This notice explains how Zieasoft Limited ("Zieasoft", "we", "us"), the business behind ArtworkDesk (zieasoft.com), uses personal data. Our address is [address] and you can contact us about privacy at [privacy email]. [If registered: We are registered with the Information Commissioner's Office, registration number [number].]
Two different roles
When we're the controller. For people who visit this website, sign up, or use ArtworkDesk as part of a print business's team, we decide how the data is used, and this notice applies in full.
When we're a processor. Print businesses use ArtworkDesk to manage their own customers' orders. If you've received an email from a business asking for artwork or approval of a mockup, that business is responsible for your data, and their own privacy notice applies. We process it on their behalf under our data processing terms. Please contact the business first with any questions; we'll help them answer.
What we collect, and why
Account holders and team members
- Name, email address, business name and address, password (stored only as a secure hash), and the role you have on the account. We need these to provide the service under our contract with your business.
- Billing details. Card payments are handled by Stripe; we see only the card type, last four digits and expiry date, and the subscription status.
- Records of activity, such as which team member changed an order, and technical logs (IP address, browser and time) used to keep the service secure. This is in our legitimate interest in running a reliable, secure service.
- Emails we send about your account, billing and important changes. We send marketing emails only if you've agreed, and you can opt out at any time.
Website visitors
This website doesn't use analytics or advertising cookies, and doesn't set cookies at all. Our web host keeps standard server logs (IP address, pages requested, browser) for up to [30] days for security.
Anyone who emails us
We keep your messages and contact details so we can reply and keep a record of support conversations.
Cookies in the app
ArtworkDesk uses only the cookies it needs to work: a session cookie that keeps you signed in, and a security cookie that protects forms. These are strictly necessary, so we don't ask for consent. Neither is used for tracking.
Who we share data with
We don't sell personal data. We use these service providers to run ArtworkDesk:
- [Hosting provider]: servers and storage, located in [UK / EU].
- Stripe Payments Europe Ltd: subscription billing.
- Sendinblue SAS (Brevo), France: sending emails from the app, and reporting emails that bounce.
- [Cloudflare, Inc.: security and delivery of web pages, if used]
When a business connects its own online shop (such as Shopify, WooCommerce, Wix or Etsy), accounting software or a delivery service, we exchange order and customer details with that service on the business's instructions. That service's own privacy terms apply to what it holds.
We may also share data where the law requires it, or with a buyer if our business is sold, under the same protections.
Where a provider transfers data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement or Addendum to protect it.
How long we keep it
- Account data: while the account is active and up to [90] days after it ends.
- Billing records: 6 years, as required for tax and accounting.
- Server and security logs: up to [30] days.
- Support emails: up to [2] years after the last message.
Your rights
You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable form. Email [privacy email] and we'll reply within one month. Some rights don't apply in every situation, and we'll explain if that's the case.
If you're unhappy with how we've handled your data, please tell us. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Security
All connections are encrypted. Each business's data is kept separate, team members see only their own business, and files are stored privately and served only to people with access or a valid customer link.
Changes
We'll post any changes here and update the date at the top. If a change materially affects account holders, we'll email them.