Privacy policy

Child Art Print (“we”, “us”, “our”) respects your privacy and processes personal data in accordance with the General Data Protection Regulation (“GDPR”) and other applicable EU data protection laws.

This Privacy Policy explains how we collect, use, store, and share personal data when you visit our website, place an order, upload artwork, contact us, or interact with our marketing.

1. Data controller

Child Art Print is the data controller for the personal data covered by this Privacy Policy.

Julija Vertjajeva
Sukkervænget 77
5000 Odense C
Denmark

Contact email: hello@childartprint.com

If Child Art Print operates through a registered company or sole proprietorship, the relevant legal entity is the controller.

2. Personal data we collect

We may collect the following categories of personal data:

Information you provide directly

  • name
  • billing and delivery address
  • email address
  • telephone number
  • order details
  • messages sent to customer support
  • uploaded drawings, images, titles, dedication text, and other content submitted as part of your order

Information collected automatically

  • IP address
  • browser and device information
  • time zone and language settings
  • website usage data
  • pages viewed, referral sources, and interaction data
  • cookie and consent preferences

Payment and transaction data
Payments are processed by payment service providers. We do not store full payment card details ourselves.

Uploaded drawings or images may in some cases contain personal data, for example names, handwriting, photographs, metadata, or other identifying information.

3. Children’s data

Our website and ordering flow are intended for adults. We do not knowingly collect personal data directly from children.

Because our products are based on children’s drawings, uploaded artwork may relate to a child. By placing an order, you confirm that you are at least 18 years old and that you have the right and authority to submit the artwork and related content.

4. How we use personal data

We use personal data to:

  • operate and secure our website
  • create, produce, and deliver your order
  • process payments and prevent fraud
  • communicate with you about your order
  • provide customer support
  • improve our services, website performance, and user experience
  • comply with legal and accounting obligations
  • send newsletters or marketing where permitted
  • measure and improve advertising performance where consent has been given

5. Legal bases for processing

Depending on the purpose, we process personal data on one or more of the following legal bases:

  • contract performance — to process and fulfil your order
  • legal obligation — for bookkeeping, tax, consumer, and regulatory compliance
  • legitimate interests — to secure the website, prevent fraud, improve operations, and handle customer service
  • consent — for marketing emails, non-essential cookies, retargeting, and similar advertising technologies where required

6. Sharing of personal data

We share personal data only where necessary and only with relevant service providers and partners acting on our behalf or independently where appropriate.

These may include categories such as:

  • e-commerce platform providers
  • payment providers
  • hosting, storage, and security providers
  • print production and fulfilment partners
  • shipping and logistics partners
  • image-processing providers
  • email and CRM providers
  • analytics providers
  • advertising and remarketing partners
  • professional advisers or authorities where legally required

Where required by law, we may also disclose personal data to courts, regulators, law enforcement, or other public authorities.

We do not sell personal data.

7. Artwork and uploaded content

We process uploaded drawings, images, titles, dedication text, and related order content in order to create and fulfil custom products.

This may include:

  • storage of files during the order workflow
  • design preparation and layout work
  • print production
  • temporary technical processing, including image refinement or background removal where relevant

We do not claim ownership of your artwork.

We process uploaded content only for the purposes of providing the service, handling support, protecting our business, and complying with legal obligations.

8. Behavioural advertising and remarketing

Where you give consent, we may use cookies, pixels, tags, and similar technologies to:

  • measure campaign performance
  • understand how visitors interact with our site
  • build audiences
  • show relevant ads on third-party platforms
  • limit repeated ads
  • improve future advertising

This may include advertising and measurement services provided by platforms such as Meta and Google, as well as marketing service providers used by Child Art Print.

You can withdraw consent at any time through our cookie settings. You also have the right to object at any time to processing of your personal data for direct marketing purposes.

9. Cookies and similar technologies

We use cookies and similar technologies that fall into the following categories:

  • strictly necessary
  • preferences / functional
  • analytics
  • marketing

Strictly necessary technologies are used to operate the website, cart, checkout, fraud prevention, security, and consent management.

Analytics and marketing technologies are only used where required consent has been obtained under applicable law.

You can manage your preferences through our cookie banner or settings tool. Blocking some cookies may affect site functionality.

10. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy or as required by law.

In general:

  • order and transaction data may be retained for accounting, tax, and legal compliance periods
  • customer service correspondence may be retained as long as reasonably necessary to handle the matter and protect legal interests
  • inactive upload sessions and temporary files are deleted according to internal retention schedules
  • marketing data is retained until you unsubscribe, withdraw consent, or the data is no longer relevant
  • cookie-related data retention depends on the specific technology and your consent choices

11. International transfers

Some service providers may process personal data outside the EEA.

Where this happens, we rely on lawful transfer mechanisms such as adequacy decisions, standard contractual clauses, or other safeguards permitted under GDPR.

12. Your rights

If you are in the EEA or where similar rights apply, you may have the right to:

  • access your personal data
  • request correction
  • request deletion
  • request restriction
  • object to processing
  • withdraw consent
  • request data portability
  • lodge a complaint with a supervisory authority

To exercise your rights, contact: hello@childartprint.com

We may ask for reasonable proof of identity before fulfilling a request.

13. Automated decision-making

We do not use fully automated decision-making that produces legal or similarly significant effects on you.

Some service providers may use automated fraud-prevention or security tools as part of checkout and site protection.

14. Security

We use appropriate technical and organisational measures to protect personal data, including access controls, processor agreements, secure systems, and reasonable safeguards designed to reduce the risk of unauthorised access, loss, misuse, or disclosure.

No method of transmission or storage is completely secure, but we work to maintain an appropriate level of protection.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal requirements, or website operations.

The latest version will always be available on our website and the “Last updated” date will show when it was most recently revised.

16. Complaints

If you have concerns about how we process your personal data, please contact us first at hello@childartprint.com.

You also have the right to lodge a complaint with your local supervisory authority. In Denmark, this is Datatilsynet. In Sweden, this is Integritetsskyddsmyndigheten (IMY).