Yearprint

Legal

Privacy Policy

Last updated: April 13, 2026

1. Who we are

Yearprint ("we", "us", "our") operates the website yearprint.com. We are responsible for the processing of your personal data as described in this privacy policy.

2. What data we collect

We collect and process the following personal data:

  • Account data — email address and name when you create an account (via email or Google sign-in).
  • Order data — shipping address, order details, and calendar configuration when you place an order.
  • Payment data — processed securely by Stripe. We never store your credit card details.
  • Usage data — technical information such as browser type, device, and pages visited, collected via cookies.

3. Why we process your data

  • To fulfill your calendar orders and deliver them to you.
  • To manage your account and provide customer support.
  • To process payments securely via our payment provider (Stripe).
  • To improve our website and services based on aggregated usage data.
  • To comply with legal obligations (e.g. tax and accounting requirements).

4. Legal basis (GDPR)

We process your personal data based on:

  • Contract — processing necessary to fulfill your order (Art. 6(1)(b) GDPR).
  • Consent — for non-essential cookies and marketing communications (Art. 6(1)(a) GDPR).
  • Legitimate interest — for website analytics and fraud prevention (Art. 6(1)(f) GDPR).
  • Legal obligation — for tax and accounting records (Art. 6(1)(c) GDPR).

5. Third-party services

We share your data with the following trusted third parties, only to the extent necessary:

  • Stripe — payment processing (USA, EU-US Data Privacy Framework).
  • Supabase — database and authentication (EU region).
  • Gelato — print fulfillment and shipping (EU).
  • Vercel — website hosting (global CDN, EU origin).

6. Data retention

We retain your personal data for as long as necessary to provide our services and fulfill legal obligations. Order data is kept for 7 years for tax purposes. You can request account deletion at any time.

7. Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability — receive your data in a structured format.
  • Withdraw consent at any time (without affecting prior processing).
  • Lodge a complaint with your local data protection authority.

8. Cookies

We use cookies to keep you logged in and to remember your preferences. For details on which cookies we use and how to manage them, see our Cookie Policy.

9. Contact

For questions about this privacy policy or to exercise your rights, contact us at hello@maartenvloon.com.