Data Processing Terms

These Data Processing Terms (“Terms”) form part of the Terms of Service between Printful Inc. and its

affiliated companies and subsidiaries such as AS Printful Latvia, Printful Custom Printing, S.L. and others

(“Printful”) and Merchants (defined below) regarding Printful’s services. These Terms are binding between

Printful and Merchants and constitute a data processing agreement. If there is a conflict between these

Terms and the Agreement, these Terms will govern. If you do not agree to these Terms, do not use the

Service (both defined below).

1. Definitions
2. Capitalized terms not otherwise defined herein shall have the same meaning as set forth in the

Agreement.

2. “Agreement” means the Terms of Service entered into by Printful and the Merchant regarding

the use of Printful’s Service.

3. “Data Subject”, “Controller”, “Processor”, “Supervisory Authority” and “Processes” have the

meanings given in the GDPR.

4. “Data Protection Laws” means (a) Regulation (EU) 2016/679 of the European Parliament and of

the Council of 27 April 2016 on the protection of natural persons with regard to the processing

of personal data and on the free movement of such data (“GDPR”) and any applicable national

implementing or supplementing laws including the UK Data Protection Act 2018 (where

applicable); (b) the e-Privacy Directive 2002/58/EC and any applicable national implementing

laws; and (c) the e-Privacy Regulation 2017/003 (once it takes effect); in each case as

amended, consolidated, re-enacted or replaced from time to time.

5. “Merchant” means any person, be it legal entity or natural person, that uses Printful’s Service to

execute orders and/ or deliver its products to recipients, including the Merchant’s customers.

6. “Model Clauses” means the Standard Contractual Clauses (Controller to Processor) as set out in

the Commission Decision of 5 February 2010 (C (2010) 593), as amended, updated or replaced

from time to time.

7. “Parties” means Printful and the Merchant (P.O.T.N♔ Official).
8. “Personal Data” means Personal Data that is subject to the GDPR and any national legislation

implementing the GDPR including the UK Data Protection Act 2018 (where applicable), including

Personal Data of Merchants of Printful who are offered goods and services in the EEA and the UK

(the “GDPR Countries”);

9. “Privacy Shield Program” means the EU-US and Swiss-US Privacy Shield Frameworks as

designed by the US Department of Commerce and approved by the European Commission and

Swiss Administration (respectively) as providing adequate protection regarding the collection,

use, and retention of personal information transferred from the EU, the UK and/or Switzerland

(as applicable) to the United States.

10. “Service” means print-on-demand services offered by Printful to Merchants including printing for

personal use or outsourcing the printing and delivering of products to Merchant’s customers, as

well as branding, warehousing and fulfillment, design, merchandising, and other services that

Printful may provide in accordance with the requirements of the Merchant.

11. “Third Countries” means all countries outside of the European Economic Area (“EEA”),

excluding countries approved as providing adequate protection for Personal Data by the

European Commission from time to time, which at the date of this Agreement include Andorra,

Argentina, Canada, Faroe Islands, Guernsey, Isle of Man, Israel, Japan, Jersey, New Zealand,

Switzerland and Uruguay.

2. Subject of the Terms
3. These Terms govern the relationship between Printful and the Merchant in respect of any

processing of Personal Data by Printful on behalf of the Merchant.

2. To the extent that Printful Processes Personal Data on behalf of the Merchant, the Merchant is

the Controller and Printful is the Processor, only processing this Personal Data on behalf of the

Merchant.

3. The Merchant hereby appoints and instructs Printful to process the Personal Data as prescribed

by these Terms, including with regard to the transfer of Personal Data to a Third Country or

international organisation.

3. Details of Processing

3.1 To the extent that Printful Processes Personal Data on behalf of the Merchant, the following Processing

details apply:

1. Categories of Data Subjects. Merchant’s customers (end users of Printful’s Services) and

Merchant’s potential customers or other end users of Printful’s Services, whose personal data

Merchant has authorized Printful to Process.

2. Type of Personal Data. Personal Data relating to the Merchant’s customers and any Personal

Data in the Merchant’s printing content (where applicable) and Personal Data revealed during

the use of any Printful Services, including name, email address, phone number, shipping

address and other information about the Merchant’s customers.

