service providers that support the operation of the Services.

Examples of essential purposes may include:

(a) remembering items placed in your cart;

(b) supporting checkout and payment processing;

(c) maintaining account login sessions;

(d) preserving cookie and consent preferences;

(e) preventing fraud, abuse and unauthorised access;

(f) supporting security, load balancing and website performance;

(g) diagnosing technical errors;

(h) supporting editor sessions, upload workflows and product customisation tools; and

(i) enabling order, account and customer support functionality.

5.3 Functional technologies

Functional technologies support enhanced usability, user preferences and optional website features. They may help remember region preferences, language preferences, interface choices, accessibility settings, account preferences, product configuration choices, editor settings, customisation progress or other choices you make while using the Services.

Some functional technologies may be necessary for a requested feature to work. Others may be optional and used only where permitted by applicable law and, where required, based on consent.

If functional technologies are disabled, some features may not remember your preferences, selected settings or customisation progress between pages, sessions or visits.

5.4 Analytics and performance technologies

Analytics and performance technologies help us understand how visitors use the Services and how the website performs. They may measure traffic, referral sources, session behaviour, product page interactions, upload tool interactions, editor and customisation feature performance, AI-assisted tool interactions, checkout activity, error events, conversion events and other usage patterns.

We may use analytics tools such as Google Analytics, Google Tag Manager, performance monitoring tools or similar technologies configured for the Services from time to time. These tools may process device information, IP address, approximate location, cookie identifiers, usage events, page interactions, session information and technical data.

Analytics and performance technologies may help us:

(a) understand which pages, products, features and checkout steps are used;

(b) identify technical errors, slow pages, broken links or performance issues;

(c) measure the effectiveness of website design, product pages and customisation flows;

(d) improve upload tools, editor functions, AI-assisted features and checkout processes;

(e) analyse customer journeys and service usage trends;

(f) understand the source of website visits; and

(g) improve the reliability, security and usability of the Services.

Where required by applicable law, analytics and performance technologies will be used only with appropriate consent or another lawful basis.

5.5 Advertising, remarketing and attribution technologies

Advertising and attribution technologies help us measure campaign performance, attribute visits or purchases to advertising campaigns, understand interactions with ads, create or use advertising audiences, support remarketing and show or measure advertisements on other websites, search engines, social media platforms or advertising networks.

Depending on our configuration and your consent choices, we may use Google Ads conversion tracking, Google Ads remarketing, Google Tag Manager, Microsoft Advertising Universal Event Tracking and similar advertising technologies. These technologies may process cookie identifiers, advertising identifiers, IP address, device information, referral information, pages viewed, cart activity, checkout events, purchase events and other interaction data.

External paid advertising through Google Ads, Microsoft Advertising or similar channels does not mean that we host third-party display advertisements on our website. Advertising technologies may be used to measure or support ads shown on external platforms, search engines, websites or networks.

Advertising, remarketing and attribution technologies may help us:

(a) measure whether advertisements lead to visits, carts, checkouts or purchases;

(b) understand which campaigns, keywords or channels are effective;

(c) avoid repeatedly showing irrelevant messages where platform settings permit;

(d) create or use audiences for advertising or remarketing, subject to applicable law and consent choices;

(e) measure return on advertising spend and campaign performance;

(f) improve the relevance of our marketing communications and campaigns; and

(g) comply with platform reporting, attribution and conversion measurement requirements.

We do not intentionally use sensitive personal information, uploaded customer images, prompts or custom artwork files for advertising targeting unless expressly disclosed, lawful and consented to where required. We do not intentionally direct personalised advertising to minors.

5.6 Consent management and preferences

We may use a consent management platform, cookie banner or similar tool to display cookie notices, manage cookie choices, control non-essential cookies and maintain related consent records. Where configured, this may include CookieYes or another consent management provider.

You can manage your cookie choices through our cookie banner or consent preferences tool where available. The available choices may depend on your location, browser, device, website configuration, consent management settings and applicable law.

You may also be able to control cookies through your browser or device settings. If you block, delete or disable certain cookies or tracking technologies, some features of the Services may not function properly, including cart, checkout, account, preference, analytics, personalisation, upload, editor, AI-assisted tool or fraud-prevention features.

