Privacy Policy

Koltprinting LLC (“KoltPrinting”, “we”, “us”) operates koltprinting.com, a trade-printing store for labels, business cards, large-format signage, books and marketing print. We are the “data controller” of the personal information described in this policy.

• Account details — name, email address, password (stored only as a one-way bcrypt hash), company name and phone number.
• Order details — products, specifications, quantities, shipping address, billing name and order history.
• Artwork & files — the print-ready files, logos and images you upload for production or proofing.
• Communications — quote requests, support tickets, live-chat transcripts, email correspondence and proof approvals/rejections.
• Payment information — see section 4. We never see or store your full card number.
• Technical data — IP address, browser type, device type, pages viewed and referring URL, collected automatically for security and analytics.

• To produce, proof, ship and support your orders and quotes.
• To send transactional messages: order confirmations, payment receipts, proof-ready notices, shipping updates and ticket replies.
• To prevent fraud, abuse and unauthorized access, and to comply with tax, accounting and legal obligations.
• To improve our products, pricing tools and website experience.
• To send occasional marketing emails only if you opt in; every marketing email includes an unsubscribe link.

Our legal bases (where applicable) are performance of a contract, our legitimate interests in running a secure business, compliance with law, and your consent for optional marketing.

All card payments are processed by Stripe, Inc. through Stripe Checkout. When you pay, you are redirected to a Stripe-hosted page and your card details are entered directly with Stripe. KoltPrinting servers never receive or store your full card number, CVC or expiry date. We receive only a payment confirmation, the last four digits of the card, the card brand and the billing details needed for receipts and fraud prevention.

Stripe is a PCI-DSS Level 1 certified service provider. Stripe's own handling of your data is described in the Stripe Privacy Policy.

We do not sell your personal information. We share it only with service providers who need it to perform work for us, under contracts that restrict their use of it:

• Stripe — payment processing, refunds and fraud screening.
• Shipping carriers (UPS, FedEx, USPS and freight partners) — your name, address and phone number so your order can be delivered.
• Cloud hosting, file storage and email delivery providers — to run the website, store artwork securely and deliver transactional email.
• Production partners — where a specialty process is outsourced, we share only the artwork and specifications required to make the job, never your account credentials.
• Authorities — when required by law, subpoena or to protect our rights, customers or the public.

We use a strictly-necessary session cookie to keep you signed in and a local-storage token for guest live-chat sessions. We may use privacy-respecting analytics (such as Google Analytics or Search Console data) to understand aggregate traffic. You can block cookies in your browser; the store will still work but you will need to sign in again on each visit.

We keep order records, invoices and receipts for at least seven years to meet tax and accounting requirements. Artwork files are retained so you can reorder; you may ask us to delete them at any time after production. Support tickets and chats are retained for as long as needed to provide service and resolve disputes.

All traffic is encrypted with TLS. Passwords are hashed with bcrypt. Access to customer data is limited to staff who need it. No method of transmission is 100% secure, so we cannot guarantee absolute security, but we will notify you and any applicable regulator of a breach as required by law.

Depending on where you live (including under the CCPA/CPRA, GDPR and similar laws) you may have the right to access, correct, download or delete the personal information we hold about you, to object to or restrict certain processing, and to opt out of marketing. To exercise any right, email support@koltprinting.com from the address on your account. We will respond within 30 days and will never discriminate against you for exercising your rights.

Our services are for businesses and adults. We do not knowingly collect information from anyone under 16. If you believe a minor has provided us with personal information, contact us and we will delete it.

We may update this policy as our services evolve. The “Last updated” date at the top will change and, for material changes, we will notify account holders by email. Questions or requests: support@koltprinting.com or write to us at the address above.

See also our Terms & Conditions and Refund & Reprint Policy.