3. Nature and purpose of processing. Printful processes Data in accordance with these Terms in

order to provide the Merchant with the Service and otherwise ensure fulfilment of the

obligations set out in the Agreement between the Merchant and Printful to the extent this

involves the processing of Personal Data. Printful only has access to the Personal Data that has

been provided by the Merchant and uses such Personal Data in accordance with the Merchant’s

instructions as set out in these Terms.

4. Duration of processing. Data will be processed for the duration of the Agreement.
5. Obligations of the Merchant

Printful

1. The Merchant warrants that it has complied and continues to comply with the Data Protection

Laws, including those as set out in Clause 4(b).

2. The Merchant confirms that the Personal Data transferred to Printful has been collected by the

Merchant on a valid lawful basis and Merchant has obtained any necessary consents or given

any necessary notices as prescribed by the Data Protection Laws, and that the Merchant is

entitled to provide the Personal Data to Printful.

3. The Merchant confirms that these Terms contain sufficient instructions to Printful regarding the

processing of Personal Data, as well as the scope and purposes thereof.

4. If reasonably necessary, the Merchant may provide Printful with additional instructions

regarding the processing of Personal Data other than those prescribed by these Terms. Such

additional instructions must be reasonable for Printful to carry out, properly documented and in

compliance with the Data Protection Laws and must also be accepted by Printful.

5. The Merchant shall be responsible for the accuracy of the Personal Data and keeping it up to

date and shall inform Printful in case of any changes in the Personal Data.

6. Printful shall not be liable for any claims or complaints from Data Subjects regarding any action

taken by Printful as a result of acting in accordance with instructions received from the

Merchant. Further, the Merchant agrees that it will indemnify and hold harmless Printful on

demand from and against all claims, liabilities, costs, expenses, loss or damage (including

consequential losses, loss of profit and loss of reputation and all interest, penalties and legal

and other professional costs and expenses) incurred by Printful arising directly or indirectly from

a breach of this Clause 4.

5. Obligations of Printful
6. Printful shall only process the Personal Data on behalf of the Merchant and shall always follow

the Merchant’s instructions prescribed by these Terms, or as otherwise provided to Printful in

writing in accordance with Clause 4(e); if Printful cannot provide such compliance for whatever

reason (including if the instruction violates the Data Protection Laws), it agrees to inform the

Merchant of its inability to comply as soon as reasonably practicable.

2. Printful has implemented appropriate technical and organizational measures specified in

Schedule 1 (Technical and Organisation Security Measures) of these Terms and shall continue to

comply with them during the term of these Terms and the Agreement.

3. Printful monitors and ensures that all of Printful’s authorized personnel involved in the

Processing of Data under these Terms have committed themselves to confidentiality obligations

or are under an appropriate statutory obligation of confidentiality.

4. Further obligations of Printful are set out in Clauses 6 to 9.
5. Assistance to the Merchant
6. Considering the nature of the processing, Printful will provide all reasonable assistance to the

Printful

Merchant with the provision of technical or organizational measures, insofar as possible, for the

fulfilment of the Merchant’s obligations as the Controller in relation to:

1. Any requests from the Data Subjects in respect of access to, or rectification, erasure,

restriction, portability, blocking or deletion of their Personal Data that Printful processes

on behalf of the Merchant. In the event that a Data Subject sends such a request directly

to Printful, Printful will promptly forward such request to the Merchant;

2. The investigation of any breach of security leading to the accidental or unlawful

destruction, loss, alteration, unauthorised disclosure of, or access to, the Personal Data

belonging to the Merchant or any accidental or unauthorised access or any other event

affecting the integrity, availability or confidentiality of the Personal Data belonging to the

Merchant (a “Data Breach”) and the notification to the relevant Supervisory Authority and

Data Subjects regarding such Data Breach (where required); further, Printful shall

promptly notify the Merchant of any Data Breach; and

3. Where appropriate, the preparation of data protection impact assessments and, where

necessary, carrying out consultations with any Supervisory Authority.

7. Sub-processors and Data Transfer
8. For Printful to be able to meet its obligations prescribed by the Agreement and to administer

and provide the Service, the Merchant hereby grants Printful general written authorization to

engage sub-processors. Merchant can obtain the list of current sub-processors engaged by

Printful by entering the registered account email address in the section below. The list will

include the identities of sub-processors, provided services and country of location.