Cookie and tracking preferences may be stored using cookies, local storage or similar technologies. If you clear cookies, use a different browser or device, browse privately, reset settings, or use tools that block cookies or scripts, your preferences may need to be set again.

Consent choices may not disable technologies that are necessary for the Services, checkout, cart, fraud prevention, security, consent management, payment processing, account access or legal compliance.

5.7 Browser, device and platform controls

Most browsers allow you to block, delete or manage cookies. Mobile devices and operating systems may provide settings for advertising identifiers, tracking preferences, app permissions and personalised advertising. Advertising platforms may also provide opt-out tools or account-level advertising settings.

Your ability to manage cookies and similar technologies may depend on your browser, device, location, account settings, platform settings and the technologies used. Blocking or disabling certain technologies may affect the availability, security, performance or functionality of the Services.

Browser or device controls may not prevent all tracking technologies from operating. Some technologies may be necessary for security, fraud prevention, checkout, consent management or core website functionality. Other technologies may be controlled through platform-level settings provided by Google, Microsoft, Shopify, advertising networks, social media platforms or other providers.

5.8 Google Consent Mode, IAB Transparency and Consent Framework and similar controls

Where configured, we may use Google Consent Mode, IAB Transparency and Consent Framework v2.2, or similar consent-aware technologies to adjust how analytics or advertising tags behave based on your consent choices.

These technologies may allow consent signals to be communicated to participating providers, may adjust whether cookies are set, may affect whether advertising or analytics identifiers are used, and may permit limited, privacy-aware measurement or modelling where permitted by applicable law and platform settings.

Consent-aware technologies may process consent status, page events, device information, aggregated measurement signals or other technical information needed to respect preferences, measure performance and maintain lawful analytics or advertising configurations.

The operation of these technologies may depend on provider settings, regional rules, website configuration, consent choices, browser controls, ad-blocking tools and platform requirements. We do not control every technical choice made by third-party platforms, but we seek to configure our Services in a manner consistent with applicable consent requirements.

5.9 Third-party providers and cookie-related processing

Cookies and similar technologies may be set or accessed by us and by authorised third-party providers integrated with the Services. These providers may include Shopify-related ecommerce services, hosting providers, payment processors, fraud-prevention tools, analytics providers, advertising platforms, consent management providers, customer support tools, image-processing providers, AI-assisted tool providers, review tools, security tools and other technical service providers.

Third-party providers may process information collected through cookies and similar technologies in accordance with their own privacy notices, service terms, platform rules and legal obligations where applicable.

Cookie-related processing may occur in the United Kingdom, Canada, the United States, the European Union or other jurisdictions where we or our service providers operate. Information processed outside your province, territory or country may be subject to the laws of those jurisdictions, including lawful access requests by courts, law enforcement, regulators or governmental authorities.

We seek to use contractual, technical and organisational measures appropriate to the nature of the information, the provider and the services involved.

5.10 Updates to cookie and tracking practices

The cookies and tracking technologies used through the Services may change over time as we update Shopify configurations, website features, installed applications, analytics tools, advertising platforms, consent management tools, security tools, AI-assisted features, image-processing tools, service providers or business practices.

We may update this Privacy Policy to reflect material changes to cookie and tracking practices. Where required by applicable law, we will seek consent before activating non-essential cookies, analytics, advertising, remarketing or similar technologies.

If we make material changes to the way we use cookies or similar technologies, we may provide notice through the Services, update the “Last Updated” date of this Privacy Policy, display a consent banner or preference prompt, or use another method permitted or required by applicable law.

6. ARTIFICIAL INTELLIGENCE-BASED PRODUCTS AND FEATURES

The Services may include optional features or tools that use artificial intelligence, machine learning, automated image processing or similar technologies to help generate, enhance, transform, edit, arrange, preview or prepare artwork for custom products. These features are part of the customisation experience and are subject to this Privacy Policy, our Terms of Service and any feature-specific notices presented through the Services.

AI-assisted image features may be used to support creative transformation, image enhancement, style generation, image preparation, file adaptation, composition assistance, preview generation or production preparation. The availability, functionality and performance of AI-assisted features may change over time depending on service provider availability, technical configuration, legal requirements, safety controls, product requirements and operational needs.

