Privacy Policy

Data controller

The controller of your personal data is Artiq, reg. no. 680823-0220, [address]. Privacy enquiries can be sent to artiq@artiq.is.

What we collect

• Name, email and phone number you provide at checkout.
• Delivery point (a Dropp pickup location of your choice).
• Images you upload to be printed.
• Order and payment status. Card details are processed securely by our payment provider Straumur — Artiq never stores card numbers.
• Technical information about your visit (e.g. IP address, browser type and on-site behaviour) — only if you accept analytics cookies.

Purpose and legal basis

• Performance of a contract: processing your order, producing and delivering your product.
• Legal obligation: meeting accounting and tax requirements.
• Consent: analytics cookies and web measurement run only after you accept them.
• Legitimate interests: site security, customer service and improving our product.

Images you upload

Images you upload are used solely to produce the product you order. We do not sell them or share them with third parties for marketing. Images are kept while an order is in progress and for a reasonable period afterwards in case of reprints, then deleted.

Processors

We use trusted service providers who process personal data on our behalf under data-processing agreements:

• Straumur — payment processing.
• Dropp — delivery and shipping.
• Cloudflare — website hosting and storage.
• Resend — email delivery (order confirmations).
• Google — web analytics (Google Analytics via Google Tag Manager).
• Microsoft — web analytics (Clarity).

Some of these providers may process data outside the European Economic Area. Where they do, appropriate safeguards are used, such as the European Commission’s Standard Contractual Clauses.

Retention

• Order and accounting records are kept for seven years as required by accounting law.
• Uploaded images are deleted once they are no longer needed for production or reprints.
• Analytics data is retained according to each provider’s settings.

Your rights

You have the right to:

• access the personal data we hold about you,
• have inaccurate data corrected,
• have data erased where applicable,
• object to or restrict processing,
• have your data ported,
• withdraw consent at any time.

To exercise your rights, contact artiq@artiq.is. You may also lodge a complaint with the Icelandic Data Protection Authority (personuvernd.is).

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration or destruction.

Changes

We may update this policy. The latest version is always available on this page along with the date it was last updated.