2. Merchant will be notified about the appointment or any intended changes concerning the

addition or replacement of Printful’s sub-processors in this section of Printful’s website. This

notification will appear 10 (ten) days prior to the engagement of the sub-processor. During this

period the Merchant can object to the appointment or replacement of the sub-processor by

sending a written notice to privacy@printful.com, providing reasonable grounds for objection

(for example, in case of possible infringement of Data Protection Laws). If Merchant does not

object, Printful may proceed with the appointment or replacement.

3. Printful hereby confirms that its sub-processors are contractually or otherwise in a binding form

required to comply with data processing obligations which are no less onerous on the relevant

sub-processor than the obligations on Printful as prescribed by these Terms.

4. Where Printful processes, accesses, and/or stores Personal Data in any Third Country, Printful

shall:

1. comply with the data importer’s obligations set out in the Model Clauses, which are

hereby incorporated into and form part of these Terms with the processing details set out

in Clause 3 (Details of Processing) and the technical and organisational security measures

set out in Schedule 1 (Technical and Organisational Security Measures) applying for the

purposes of Appendix 1 and Appendix 2, respectively, of the Model Clauses, and the

Merchant will comply with the Data Exporter’s obligations in the Model Clauses; and

Printful

2. The Merchant acknowledges and agrees that Printful may appoint an affiliate or thirdparty

subcontractor to Process the Merchant’s Personal Data in a Third Country, provided

that it ensures that such Processing takes place in accordance with the requirements of

the Data Protection Laws. The Parties agree that Personal Data may be transferred to an

affiliate or third-party subcontractor that is certified to process such data under the

Privacy Shield Program. Alternatively, the Merchant grants Printful a mandate to execute

the Model Clauses with the processing details set out in Clause 3 (Details of Processing)

and the technical and organisational security measures set out in Schedule 1 (Technical

and Organisational Security Measures) applying for the purposes of Appendix 1 and

Appendix 2, respectively, of the Model Clauses, with any relevant subcontractor or

affiliates it appoints on behalf of the Merchant.

8. Audit
9. Upon the Merchant’s written request, Printful shall provide sufficient information to demonstrate

compliance with the obligations laid down in these Terms and Data Protection Laws. This

information shall be provided to the extent that such information is within Printful’s control and

Printful is not precluded from disclosing it by applicable law, a duty of confidentiality, or any

other obligation owed to a third party.

2. If information provided upon the Merchant’s request in the Merchant’s reasonable judgement is

not sufficient to confirm Printful’s compliance with these Terms, then Printful agrees to allow for

and contribute to data processing audits.

3. Such audits are allowed to be carried out by an independent third party with good market

reputation, provided that it has sufficient experience and competence to carry out data

processing audits, and election of such auditor must be mutually agreed by both the Merchant

and Printful.

4. The timing and other practicalities related to any such audit or inspection are determined by

Printful, and any such information and assistance are provided only at the expense of the

Merchant. Printful reserves the right to charge the Merchant for any additional work or other

costs incurred in connection with such audits. The Merchant may request such audit no more

than once every 2 years.

5. The auditor will have to sign a confidentiality agreement, which includes an obligation not to

disclose business information in its audit report, and the final report will also have to be

provided to Printful.

9. Return and deletion of Data

At the choice of the Merchant, Printful will delete or return all Personal Data to the Merchant after the end

of the Agreement, and shall delete existing copies, unless an applicable law requires Printful to store such

Personal Data.

Printful

10. Governing Law

These Terms are governed by the laws of the Republic of Latvia and are subject to the dispute resolution

procedure as prescribed by the Agreement.

11. Modifications

Printful reserves the right, at its discretion, to modify these Terms. In case of material changes, Printful will

notify the Merchant in writing, giving the Merchant the right to terminate the Agreement.