6.1 AI-assisted processing

When you use AI-assisted image features, we may process uploaded images, prompts, design instructions, selected settings, previews, generated outputs, editor interactions, technical data and related information. This processing may be used to generate artwork, enhance image quality, transform visual style, adjust composition, create previews, prepare print files, troubleshoot feature performance, prevent misuse and provide customer support.

AI-assisted tools may be operated by us or by third-party AI, image-processing, cloud infrastructure or technology providers. Customer Content may be transmitted to or processed by those providers where reasonably necessary to provide the selected feature, subject to applicable law and service provider safeguards.

Processing associated with AI-assisted features may include:

(a) receiving uploaded images, prompts, instructions, selected settings or editor inputs;

(b) analysing the uploaded or selected content for technical compatibility, file quality or feature operation;

(c) generating, enhancing, transforming, modifying, cropping, adapting or preparing images;

(d) displaying previews, mockups or outputs for customer review;

(e) preparing production-ready files or related order materials;

(f) detecting technical errors, misuse, prohibited content or security issues;

(g) maintaining logs and records needed to operate, troubleshoot and secure the feature; and

(h) supporting customer support, dispute resolution, fraud prevention and legal compliance.

6.2 Optional use of AI-assisted features

AI-assisted features may be optional. If you do not want your Customer Content processed through AI-assisted image tools, you should not use those features. Where available, you may place an order using your own uploaded or selected image without requesting AI generation, enhancement or transformation.

Choosing not to use AI-assisted features may limit access to certain creative options, editing functions, transformation tools or product customisation features. It should not prevent you from using other available ordering options that do not require AI-assisted processing, where those options are offered.

Where an AI-assisted feature is clearly part of a specific product or customisation process, use of that feature may be necessary to obtain the selected output. You should review any feature notices, editor prompts, product descriptions or checkout information before using the feature or placing an order.

6.3 AI output limitations and privacy choices

AI-assisted outputs may vary and may not be unique, copyrightable, legally protectable, non-infringing, error-free, suitable for every print size or identical to any preview shown on screen. You are responsible for reviewing and approving AI-assisted outputs, images, text, cropping, layout, orientation, product options and order details before checkout.

We do not intentionally use uploaded customer images, prompts or custom artwork files to infer sensitive personal information for advertising targeting. We may, however, process technical, diagnostic, usage and safety information associated with AI-assisted features to operate the Services, prevent misuse, maintain security, troubleshoot issues, improve functionality and comply with legal obligations.

If you use AI-assisted features to generate or transform content involving another person, including a child, family member, friend, customer, employee, public figure or other identifiable individual, you are responsible for ensuring that you have all rights, permissions and consents required for the upload, processing, generation, editing, approval, printing and delivery of the resulting product.

6.4 AI service providers

AI-assisted features may be supported by third-party AI, image-processing, cloud infrastructure, file-preparation, content moderation, security or technical service providers. These providers may process Customer Content and related information only where reasonably necessary to provide, secure, maintain, troubleshoot or improve the relevant feature, subject to applicable law and service provider arrangements.

Information processed by AI service providers may include uploaded images, prompts, design instructions, generated outputs, selected settings, editor interactions, technical logs, error reports, file metadata, content moderation signals, security signals and information needed to prepare files for custom product production.

We seek to use service provider arrangements appropriate to the sensitivity of the information, the nature of the processing and the applicable legal requirements. However, third-party providers may operate from jurisdictions outside your province, territory or country, and their own privacy notices, service terms and technical practices may apply where they act as independent controllers or businesses for certain processing activities.

6.5 Sensitive content in AI-assisted tools

You should not use AI-assisted features to upload or process sensitive personal information unless it is necessary for your order and you have all required rights, permissions and consents. This includes health information, identification documents, financial information, private images, confidential information, images of minors, non-consensual images or content revealing sensitive characteristics.

We do not intentionally use AI-assisted tools to infer sensitive personal information from uploaded customer images, prompts or custom artwork files for advertising targeting.

