Privacy Policy

Dirty Real Prints is a sole-trader business operated by Nicholas S. Thompson in the United Kingdom. Contact: nick@dirtyrealprints.com.

For the purposes of UK GDPR and the Data Protection Act 2018, Nicholas S. Thompson is the data controller.

When you place an order, we collect:

• Name and delivery address
• Email address
• Order details and payment confirmation (not card data)

When you browse, we may collect aggregate, non-identifying analytics data (visits, referrers, device type) using Plausible, a privacy-focused and cookieless analytics service.

If you draw on the wall, submit an idea, make a queue request, or deface a page, we store what you submit (the drawing, the text) so it can be displayed. These submissions are anonymous: they are not linked to your name, email, or order unless you write identifying details into them yourself, which we ask you not to do. Email us to have a submission removed.

We do not collect your card details. All payments are processed directly by Stripe on their own infrastructure.

• To fulfil your order and deliver your prints
• To send you transactional email (confirmation, shipping)
• To keep accurate tax and business records as required by law
• To understand general site performance in aggregate

We process your data on the lawful basis of contract (to fulfil your order) and legal obligation (tax and accounting records). Aggregate analytics is processed on the basis of legitimate interest.

We share the minimum necessary data with:

• Stripe - payment processing (name, email, billing address). See stripe.com/privacy.
• Resend - transactional email delivery (email address).
• Royal Mail / delivery partner - shipping (name and address on the label).
• HMRC - UK tax authorities, where legally required.

We never sell your data. We never share it for marketing purposes.

Order records are retained for 6 years to comply with UK tax regulations. Email correspondence is kept until no longer needed for customer service. Analytics data is aggregate and does not identify you.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure (subject to legal retention requirements)
• Object to processing
• Data portability
• Lodge a complaint with the Information Commissioner's Office (ico.org.uk)

To exercise any of these rights, email nick@dirtyrealprints.com.

See our Cookie Policy for details on what cookies this site uses and how to control them.

We may update this policy from time to time. The date at the top indicates when it was last changed.