Privacy Policy

If you are reading this page, it is because your data matters to you and you want to know where it goes and who collects it. At legitphonydl.com we publish the whole picture: what we take, why we take it, how long we keep it, who else sees it, and how to get it back or get it deleted.

This Privacy Policy applies to personal data obtained through the Website https://legitphonydl.com and through any order, email or message exchanged with us. It does not apply to information collected by third parties on other websites, even where those websites are linked from ours.

By using the Website, opening an account, subscribing to our messages or placing an order, you confirm that you have read and understood this Policy, and you give your informed, express, free and unambiguous consent to the processing described in it. This Policy forms part of, and should be read together with, our Legal Notice and Conditions of Use and our Terms and Conditions.

1.Who is responsible for your data

The Company guarantees that the organisational and technical security measures required by applicable data protection law have been applied to the files in which your data is held. This Policy is valid only for personal data obtained on the Website. It does not apply to data collected by third parties on other sites, even where those sites are linked from the Website.

With this Policy the Company states its commitment to maintain and guarantee business relationships securely, protecting personal data and guaranteeing the right to privacy of every user of the Website.

2.What we mean by personal data

Personal data is any information relating to an identified or identifiable natural person: a name, an address, an email, an IP address, an order history, a photograph you upload, a message you send us. It is any information about you that we receive when you visit the Website or buy from it.

In addition, when you visit the Website certain information is stored automatically for technical reasons, such as the IP address assigned by your internet access provider, the pages requested, the browser and operating system in use, and the time of access.

3.The data we collect

Depending on what you do on the Website, we may collect the following categories:

Identity and contact data: name, surname, email address, telephone number.

Account data: email address, password (stored hashed), order history, saved addresses.

Order and delivery data: billing address, delivery address, city, region, postal code, country, order contents, order value.

Payment data: the method used, the last four digits and expiry of a card, the transaction identifier and the result. Full card numbers and security codes are entered on the payment provider’s secure page and are not stored by us.

Customisation content: the artwork, photograph, text, logo or font you upload or specify for printing, together with the proof approvals you give.

Technical and browsing data: IP address, device type, browser, operating system, referring URL, pages viewed, time on page, session identifiers.

Communications: the content of emails, contact-form messages, support tickets, reviews and any other correspondence with us.

Marketing preferences: whether you have consented to receive commercial messages, and the record of when that consent was given or withdrawn.

We do not seek to collect special categories of data (health, religion, political opinions, sexual orientation, biometrics, trade-union membership). Please do not send us such data, and do not upload it as part of a customisation order.

4.Why we process your data, and on what legal basis

The purposes for which we process personal data, and the legal basis for each, are the following:

To create and administer your account, and to identify you when you return. Basis: performance of a contract.

To process, produce, invoice and deliver your order, and to handle returns and refunds. Basis: performance of a contract.

To answer enquiries, complaints and support requests. Basis: performance of a contract, or our legitimate interest in responding to people who contact us.

To send transactional messages about your order (confirmation, proof, dispatch, delivery, refund). Basis: performance of a contract.

To send commercial messages, offers and product news, where you have subscribed. Basis: your consent, which you may withdraw at any time.

To keep accounting, tax and commercial records. Basis: compliance with a legal obligation.

To prevent fraud, screen orders and defend against abusive chargebacks. Basis: our legitimate interest in protecting the business and its customers.

To measure traffic and improve the Website, its catalogue and its usability. Basis: your consent where cookies require it, otherwise our legitimate interest in operating an efficient store.

To establish, exercise or defend legal claims. Basis: our legitimate interest in protecting our rights.

In no case will your data be used for a purpose different from the one for which it was collected. We do not sell personal data, and we do not share it with third parties for their own marketing.

5.Minors

The store is intended for adults. You must be at least eighteen years old to place an order, and at least sixteen years old to browse the Website or subscribe to our messages. If you are under sixteen, you may not register, and you may not submit personal data to us.