We may refuse, restrict, delete, suspend or decline to process Customer Content or AI-assisted outputs where we reasonably believe they are unlawful, unsafe, infringing, prohibited by our Terms of Service, privacy-invasive, exploitative, technically unsuitable, fraudulent or inconsistent with applicable law or service provider requirements.

7. RETENTION OF PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. Retention periods vary depending on the type of information, the sensitivity of the information, the purposes for processing, legal requirements, operational needs, contractual obligations and risk-management considerations.

We may retain personal information for purposes such as:

(a) maintaining customer accounts and order history;

(b) processing, producing, fulfilling, shipping, returning, replacing or refunding orders;

(c) providing customer support and resolving complaints or disputes;

(d) maintaining financial, tax, accounting and transaction records;

(e) preventing, detecting and investigating fraud, misuse, payment disputes, improper chargebacks, prohibited content or security incidents;

(f) complying with legal, regulatory, reporting, audit and recordkeeping obligations;

(g) enforcing agreements and managing legal claims;

(h) maintaining consent records, marketing preferences, unsubscribe records and cookie preference records;

(i) preserving evidence relating to damaged, defective, lost, delayed, incorrect or disputed orders; and

(j) maintaining backup, disaster recovery, security and business continuity systems.

Uploaded images, design files, prompts, generated images, previews and order-related Customer Content may be retained for a period reasonably necessary to process and fulfil your order, provide customer support, assess returns or replacements, address disputes, comply with legal obligations, prevent fraud and maintain business records. Saved projects, editor sessions and previews may not be retained indefinitely.

When personal information is no longer reasonably required for the purposes described in this Privacy Policy, we will delete, anonymise, aggregate or securely retain it in accordance with applicable law, technical limitations and our retention practices. If information is stored in backup archives, it may be isolated from active use until deletion or replacement occurs through ordinary backup cycles.

7.1 Account and order records

Account and order records may be retained for as long as reasonably necessary to maintain your account, provide order history, fulfil purchases, process refunds, support customer service, respond to disputes, prevent fraud, comply with tax or accounting obligations and enforce our Terms of Service.

If you close an account or request deletion, we may still retain information where permitted or required by applicable law, including information needed for order records, payment records, tax records, fraud prevention, chargeback management, legal compliance, dispute resolution, security and legitimate business purposes.

7.2 Customer Content and production records

Customer Content, production files, previews, AI-assisted outputs, proof approvals, product specifications and fulfilment records may be retained for as long as reasonably necessary to produce the product, provide support, assess quality issues, process reprints or replacements, investigate damaged or incorrect orders, resolve disputes, respond to chargebacks and maintain legal or operational records.

Customer Content may not be retained indefinitely. You should keep your own copies of original photos, images, artwork, graphics, prompts, design files and other materials before uploading them to the Services.

7.3 Consent, marketing and cookie records

Consent records, unsubscribe records, communication preferences and cookie preference records may be retained to demonstrate compliance with privacy, anti-spam, electronic communications and consent requirements.

These records may include consent status, preference settings, date and time of consent or withdrawal, cookie banner interactions, consent management identifiers, email unsubscribe records, marketing suppression records and related technical information.

7.4 Backups and technical retention

Personal information may remain in backup, archive, disaster recovery, security logging or technical systems for a limited period after deletion from active systems. These records are retained for business continuity, security, technical integrity and legal compliance purposes and are generally isolated from ordinary use.

Deletion from backup systems may occur through ordinary backup rotation, replacement or deletion cycles, unless earlier deletion is technically feasible and required by applicable law.

8. SAFEGUARDS AND SECURITY

We use reasonable administrative, technical and physical safeguards designed to protect personal information under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. The safeguards used depend on the sensitivity of the information, the amount and format of the information, the purposes for processing, the nature of the Services and the risks associated with ecommerce, online payments, custom production, uploaded content, AI-assisted tools and third-party fulfilment.

Safeguards may include access controls, authentication measures, encryption or secure transmission methods where appropriate, logging, monitoring, data minimisation, staff or contractor confidentiality obligations, service provider oversight, technical security measures, backup controls, fraud-prevention tools and operational procedures designed to reduce privacy and security risks.