Schedule 1

Technical and Organisational Security Measures

Printful shall take, among others, the following technical and organizational measures to ensure physical

security of Personal Data and control system entry, access, transfer, input, availability and separation of

Personal Data:

1. to establish the identity of the authorized persons and prevent unauthorized access to Printful’s

premises and facilities in which the Personal Data are processed:

 All entrances are secured or locked and can only be accessed with the appropriate key / chip card /

internal digital keys;

 Premises are protected by an alarm system;

 All visitors are required to identify themselves and are signed-in by authorized staff;

 Video monitoring of premises;

 Visitors are accompanied by Printful’s personnel at all times;

 Trained security guards are stationed in and around the building 24/7,

2. to prevent unauthorized access to the data processing systems:

 Use of state-of-the-art anti-virus software that includes e-mail filtering and malware detection;

 Use of firewalls;

 During idle times, user and administrator PCs are locked;

 Users are required to setup complex passwords and 2FA in all systems as possible;

 Concept of least privilege, allowing only the necessary access for users to accomplish their job function.

Access above these least privileges requires appropriate authorization;

 Starter, mover & leaver housekeeping processes in place which covers access rights depends on job

duties;

 RSA/ed25519 2-factor authentication in place for most critical remote connections;

 Vulnerability scanning and remediation in place;

 Data centre and website penetration testing programme in place.

Printful

3. to prevent unauthorized activities in the data processing systems outside the scope of any granted

authorizations:

 User and administrator access to the network is based on a groupe-based/ role-based access rights

model. There is an authorization concept in place that grants access rights to data only on a “need to

know” basis;

 Administration of user rights through system administrators or system owners;

 IT governance & controls audits undertaken regularly by external 3rd party;

 Internal control audits undertaken regularly.

4. to ensure that personal data cannot be read, copied, altered or removed by unauthorized persons under

their electronic transmission or during their transport or recording on data carriers and to guarantee that it

is possible to examine and establish where personal data are or have had to be transmitted by data

transmission equipment:

Privacy Policy

Welcome to Printful’s Privacy Policy!

Printful, Inc. (“we”, “our”, “us”, or “Printful”) respects the privacy of its users and is fully committed to

protect their personal data and use it in accordance with data privacy laws. This Privacy Policy describes

how we collect, use, and process any personal data that we collect from you—or you provide to us—in

connection with your use of our website (www.printful.com) or our mobile apps and our print-on-demand

services (collectively, “Services”). By accessing or using our Services, you signify your understanding of

the terms set out in this Privacy Policy.

We do not knowingly collect, maintain, disclose, or sell the personal information about users under the age

of sixteen (16). If you are under the age of 16, please do not use our Services. If you are under the age of

16 and have used our Services, please contact us at the email address below so that we may delete your

personal information.

If you use our Services only for your personal use, you are to be considered as the “User” and for the

purpose of the General Data Protection Regulation (“GDPR”), we are the data controller.

If you use our Services to execute orders and deliver products to third parties, you are to be considered as

the “Merchant” and with regard to your contact details and the other data listed in Section 1 below, we are

the data controller. Where we act on a Merchant’s behalf to fulfil an order with regard to the Merchant’s

customer, we are a data processor: please see our Data Processing Terms.

Note that while our Services may contain links to other websites or services, we are not responsible for

each respective website’s or service’s privacy practices and encourage you to be aware of this when you

leave our Services and carefully read the privacy statements of each and every website and service you

visit. This Privacy Policy does not apply to third-party websites and services. If you wish to contact Printful

regarding your personal data or this Privacy Policy, please contact us at privacy@printful.com.

1. Information we collect

1.1. Information collected about Users and Merchants and how we use it

Where you are a User and it is necessary to fulfil our contract with you for the purposes of providing,

maintaining, or improving our products and Services (including, to the extent permitted by applicable law,

any matters in our legitimate interests with respect to the Services), we will confirm your identity, contact

you, provide customer support (including via chat, in the comment section of our blog, or other platforms,

where you may reach us), operate your account with us and invoice you. For the aforementioned purposes,

we collect information that may contain the following personal data:

Name;

Company name;

Shipping information;

Printful

Email address and phone number;

Payment and billing information (payment method details, first and last digits of your payment

card);

Order handling information

If you have given your consent when registering your account, when subscribing to our newsletter or blog,

or shared your email address or other personal data with us to receive any other information (for example,

our list of sub-processors), we will process your email address to send you the informative and/or

promotional materials, to which you have subscribed to, for example, newsletters, advertisements of our

Services and other information about our Services that you have requested. At any point in time you can

unsubscribe from receiving the above-mentioned information in our email footers and through your

notification settings on Printful. For Merchants, we will not use the contact details of your customers to

directly market or advertise our Services to them.

