Privacy Policy

1.Who we are

Secure Print Studio is the data controller for the personal data processed through this website.

If you have any questions about how we handle your personal data, please use the contact form on our website. We will respond within 30 days.

2.What data we collect

We currently collect personal data through one channel: the waiting list sign-up form on secureprintstudio.com. When you fill in this form, we collect:

• First and last name — to address you personally in our communications
• Business email address — to send you our launch notification and confirmation
• Company or organisation name — optional, to understand our audience
• Areas of interest — optional, the checkboxes you select on the form
• Sign-up date and source — automatically recorded to manage our list

We do not collect special category data (such as health data, political opinions or financial information). We do not collect data from anyone under the age of 16.

When our full website launches, this policy will be updated to reflect any additional data processing activities such as order processing, account management and blockchain registration.

3.Why we collect it — legal basis

Under the EU General Data Protection Regulation (GDPR), we are required to have a lawful basis for processing your personal data. We rely on the following bases:

• Consent (Art. 6(1)(a) GDPR) — You give us explicit consent by ticking the consent checkbox on our sign-up form. You can withdraw this consent at any time via the contact form on our website.
• Legitimate interests (Art. 6(1)(f) GDPR) — We have a legitimate interest in sending an internal notification when someone signs up to our list. This does not override your rights.

4.How we use your data

We use the data you provide solely for the following purposes:

• Sending you a confirmation email immediately after sign-up
• Notifying you when Secure Print Studio officially launches
• Following up personally when you express a specific area of interest
• Building a contact list to inform interested parties about our products and services

We do not use your data for automated decision-making or profiling. We do not use it for any purpose other than those listed above without first asking for your consent.

5.Who we share data with

We use the following trusted third-party service to operate our website. This service may process your personal data on our behalf as a data processor:

• Brevo (Sendinblue SAS) — email delivery and contact list management. Based in France. Brevo is GDPR-compliant and processes data under a Data Processing Agreement. Brevo Privacy Policy

We do not sell, rent or trade your personal data to any third party. We do not share your data with advertisers.

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

6.How long we keep your data

We retain your contact details for as long as you remain subscribed to our mailing list, or until you ask us to delete your data.

• If you unsubscribe from our mailing list, we delete your data within 30 days.
• If you send us a deletion request, we delete your data within 30 days of receiving it.
• Internal email notifications are retained in our email inbox for up to 12 months and then deleted.

When our full website launches, retention periods for order data, account data and blockchain records will be detailed in an updated version of this policy.

7.Cookies

Our current coming soon page does not place any tracking or analytics cookies. We use only strictly necessary functionality to display the page.

When our full website launches, we may use analytics cookies (such as Plausible Analytics, which is privacy-friendly and GDPR-compliant without consent) and functional cookies. We will update this policy and display a cookie banner at that point.

8.Your rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your data ("right to be forgotten")
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can ask us to provide your data in a structured, machine-readable format
• Right to object — you can object to our processing of your data where we rely on legitimate interests
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please use the contact form on our website and mention "Data Request" in your message. We will respond within 30 days. We may ask you to verify your identity before acting on your request.

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority. In the Netherlands, the relevant authority is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

9.Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse:

• All data is transmitted over encrypted HTTPS connections
• Our email provider (Brevo) uses industry-standard security practices
• Access to our systems is protected by strong passwords and two-factor authentication
• We do not store payment card data — all payments will be processed by Stripe, which is PCI DSS compliant

No system is completely secure. If you believe your data has been compromised, please contact us immediately via the contact form on our website.

10.Changes to this policy

We may update this Privacy Policy from time to time, particularly when our full website and transactional features launch. When we make material changes, we will update the "Last updated" date at the top of this page.

If you are on our mailing list, we will notify you of any significant changes by email. We encourage you to review this page periodically.

11.Contact & complaints

For any questions, requests or complaints regarding this Privacy Policy or our data processing practices, please contact us:

If you are based in the Netherlands and wish to file a complaint with the supervisory authority:
Autoriteit Persoonsgegevens
autoriteitpersoonsgegevens.nl