No method of transmission over the internet and no method of electronic storage can be guaranteed to be completely secure. We cannot guarantee that personal information will never be accessed, used, disclosed, altered or destroyed by unauthorised persons. You should use a secure device and network when accessing the Services and should keep your account credentials confidential.

If we become aware of a privacy or security incident involving personal information under our control, we will assess the incident and take steps required by applicable law. Where required, we will notify affected individuals, privacy regulators or other parties and maintain records of the incident in accordance with applicable legal requirements.

You are responsible for ensuring that the content you upload is appropriate to share through the Services and does not contain unnecessary sensitive personal information. You are also responsible for keeping copies of original files, images, artwork and design materials because the Services are not intended to operate as a permanent storage or backup platform.

8.1 Service provider safeguards

Where service providers process personal information for us, we seek to use contractual, technical and organisational measures appropriate to the nature of the information, the services provided and the risks involved.

Service providers may be required to protect personal information, process it only for authorised purposes, restrict access to personnel or subcontractors with a need to know, maintain appropriate security measures, assist with privacy requests where applicable, and notify us of relevant incidents where required by law or contract.

8.2 Customer responsibilities

You are responsible for using secure devices, secure networks and strong account credentials when accessing the Services. You should not share your account password or allow unauthorised persons to access your account, uploaded content, order history, payment information or communications.

If you believe your account, email address, order information or Customer Content has been accessed without authorisation, you should contact us promptly.

9. MINORS

The Services are not directed to children or minors. Customers must be at least the age of majority in their province, territory or country of residence to create an account, place an order, upload content, use customisation tools, use AI-assisted image tools or otherwise purchase products through the Services.

We do not knowingly collect personal information directly from minors without appropriate parent or legal guardian involvement where legally permitted. If we become aware that we have collected personal information from a minor in a manner that is inconsistent with this Privacy Policy or applicable law, we may delete the information, close or restrict the account, cancel affected orders where appropriate, or take other reasonable steps required by law.

Parents or legal guardians who believe that a minor has provided personal information to us may contact us at privacy@snaptoonify.com.

9.1 Images or content involving minors

Because the Services allow customers to upload photos, images, artwork, prompts, design instructions and personalisation details, Customer Content may include images or information relating to minors. You must not upload, submit, generate, edit, approve or order content involving a minor unless you have the legal authority, rights, permissions and consents required to do so.

You must not upload, submit, generate, edit, approve or order content that exploits, sexualises, endangers, harms, humiliates, harasses or otherwise violates the rights, dignity or safety of a minor. We may refuse, restrict, delete, suspend, cancel or report content involving minors where we reasonably believe this is necessary to comply with law, protect safety, enforce our Terms of Service or meet service provider requirements.

9.2 Adult access requirement

The Services, customer accounts, checkout features, product customisation tools, upload tools and AI-assisted image tools are intended for adult users only. If a parent or legal guardian allows a minor to be involved in selecting images, reviewing previews or participating in a custom product process, the parent or legal guardian remains responsible for the account, order, content, permissions, consents and use of the Services.

10. PRIVACY RIGHTS AND CHOICES

You may have rights under applicable privacy law to request access to personal information we hold about you, receive information about how we have processed it, request correction of inaccurate or incomplete information, withdraw consent where processing is based on consent, object to or restrict certain processing where applicable, request deletion where available, or make a complaint about our privacy practices.

Your rights may be subject to legal, contractual and operational limits. For example, we may need to retain certain information for order management, fraud prevention, security, tax, accounting, legal compliance, dispute resolution, warranty, return, replacement, payment processing or enforcement purposes. We may also be unable to delete information that has been anonymised, aggregated, lawfully retained in backup systems or processed by third parties under their own legal obligations.

10.1 Access and correction

You may request access to personal information we hold about you, subject to exceptions permitted by applicable law. You may also request correction of personal information that you believe is inaccurate or incomplete.

We may ask you to provide information reasonably necessary to verify your identity, confirm your authority to act, identify the records requested and protect personal information from unauthorised access. We may refuse or limit access where permitted or required by law, including where disclosure would reveal another person’s personal information, confidential commercial information, privileged information, security-sensitive information or information related to an investigation.

