Legal
Privacy Policy
This policy explains what personal data DesignFix collects, why, and what you can do about it.
Last updated August 22, 2026
Draft. This policy describes how DesignFix operates but has not yet been reviewed by a lawyer. It will be finalised before launch.
What we collect
Account and order data: your email address, your name if you give it, your order history, and the contents of the instructions you write.
Files: the artwork you upload and the files we deliver back to you.
Payment data: we receive a confirmation and a transaction reference from our payment provider. We never receive your card number.
Technical data: IP address, browser user-agent and timestamps, recorded against orders and downloads for security and fraud prevention.
Referral data: if you arrive from a link that carries campaign tags, or from another website, we record those tags, the page you landed on, and the referring website's name against your order. We do not record the rest of the address you arrived from.
Why we collect it
To carry out the work you ordered and deliver it to you.
To send you transactional messages about your order — confirmation, status changes, delivery and receipts.
To prevent abuse and fraud, and to investigate it when it happens.
To meet our accounting and tax obligations.
Marketing email is sent only if you opt in, and you can withdraw that at any time from your account.
To understand which of our pages and referral sources bring us customers, so we know where to spend our effort.
How your files are stored
Uploaded artwork and delivered files are held in private object storage. They are not published, indexed or given public URLs.
Access is granted per file, per request, after we check that the requester is entitled to it. Download links are time-limited and expire.
We log who downloaded which file and when, so unauthorised access would be detectable.
How long we keep it
Artwork you upload to an order is deleted automatically 30 days after upload. This is enforced by a scheduled job, not by anyone remembering to do it.
Uploads from checkouts that were never completed are deleted within 48 hours.
Files you send us in a message are kept with that conversation rather than on the 30-day schedule, so the thread stays readable alongside what was attached to it. Ask us and we'll delete them.
Delivered files are kept so you can re-download them from your account. Ask us and we'll delete them sooner.
Order records — order number, service, amounts, dates and delivery history — are retained for as long as accounting and tax rules require, after the files themselves are gone.
Deleting your account removes your personal data except records we are legally required to retain.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form.
To exercise any of these, email [email protected]. We will respond within the period required by the law that applies to you.