Last updated 12 August 2026
1. Who is responsible for your data
PrinterStream is run by Yevhenii Ostashko, a business registered in Poland under NIP 5273184071. That is the person legally answerable for what happens to your personal data here, and both addresses below reach them.
Registered address: ul. Brzeska 24, 03-737 Warsaw, Poland.
For anything to do with your data โ a question, a copy of it, or a request to erase it โ write to:
2. What we collect
What an order actually needs, and whatever you choose to add on top.
- Your account: name, email address, and a password kept only as an irreversible hash. We could not tell you your own password if we wanted to.
- Your orders: delivery address, phone number โ carriers insist on one โ what you bought, and the order history attached to your account.
- Payment: handled end to end by Stripe. Card numbers never reach our servers. We are told the result and the last few digits, which is enough to match a refund to a charge.
- Files you upload: artwork, logos or photos for a personalised item, and the notes you send with them.
- Things you add yourself: reviews, wishlist, saved addresses, and a bonus balance if you are one of our design partners.
- Technical data: IP address, browser, pages visited. Beyond the security log any web server keeps, this is collected only if you agreed to analytics cookies.
3. Why we use it, and what entitles us to
- To fulfil the order โ make it, send it, tell you where it is, handle the return. Without this data there is no order at all; this is simply the contract between us.
- To keep the invoices and accounts Polish tax law requires. We have no discretion here, and it is why an order record outlives a deleted account.
- To keep the shop standing: blocking fraud and abusive uploads, rate limiting, error logs. Our legitimate interest, and yours.
- To measure traffic and advertising, and to ask you for a review after delivery. This part runs on your consent, and you can take it back at any moment without explaining yourself.
4. Who else sees it
We do not sell your data and never will. It reaches other companies only where they do one specific job for us:
- Stripe โ takes the payment.
- InPost โ delivers the parcel, and needs the address to do it. On the checkout page the locker map is loaded from InPost directly.
- Zoho, through its ZeptoMail service โ sends the emails about your order.
- Amazon Web Services โ hosts the site and stores uploaded files, in the Frankfurt region.
- Google Analytics and Meta โ traffic statistics and advertising measurement, and only if you accepted those cookies.
Inside PrinterStream, your order is seen by the people who make it and send it. It is a small team and access goes no further than the work requires.
5. Where your data lives
On servers inside the European Union, in Frankfurt. Some of the companies above are American, and where they process data outside the EU they do so under the European Commission's standard contractual clauses.
One deliberate choice worth naming: the fonts on this site are served by us, not fetched from Google. Reading a page here therefore sends your IP address to nobody but us โ which was not true of this site until we changed it.
6. How long we keep it
- Orders and invoices: five years from the end of the tax year they belong to, because Polish law says so.
- Your account: until you delete it, which you can do yourself in your account settings. There is a short delay before it becomes final, in case the click was a mistake.
- Uploaded artwork: while the order is being made, and for a period afterwards so that we can reprint if something goes wrong in transit.
- Analytics data: for the period the provider sets, and collection stops the moment you withdraw consent.
7. Your rights
Under the GDPR you can ask us to:
- show you what we hold about you, and give you a copy of it;
- correct anything that is wrong;
- erase it, where the law does not require us to keep it;
- stop using it for a while, or object to one particular use;
- export it in a form you can take somewhere else;
- withdraw a consent you gave earlier.
Two of those you never have to ask for. Exporting your data and deleting your account are both buttons in your account settings.
If we handle a request badly you can complain to the Polish supervisory authority โ Prezes Urzฤdu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa. We would much rather you wrote to us first and let us fix it.
8. Cookies
A few cookies are not optional, because the site stops working without them: the one holding your cart and your login, the one that protects forms against cross-site requests, the one remembering which language you chose, and the one recording your cookie decision so that we stop asking.
Analytics and advertising cookies stay off until you switch them on. Nothing loads and no identifier is created before you choose.
You can change your mind whenever you like โ Cookie preferences in the footer reopens the same dialogue. The full list, cookie by cookie, is on the cookie policy page.
9. Children
The shop is not aimed at children and we do not knowingly open accounts for anyone under 16. If you believe a child has given us their data, write to us and it goes.
10. Changes to this policy
When something here changes, the date at the top changes with it. If a change is significant and affects you, we will say so by email rather than hope you re-read the page.
Still unsure about something?
Write to us. A person reads it, usually the same day.