Privacy policy

Last updated: 8 September 2026

This policy explains what personal data we collect when you visit firstprints.shop or buy from us, why, and what your rights are. We have tried to write it so you can actually read it.

1. Who is responsible

The data controller is [FULL LEGAL NAME], sole trader, trading as First Prints, NIF [NIF], [POSTAL ADDRESS], Spain. Email: firstprints.shop@outlook.com.

2. What we collect and why

Data When Why Legal basis (EU/UK)
Name, shipping address, email, phone When you order To deliver your kit, send tracking, and handle returns Performance of a contract
Payment details At checkout To take payment. Handled by Shopify Payments; we never see your full card number Performance of a contract
Order history and support emails When you buy or write to us To help you, handle refunds, and meet accounting and tax obligations Contract; legal obligation
Email address for marketing If you tick the box at checkout or sign up To send occasional emails about First Prints. Unsubscribe link in every email Consent
Device, browser, pages viewed, approximate location When you browse To make the site work, measure what works, and show relevant ads on Meta platforms (see Cookies) Consent for non-essential cookies; legitimate interest for essential ones

We do not collect photos of your baby, your baby's name or date of birth, or any data about your child. The prints you make stay with you.

3. Cookies and tracking

Essential cookies make the cart and checkout work and cannot be turned off. With your consent (EU and UK) we also use:

  • Shopify analytics, to see how the site is used.
  • Meta Pixel and Conversions API (Facebook and Instagram), to measure our ads and show our ads to people who visited the site. Meta may combine this with data it already holds about you under its own privacy policy.

You can change your choice at any time from the cookie banner or by clearing cookies in your browser. Visitors in the United States can opt out of the sharing of data for targeted advertising through the Your Privacy Choices page.

4. Who we share data with

Only companies that help us run the store, and only what they need:

  • Shopify (store platform and payments), Shopify International Ltd, Ireland, and Shopify Inc., Canada.
  • Our fulfilment partner and carriers, who receive your name, address and phone number to pack and deliver the kit. Our fulfilment partner is located in China.
  • DSers, the order-routing tool that transmits orders to our fulfilment partner.
  • Meta Platforms, for advertising measurement, if you consented to marketing cookies.
  • Our email provider, to send order and marketing emails.

We do not sell your personal data. Where data leaves the EU or UK (for example to Canada, the United States or China), we rely on the European Commission's adequacy decisions where they exist and on Standard Contractual Clauses otherwise.

5. How long we keep it

Order and invoice data: as long as Spanish tax and commercial law require, currently up to 6 years after the order. Marketing email: until you unsubscribe. Support emails: 2 years after the last message. Analytics: per Shopify's and Meta's retention periods, typically up to 2 years.

6. Your rights

You can ask us to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent at any time. Email firstprints.shop@outlook.com; we answer within 30 days. If you are unhappy with how we handle your data you can complain to the Spanish data protection authority, the AEPD (aepd.es), or to the authority in your own country. In the UK that is the ICO (ico.org.uk).

United States residents: depending on your state you may have the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing for targeted advertising. We do not sell personal information. To opt out of sharing for targeted advertising, use the Your Privacy Choices page or email us. We will not discriminate against you for exercising these rights.

7. Children

Our site and products are for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, email us and we will delete it.

8. Security

The site runs on Shopify, which is PCI DSS Level 1 certified. All pages are served over HTTPS. Access to order data is limited to the people who need it to serve you.

9. Changes

If we change this policy in a way that matters, we will update the date at the top and, for significant changes, tell you by email or a notice on the site.

10. Contact

firstprints.shop@outlook.com, or by post to [FULL LEGAL NAME], [POSTAL ADDRESS], Spain.