When you call our customer support phone line, we may monitor or record the call to ensure the quality of

our customer support. If you have a Printful account, we will retain the recording for as long as you have

an account. If you do not have an account, we will delete the recording within 12 months or retain it, if it

will be needed to resolve disputes between you and us.

By using cookies and similar technology on our website, we may collect data such as information on your

device, your preferences and information filled while visiting our website, your interaction with the

website, and other information used for analytical, marketing, and targeting activities (including unique

visits, returning visits, length of the session, actions carried out in the webpage). Learn more about how

we use cookies on our website and how to opt out of interest-based advertising by clicking here.

As it is in our legitimate interests to ensure our network security, give you access to and to improve our

Services, we also collect the following technical usage data:

How and when you access your account;

Information about the device and browser you use;

IP address and device data.

1.2. Information collected about our Merchant’s Customers

Where we act on a Merchant’s behalf to fulfil an order with regard to the Merchant’s customer (i.e. an end

user of our Services), we are a data processor and we collect information relating to the Merchant’s

customer, such as personal data relating to the end user of our Services, any personal data in the printing

content (where applicable), personal data revealed during the use of any Printful services, including name,

email address, phone number, shipping address, and other information about the Merchant’s customers.

If you are a customer of the Merchant (an end user of our Services), the Merchant is the data controller

with regard to your personal data and should provide you the information on how your personal data is

collected and processed when using our Services. Please read the Merchant’s privacy policy for further

information. The Merchant is your contact for any questions you have about how it handles your personal data.

2. Sharing personal data with third parties

In order for Printful to provide you with our Services, we work with third parties (“Third Party Service

Providers”) with whom we share personal data to support these Services.

Information you have provided to us during the use of our Services, including technical usage data, is

shared with third parties who provide hosting and server co-location services as well as data and cyber

security services.

Your email address and other contact details you have provided to us and your messages to our customer

service is shared with communication, email distribution, and content delivery services as well as customer

support system providers.

Information regarding your purchases and payments is shared with billing and payment processing

services, fraud detection and prevention services, accounting and financial advisors.

Information regarding your use of our website and other information received from cookies and similar

technology is shared with web analytics, session recording, and online marketing services.

Information on your account, purchases and preferences can be shared with marketing services.

Insofar as reasonably necessary to defend our legal rights, we may share your personal data with our legal

advisors.

We will only share personal data to Third Party Service Providers that have undertaken to comply with

obligations set out in applicable data protection laws.

In certain circumstances, we are required to share information with third parties to comply with legal

requirements or requests, as well as to protect our, or a third party’s, lawful interests. We will also disclose

your information to third parties in and outside your country only to the extent allowed by applicable law,

including:

to a prospective purchaser or purchaser that acquires all or substantially all of us or our

business;

to a third party in the event that we sell or buy any business or undergo a merger, in which case

we may disclose your information to the prospective buyer of such business; and

to a third party if we sell, buy, merge or partner with other companies or businesses, undergo a

reorganisation, bankruptcy, or liquidation; or otherwise undertake a business transaction or sell

some or all of our assets. In such transactions, your information may be among the transferred

assets.

3. Retention periods

We may retain your personal data for as long as you have a Printful account or any of the abovementioned

legal basis for personal data processing still exists. For example, if you unsubscribe from our marketing,

newsletter, or blog emails, we will stop the processing of the personal data for such purposes. If you have

used our Services without creating a Printful account, we will keep your personal data as long as necessary

to comply with our legal obligation to retain information relating to provision of services, for example, for

tax purposes.

After terminating your relationship with us by deleting your Printful account or otherwise ceasing to use

our Services, we may continue to store copies of your (and in regard to Merchants, your customers’

personal data) as necessary to comply with our legal obligations, to resolve disputes between you and us

(or you and your customers), to prevent fraud and abuse, to enforce our agreements, and/or to protect our

legitimate interests (to the extent that we are permitted by the applicable law to continue to store copies

to protect our legitimate interests).