We do not knowingly collect data from children. If you are a parent or guardian and believe that a minor has provided personal data to us, write to [email protected] with the subject line “Minor’s data” and we will delete the record and close any associated account within seven days.

6.Consent, and how to withdraw it

Where processing rests on your consent — commercial email, non-essential cookies, publication of a review with your name — you may withdraw that consent at any time, without retroactive effect. Withdrawal does not affect the lawfulness of processing carried out before it.

You can withdraw consent by writing to [email protected], by using the unsubscribe link contained in every commercial email, or by changing the relevant setting in your account. Our systems may need up to 48 hours to register the change, during which time you may continue to receive messages already scheduled.

7.How long we keep your data

We keep personal data only as long as necessary for the purpose for which it was collected, and afterwards for the period required by law or needed to defend legal claims:

Order, invoice and payment records: seven years from the end of the financial year in which the transaction took place, in line with tax and accounting obligations.

Account data: for as long as the account remains open, and for thirty days after you ask us to close it, so that it can be restored if the request was made in error.

Customisation files: for ninety days after delivery, in case a reprint is needed, and afterwards deleted.

Support conversations: three years from the last message.

Marketing contact data: until you unsubscribe, and for twelve months afterwards in a suppression list, so that we do not contact you again by mistake.

Analytics and browsing data: up to twenty-six months, in aggregate or pseudonymised form.

When a retention period ends, the data is deleted or irreversibly anonymised. Where a legal or contractual obligation prevents deletion, the data is blocked and used only for that obligation.

8.Accuracy and truthfulness of the data

You are solely responsible for the accuracy of the data you send us, and you release us from any liability in that respect. As a user you must guarantee the accuracy and authenticity of the personal data you provide, supplying complete and correct information in the various collection forms.

You can review and correct your data at any time from your account, or by writing to [email protected]. Please note that an incorrect delivery address is the customer’s responsibility, and that a parcel sent to an address you supplied incorrectly may not be recoverable or refundable.

9.Cookies and similar technologies

The Website uses its own and third-party cookies to ensure a better browsing experience, to keep your basket and session working, to remember your preferences, to measure traffic and to show advertising according to your interests. The cookies used are associated with an anonymous user and their device, do not provide references that allow the user’s name and surname to be deduced, and cannot read data from your hard drive or introduce viruses into its files.

You can freely decide whether to accept cookies. You may configure your browser to accept or reject all cookies by default, or to warn you on screen each time a cookie is received so that you can decide whether to install it. If you reject all cookies you may still browse the Website, with the sole inconvenience of not being able to use the features that require them — notably adding items to the basket and completing a purchase. You may delete cookies already installed on your device at any time from your browser settings.

Third-party services used on the Website — including analytics, advertising and payment providers — may set their own cookies, under their own policies. Where a cookie appears on the Website that is not described here, tell us at [email protected] and we will add it to this section.

10.Who we share data with

We share personal data only where necessary, and only with parties bound to keep it confidential and to use it solely on our instructions. The categories of recipient are:

Hosting and e-commerce platform providers, which store the Website and its database.

Payment processors and acquiring banks, which authorise and settle card payments and screen for fraud.

Carriers and postal operators, which receive the name, delivery address, telephone number and order reference needed to deliver the parcel.

Email and messaging providers, which deliver transactional and commercial messages.

Analytics and advertising providers, which receive pseudonymised browsing data where you have consented.

Accountants, auditors, lawyers and insurers, where their services are required.

Public authorities, courts and law-enforcement bodies, where disclosure is required by law or necessary to establish, exercise or defend a legal claim.

We do not sell personal data, and we do not share it with third parties for their own marketing purposes. Where a provider processes data on our behalf, it acts as a processor under a written agreement that imposes confidentiality, security and deletion obligations.

11.International transfers

Some of our providers are located outside the country in which you live, including in the United States. Where personal data is transferred internationally, we rely on an appropriate safeguard — standard contractual clauses approved by the relevant authority, an adequacy decision, or your explicit consent where the transfer is occasional and necessary for the performance of your order — and we limit the transferred data to what the service requires.