If we determine that personal information is inaccurate or incomplete, we will correct or update it where required by applicable law and where technically and operationally feasible. Where appropriate and required by law, we may notify service providers or other parties of corrections.

10.2 Withdrawal of consent

Where we rely on your consent to process personal information, you may withdraw consent at any time, subject to legal, contractual and operational restrictions and reasonable notice. Withdrawal of consent does not affect processing that occurred before withdrawal or processing permitted or required by law.

If you withdraw consent, certain Services may no longer be available. For example, we may be unable to maintain an account, process an order, use uploaded content, provide AI-assisted features, send marketing communications, retain saved preferences, complete a return or replacement, or respond to a support request if the relevant information is required for those purposes.

If you withdraw consent for processing Customer Content after an order has entered production, we may be unable to stop production, delete files immediately, recall information from service providers or cancel fulfilment, except where required by applicable law or where technically and operationally feasible.

10.3 Marketing communications

You may unsubscribe from marketing and promotional communications at any time by using the unsubscribe link included in the message or by contacting us at privacy@snaptoonify.com. We will process unsubscribe requests in accordance with applicable law.

After you unsubscribe, we may still send transactional, administrative, service, legal and account-related communications. These may include order confirmations, payment notices, production updates, shipping notices, support replies, security alerts, policy notices and messages necessary to provide or administer the Services.

Commercial electronic messages will be handled in accordance with CASL where it applies and any applicable UK electronic communications requirements. Marketing emails will identify the sender and include an unsubscribe mechanism where required.

10.4 Cookie, tracking and advertising preferences

You can manage certain cookie and tracking preferences through our cookie banner, consent preferences tool or the cookie and tracking technology disclosures in section 5 of this Privacy Policy, where available. You may also control some cookies through your browser or device settings.

Advertising platforms may provide their own settings or opt-out mechanisms for personalised advertising, interest-based advertising, conversion tracking or remarketing. Your choices may depend on your browser, device, account settings, location and the technologies used by the relevant provider.

If you block, delete or disable cookies or similar technologies, some website features may not function properly. Your preferences may need to be set again if you use a different browser or device, clear cookies, use private browsing, or reset your consent choices.

Some cookies and similar technologies are necessary for the Services, checkout, cart, account access, security, fraud prevention, consent management, payment processing, order submission or legal compliance. These technologies may continue to operate even if you decline or withdraw consent for non-essential analytics, advertising, remarketing or similar technologies.

10.5 Automated processing

The Services may involve automated processing for purposes such as fraud screening, checkout security, payment risk assessment, address validation, analytics, advertising measurement, content processing, AI-assisted image features, technical diagnostics and service personalisation.

We do not intentionally make decisions based solely on automated processing that produce legal or similarly significant effects on individuals without appropriate notice, safeguards or human review where required by applicable law. If a decision that produces legal or similarly significant effects is made solely by automated means and applicable law gives you a right to information or review, we will provide the required information and a reasonable way to request human review.

Automated tools may help detect suspicious transactions, technical errors, prohibited content, unauthorised access attempts, payment risk, fulfilment issues, address errors, advertising events, cookie consent status or AI-assisted image feature performance. These tools support operational review but do not remove any mandatory privacy, consumer protection or legal rights available to you.

10.6 Privacy complaints

You may contact us if you have a concern or complaint about our privacy practices. We will review privacy complaints in good faith and respond within any timeframe required by applicable law or, where no specific timeframe applies, within a reasonable period.

If you are not satisfied with our response, you may have the right to contact the Information Commissioner’s Office, the Office of the Privacy Commissioner of Canada, a provincial privacy regulator or another regulator with jurisdiction, depending on the law that applies to your concern.

When submitting a complaint, please include enough information for us to understand the issue, identify the relevant account, order, communication, cookie choice, uploaded content, AI-assisted feature, service provider or processing activity, and respond appropriately.

11. DO-NOT-TRACK CONTROLS

Some web browsers and mobile applications include “Do Not Track” or similar signals that are intended to communicate tracking preferences. Because there is no uniform technology standard for recognising and responding to these signals, the Services may not respond to Do Not Track browser signals or similar automatic signals unless required by applicable law.