4. Data subject’s rights

If you are a User or Merchant located in the European Economic Area or the United Kingdom, in

accordance with European Union and United Kingdom data protection regulations, you have certain rights

with respect to your personal data. You have the right to request access to your personal data; in certain

circumstances to correct, amend, delete, or restrict the use of your personal data by logging into your

Printful account or by reaching us using the contact information provided below. In addition, you can

object to the processing of your personal data in some circumstances (in particular, where we are not

required to process your data to meet a contractual or other legal requirement). These rights may be

limited, for example, if fulfilling your request would reveal personal data about another person, or if you

ask us to delete information which we are required by law to retain, are permitted by law to retain, or have

compelling legitimate interests in retaining (to the extent that applicable law permits us to retain such

information based on our legitimate interests).

Furthermore, if you believe that we have unlawfully processed your personal data, you have the right to

submit a complaint to the contact information provided below, or to your respective data protection

supervisory authority. If you are a customer of a Merchant (an end user of our Services), please direct your

concern to the relevant Merchant in the first instance.

5. Information security

We seek to use reasonable organizational, technical, and administrative measures to protect the

confidentiality, integrity, and availability of personal data. We encourage you to take care of the personal

data in your possession that you process online and set strong passwords for your Printful account, limit

access to your computer and browser by signing out after you have finished your session, and avoid

providing us with any sensitive information.

Printful

6. International transfers of data

All the information you provide may be transferred or accessed by our parent company in the United

States our affiliate companies and subsidiaries in other countries, such as Latvia and Spain, and our Third

Party Service Providers (as described above) for the provision of our Services as described in this Privacy

Policy. When we transfer your information globally, we take necessary measures to ensure adequate

protection of your information, including where required by applicable law entering into the European

Commission’s Model clauses for the transfer of personal data to third countries (i.e., the standard

contractual clauses), or transferring to a recipient certified to EU-US Privacy Shield of the US Department

of Commerce.

7. California privacy rights

If you are a resident of the State of California and you have provided your personal information to us, you

have certain rights under the California Consumer Privacy Act of 2018 (“CCPA”). You have the right to

request that we disclose what personal information we collect, use, disclose, and sell. Contact us to

exercise your right to know. You have the right to request deletion of your personal information we collect

and maintain. You can exercise this right by deleting your account in your account Settings. In case you

delete your account we will only retain information regarding your purchases and payments to comply with

our legal obligations. We will verify requests to exercise your California Privacy Rights requiring you to log

into your Printful account. You have the right not to be discriminated against by us for exercising any of

your rights under the CCPA.

We disclose your personal information to third parties for the commercial purpose of providing you

interest-based advertising. You have the right to opt out of the sale of your personal information by

declining our cookies or by deleting all cookies stored in your browser and setting up your browser to block

cookies being saved.

8. Privacy Shield Notice

Printful, Inc. is located in the United States, so your information may be processed in the United States. As

our affiliates are also located in the EU, we are also bound by GDPR.

Printful participates in and has certified with the EU-U.S. Privacy Shield Framework and the Swiss-U.S.

Privacy Shield Framework (hereinafter – Privacy Shield) regarding the collection, use, retention and other

processing activities of your personal data that is transferred from the EU, UK or Switzerland to the United

States.

You can find out more about the Privacy Shield principles and verify our registration information here by

searching for “Printful”.

In accordance with the Privacy Shield, Printful is responsible for (a) processing your Personal data

Printful

originating in EU, UK or Switzerland in accordance with the principles of Privacy Shield and (b) any onward

transfers to third party acting as an agent on our behalf. We ascertain that any such agent will process

your information only for a limited and specified purpose, in a manner consistent with the Privacy Shield

and provide at least the same level of privacy protection as required by the Privacy Shield. If such agents,

which we have engaged to process your personal data on our behalf, fail to do so, we remain liable in

accordance with the Privacy Shield, unless we prove that we are not responsible for the event giving rise

to the damage.

With respect to the Privacy Shield, we are subject to the regulatory enforcement powers of the U.S.

Federal Trade Commission. In certain situations, we may be required to disclose personal data in response

to lawful requests by public authorities, including to meet national security or law enforcement

requirements.

In compliance with the Privacy Shield, Printful commits to resolve complaints about our collection or use of

your personal information. EU, UK and/or Swiss individuals with inquiries or complaints regarding our

Privacy Shield policy should first contact Printful at privacy@printful.com.