12.Security measures

The Company has implemented the technical and organisational security measures necessary to ensure the security of your personal data and to prevent its alteration, loss, and unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed, whether from human action or from the physical or natural environment.

These measures include encryption of the connection to the Website (HTTPS), hashed storage of account passwords, restricted and logged access to the customer database, segregation of payment data to the payment provider, and periodic review of the processes that touch personal data. The Company maintains continuous supervision, control and evaluation of those processes to ensure respect for the privacy of the data.

No system is perfectly secure. If a security incident affecting your rights occurs, we will notify you and the competent authority without undue delay, in the terms required by applicable law.

13.Your rights

You may exercise the following rights free of charge, at any time:

Access — to know whether we process your data and to obtain a copy of it.

Rectification — to have inaccurate or incomplete data corrected.

Erasure — to have your data deleted where there is no legal obligation requiring us to keep it.

Restriction — to have processing limited while a question about your data is resolved.

Portability — to receive the data you provided in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.

Objection — to object to processing based on our legitimate interests, and in particular to object at any time to the use of your data for advertising, market research or satisfaction surveys.

Withdrawal of consent — as described in section 6.

Complaint — to lodge a complaint with the data protection authority of your country or state.

If you live in a state whose law grants additional rights — for example the right to know the categories of data collected, the right to correct, the right to delete, the right to opt out of the sale or sharing of personal data, the right to limit the use of sensitive data, or the right not to be discriminated against for exercising a privacy right — those rights are available to you on the same terms. We do not sell personal data and we do not share it for cross-context behavioural advertising where you have not consented.

The fastest and simplest method is to access your account directly and modify or delete your data. Any information we must keep by virtue of a legal or contractual obligation will be blocked and used only for that purpose instead of being deleted.

The interested party may also exercise these rights by written communication addressed to SPECIALX GIFT PRINTING INC with the reference “Data Protection”, specifying their data, proving their identity and stating the reasons for the request, or by email to [email protected] with the subject line “Data Protection”. We answer within thirty days, and we will tell you within that period if an extension is required.

14.Commercial messages and how to stop them

You may object to the use of your information for advertising purposes, market research or satisfaction surveys at any time, and you may revoke your consent without retroactive effect.

To do so, send an email to [email protected]. If you have received advertising by email, you can also object from that same email by clicking the unsubscribe link it contains and following the instructions given. Another, simpler route is to sign in to your account and change the corresponding options.

Our systems may need a period that will in no case exceed 48 hours for your objection or revocation to take effect, during which time you may continue to receive messages already in the delivery queue.

15.Links to external sites

As a service to visitors, the Website may include hyperlinks to other sites that are not operated or controlled by us. We therefore do not guarantee, and are not responsible for, the legality, reliability, usefulness, truthfulness or timeliness of the content of those sites, or of their privacy practices.

The sole purpose of those links is to give the user access to them and to let them learn about our work. We do not offer or market, by ourselves or through third parties, the information, content and services available on the linked sites, and we do not approve, supervise or control in any way their content and services or any material of any nature existing on them. We are not responsible in any case for the results that may derive for the user from accessing those links.

Before providing personal information to any site that is not ours, please note that its privacy practices may differ from ours.

16.Changes to this Privacy Policy

The Company reserves the right to modify this Policy according to its own criteria, where a legislative, judicial or regulatory change, or a change in industry practice, makes it necessary. Any modification will be published on this page, with reasonable notice before it takes effect, and the date of the last update will always be shown. Continued use of the Website after the changes take effect implies acceptance of them.

Where a change materially affects how we use data you have already provided, we will notify you by email before the change applies, and where the law requires it we will ask for your consent again.

17.Contact

For any question about this Policy, to exercise a right, or to report a concern about how your data has been handled, write to [email protected] with the subject line “Data Protection”, or by post to SPECIALX GIFT PRINTING INC at the registered office published in section 1. We answer every request, and we keep a record of the requests received and of the response given.

Last updated: 30 October 2026.