You can manage many cookie, analytics and advertising preferences through our cookie banner, consent preferences tool, browser settings, device settings and platform-specific privacy controls. If a legally required standard for responding to browser-based privacy signals applies to the Services in the future, we will update our practices and this Privacy Policy as appropriate.

Do Not Track signals are separate from consent choices made through our cookie banner or consent preferences tool. Where available, our consent management tool is the primary method for recording cookie and tracking preferences on the Services.

12. UPLOADED CONTENT AND AI-ASSISTED IMAGE TOOLS

Uploaded content and AI-assisted image tools are central to the custom product experience. Because customers may submit photos, images, artwork, graphics, prompts, design instructions, names, likenesses, text and other content, we process that information carefully and only for purposes connected to providing the Services, managing orders, protecting rights, maintaining security and complying with legal obligations.

12.1 Uploaded content

When you upload, submit, generate, edit, enhance, transform, preview, approve or otherwise provide photos, images, artwork, graphics, prompts, design instructions, personalisation details or related files through the Services, we may collect and process that content to operate customisation tools, create previews, prepare production files, fulfil your order, provide customer support, maintain quality control, prevent misuse, resolve disputes and comply with applicable legal obligations.

Uploaded content may include personal information about you or other individuals. You are responsible for ensuring that you have all rights, permissions and consents required to upload the content and allow us and our service providers to process it for the purposes described in this Privacy Policy and our Terms of Service.

12.2 Processing by service providers

Uploaded content may be shared with service providers that help us operate the Services, including hosting providers, cloud storage providers, AI or image-processing providers, editor technology providers, print production partners, fulfilment partners, packaging providers, shipping carriers, security providers and customer support tools.

These providers may process uploaded content and related information where reasonably necessary to provide customisation functionality, prepare previews, create production files, produce custom products, assess technical issues, investigate misuse, provide support, fulfil orders, handle damaged or defective product claims, manage delivery issues and comply with applicable legal obligations.

12.3 Sensitive content and third-party rights

You should not upload content containing sensitive personal information unless it is necessary for your order and you have all required rights, permissions and consents. You should not upload private images, images of minors, health information, identification documents, financial information, confidential information, non-consensual images or other sensitive material unless you have a lawful basis to do so and the content is necessary for the product you are ordering.

We do not intentionally use uploaded customer images, prompts or custom artwork files to collect or infer sensitive personal information for advertising targeting. We may, however, process uploaded content to operate the Services, fulfil orders, provide support, prevent misuse, comply with law and enforce our Terms of Service.

You are responsible for ensuring that uploaded content does not infringe, misappropriate or violate any copyright, trade mark, moral right, privacy right, publicity or personality right, confidential information right, contractual right or other right of any person or entity.

12.4 AI-assisted image tools

AI-assisted image features may process uploaded images, prompts, design instructions, selected settings, previews, generated outputs and related technical data. Processing may occur through our systems or through third-party AI, image-processing, cloud infrastructure or technology providers that support the feature.

AI-assisted image features may be optional. If you do not want your content processed through AI-assisted image tools, you should not use those features. Where available, you may instead place an order using your own uploaded or selected image without requesting AI generation, enhancement or transformation.

AI-assisted outputs may vary and may not be unique, copyrightable, legally protectable, non-infringing, error-free, suitable for every print size or identical to any preview shown on screen. You remain responsible for reviewing and approving final images, text, layouts, cropping, orientation, product options and order details before checkout.

12.5 Retention of uploaded content

Uploaded content, generated outputs, previews, production files and related order records may be retained for as long as reasonably necessary to process and fulfil your order, provide customer support, manage returns or replacements, assess quality or delivery issues, prevent fraud or misuse, comply with legal obligations, maintain records and resolve disputes.

Saved projects, editor sessions, previews and uploaded files may not be retained indefinitely. You should keep your own copies of original photos, images, artwork, prompts, files and design materials because the Services are not intended to operate as a permanent storage or backup service.

13. UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our Services, service providers, technologies, legal requirements, operational practices or privacy practices. The “Last Updated” date above indicates the effective date of the current version.