Printful has further committed to refer unresolved Privacy Shield complaints to American Arbitration

Association, an alternative dispute resolution provider located in the United States. If you do not receive

timely acknowledgment of your complaint from us, or if we have not resolved your complaint, please

contact or visit American Arbitration Association for more information or to file a complaint. The services of

American Arbitration Association are provided at no cost to you.

Under certain conditions, more fully described on the Privacy Shield website, including when other dispute

resolution procedures have been exhausted, you may invoke binding arbitration.

9. Privacy Policy changes

Any changes we make to this Privacy Policy in the future will be posted on this page. Therefore, we

encourage you to check this page frequently from time to time.

10. Contact information

If you have any questions about your personal data or this Privacy Policy, or if you would like to file a

complaint about how we process your personal data, please contact us by email at privacy@printful.com,

or by using the contact details below:

Residents outside of the European Economic

Area:

Printful Inc.

Attn: Data Protection Officer

Residents of the European Economic Area:

AS “Printful Latvia”

Attn: Data Protection Officer

Address: Ojara Vaciesa iela, 6B,

Printful

Address: 11025 Westlake Dr

Charlotte, NC 28273

United States

Riga, LV-1004,

Latvia

The version of this Policy is effective March 6, 2020.

Cookie Policy

Printful’s website uses cookies. If you have agreed, in addition to mandatory and performance cookies that

ensure the functioning and aggregated statistics of the website, other cookies for analytical and marketing

purposes may be placed on your computer or other device from which you access our webpage. This

Cookie Policy describes what types of cookies we use on our website and for what purposes.

1. What are cookies?

Cookies are small text files created by the website, downloaded to and stored on any internet enabled

device—such as your computer, smartphone or tablet—when you visit our homepage. The browser you’re

on uses the cookies to forward information back to the website at each subsequent visit for the website to

recognize the user and to remember the user’s choices (for example, login information, language

preferences and other settings). This can make your next visit easier and the site more useful to you.

2. What types of cookies do we use and for what purposes do we use

them?

We use different types of cookies to run our website. The cookies indicated below may be stored in your

browser.

Mandatory and performance cookies. These cookies are necessary for the website to

function and will be placed on your device once you access the website. Most of these cookies

are set in response to actions made by you which amount to a request for services, such as

setting your privacy preferences, logging in or filling in forms. These cookies provide a

convenient and complete use of our website, and they help users efficiently use the website

and make it personalized. These cookies identify the user’s device insofar, so we would be able

to see how many times our website is visited, but do not collect any additional personally

identifiable information. You can set your browser to block or alert you about these cookies, but

some parts of the site will then not work. These cookies do not store any personally identifiable

information and are stored on the user’s device until the end of session or permanently.

Analytical cookies. These cookies collect information about how users interact with our

website, for example, to determine which sections are most frequently visited and which

services are most often used. The collected information is used for analytical purposes to

understand the interests of our users and how to make the webpage more user friendly. If you

do not allow these cookies we will not know when you have visited our site and will not be able

to monitor its performance. For analytical purposes, we may use third-party cookies. These

cookies are stored on the user’s device for as long as set by the third-party cookie provider

(ranging from 1 day to permanently).

Marketing and targeting cookies. These cookies collect information about how users

interact with our website, for example, to determine which sections are most frequently visited

Printful

Printful 2020 2

and which services are most often used. Before you agree to the use of all cookies, Printful will

only collect anonymous data regarding the access of Printful’s website. The collected

information is used for analytical purposes to understand the interests of our users and how to

make the webpage more user friendly. For analytical purposes, we may use third-party cookies.

These cookies are stored permanently on the user’s device.

Third-party cookies. Our website uses third party services, for example, for analytics services

so we would know what is popular in our website and what is not, thus making the website

more usable. You can learn more about these cookies and their privacy policy by visiting the

websites of respective third parties. All information processed from third party cookies are

processed by the respective service providers. At any point in time you have the right to opt-out

from data processing by third party cookies. For more information, please see the next section

of this Cookie Policy.

For example, we may use Google Analytics cookies to help measure how users interact with our

website content. These cookies collect information about your interaction with the website, such

as unique visits, returning visits, length of the session, actions carried in the webpage, and

others.

We may also use Facebook pixels to process information about user’s actions on our website

such as visited webpage, user’s Facebook ID, browser data, and others. The information

processed from Facebook pixels are used to display you interest-based ads when you are using

Facebook as well as to measure cross-device conversions and learn about users’ interactions

with our webpage.

3. How to control cookies?

When visiting our website, you are presented with an informative statement that the website uses cookies

and asked for your consent to enable cookies that are not mandatory and performance cookies. You can

also delete all cookies stored in your browser and set up your browser to block cookies being saved. By

clicking on “help” button in your browser, you can find instructions on how to prevent the browser from

storing cookies, as well as what cookies are stored already and delete them, if you want to. Changes to the

settings must be made for each browser that you use.

If you want to revoke your consent to save cookies on your device, you can delete all cookies stored in

your browser and set up your browser to block cookies being saved. By clicking on the “help” button in

your browser, you can find instructions on how to prevent the browser from storing cookies, as well as

what cookies are stored already and delete them if you want to. You must change the settings for each

browser that you use. However, please note that without saving certain cookies, it is possible that you will

not be able to fully use all the features and services of Printful’s website. You can separately opt-out from

having your website activity available to Google Analytics by installing the Google Analytics opt-out

browser add-on, which prevents sharing information about your website visit with Google Analytics. Link to

Printful

Printful 2020 3

the add-on and for more information: https://support.google.com/analytics/answer/181881.

Furthermore, if you want to opt out from interest-based, behavioural advertising, you can opt out by using

one of the following tools based on the region you are in. Please note that this is a third party tool which

will save its own cookies on your devices and Printful does not control and is not responsible for their

Privacy Policy. For more information and opt-out options, please visit:

US – Digital Advertising Alliance

Canada – Digital Advertising Alliance

EU – European Interactive Digital Advertising Alliance

4. Cookie Policy changes

We reserve the right to make changes to this Cookie Policy. Amendments and / or additions to this Cookie

Policy will come into force when published on our website.

By continuing to use our website and / or our services after changes have been made to this Cookie Policy,

you are indicating your consent to the new wording of the Cookie Policy. It is your responsibility to

regularly check the content of this policy to learn about any changes.

5. Contact information

If you have any questions about your personal data or this Cookie Policy, or if you would like to file a

complaint about how we process your personal data, please contact us by email at privacy@printful.com,

or by using the contact details below:

Residents outside of the European Economic

Area:

Printful Inc.

Attn: Data Protection Officer

Address: 11025 Westlake Dr

Charlotte, NC 28273

United States

Residents of the European Economic Area:

AS “Printful Latvia”

Attn: Data Protection Officer

Address: Ojara Vaciesa iela, 6B,

Riga, LV-1004,

Latvia

The version of this Policy is effective March 6, 2020

California Supply Chains Act
According to the California Transparency in Supply Chains Act of 2010, manufacturers are required to
provide consumers with information regarding our efforts to eradicate slavery and human trafficking from
our supply chains.
We, Printful, Inc. (“Printful,” “we,” or “us”), are a part of the industry that can educate consumers on how
to purchase goods produced by companies that responsibly manage their supply chains. Therefore,
recognizing the importance of transparency in supply chains, we hereby make the following disclosures:
Printful is committed to ensuring ethical and fair-labor practices within our own operations and we seek
and expect from our suppliers to do the same. When we partner with suppliers, we ask them to sign an
Anti-slavery or Forced labour certificate acknowledging that the supplier will comply with all applicable
laws that prohibit slavery and human trafficking.
We at Printful have also drafted our own Supplier Code of Conduct that intends to set forth our standards
and expectations with respect to key areas of corporate responsibility, including a requirement for our
suppliers not to support forced labor and not to collaborate with organizations that use illegal employment
practices.
Although Printful does not currently provide specialized training on slavery and human trafficking to its
staff working with supply chains, we require that all employees engaged in the sourcing process comply
with our policies, including our Code of Conduct, which prohibits slavery and human trafficking within our
supply chain.
Currently, Printful does not conduct independent audits or unannounced inspections to our direct
suppliers. Nonetheless, we plan to establish such protocols to be implemented in the future.