If we make material changes, we may provide notice by posting the updated Privacy Policy on the website, displaying a notice through the Services, sending a communication where appropriate, or using another method permitted by applicable law. Your continued use of the Services after an updated Privacy Policy becomes effective means that you acknowledge the updated Privacy Policy, subject to any consent requirements that apply under law.

Where a change requires renewed consent under applicable law, we will seek that consent before relying on the changed processing activity. You should review this Privacy Policy periodically to understand how we process personal information.

Updates may relate to, among other things, ecommerce functionality, Shopify-related services, checkout features, payment providers, fraud-prevention tools, production or fulfilment partners, shipping carriers, analytics tools, advertising technologies, cookie and consent tools, AI-assisted image features, uploaded content processing, data retention practices, security measures, privacy rights procedures, contact details or applicable legal requirements.

14. ACCESS, CORRECTION AND DELETION REQUESTS

You may request access to personal information we hold about you, request information about how it has been processed, request correction of inaccurate or incomplete personal information, request deletion of personal information, withdraw consent where processing is based on consent, or request assistance with account-related privacy matters, subject to applicable law.

To submit a privacy request, email us at privacy@snaptoonify.com. Your request should include your full legal name, contact details, the nature of your request, sufficient information for us to identify the relevant records and any supporting information reasonably needed to verify your identity or authority to act.

We may refuse, limit or delay a request where permitted or required by applicable law, including where fulfilling the request would disclose another person’s personal information, reveal confidential commercial information, compromise security, interfere with an investigation, affect legal privilege, conflict with legal obligations, undermine fraud prevention, or require deletion of information that must be retained for lawful purposes.

Deletion requests are subject to lawful retention requirements. We may retain information where reasonably necessary for tax, accounting, order management, production records, shipping records, fraud prevention, payment disputes, chargebacks, security, customer support, legal compliance, dispute resolution, enforcement of agreements, backup systems or other legitimate business purposes permitted by law.

If we correct, delete or restrict personal information, we will do so in accordance with applicable law and our technical capabilities. Where appropriate and required by law, we may notify relevant service providers or other parties of the correction, deletion or restriction.

We will review and respond to privacy requests within any timeframe required by applicable law or, where no specific timeframe applies, within a reasonable period.

14.1 Verification and authorised representatives

Before responding to a privacy request, we may need to verify your identity, confirm your authority to act on behalf of another person, identify the relevant account or order, or request additional information needed to process the request securely.

If a request is made by an authorised representative, parent, legal guardian, estate representative or other third party, we may request proof of authority before disclosing or modifying personal information.

14.2 Limits on deletion and access

Access, correction and deletion rights are not absolute. We may be unable to provide access, correction or deletion where doing so would conflict with legal obligations, affect another person’s privacy, reveal confidential commercial information, compromise security, interfere with fraud prevention, affect legal privilege, undermine a dispute or investigation, or require deletion of information we are legally or operationally required to retain.

If we cannot fulfil a request in whole or in part, we will explain the reason where required by applicable law.

15. CONTACT DETAILS AND DATA ENQUIRIES

Privacy-related enquiries should be submitted by email so that we can review the request, verify the relevant account or order information, protect personal information and respond in a clear written record.

For privacy enquiries, data protection requests, consent withdrawal requests, access requests, correction requests, deletion requests, account-related privacy requests, privacy complaints and other communications relating to this Privacy Policy or our processing of personal information, email: privacy@snaptoonify.com

For general customer support that does not relate to privacy rights, cookies, tracking technologies or personal information processing, email: support@snaptoonify.com

If you contact us by email, include “SNAPTOONIFY” and, where applicable, your order number or account email in the subject line so that your message can be identified and routed appropriately.

Communications should include:

- your full legal name and contact details;

- a clear description of the privacy matter or data request;

- the order number, account email or other relevant reference, if applicable;

- sufficient detail to allow us to understand, verify and assess your request; and

- any relevant supporting documentation.

We may request additional information or verification of identity where reasonably necessary to process your request securely, confirm your authority to act, protect personal information and comply with applicable law.

We will respond within any timeframe required by applicable law or, where no specific timeframe applies, within a reasonable period.