Privacy Policy

Effective: May 17, 2026  ·  Last updated: May 17, 2026

1. Overview

Prinil (“we”, “us”, “our”) is a print-on-demand design agency operating from Bangladesh and serving clients globally — primarily in the United States, United Kingdom, Canada, and Australia. We operate the website prinil.com and provide design, branding, mockup, virtual assistant, and related agency services.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have over your data. It applies to visitors of prinil.com, prospective clients who submit enquiries, and clients who commission paid work.

2. Information We Collect

2.1 Information you provide directly

• Contact & enquiry data: name, email address, phone or WhatsApp number (if provided), company or store name, country, and the message you send via our forms, email, or chat.
• Project data: design briefs, reference images, niche descriptions, store URLs, brand guidelines, written feedback, and any other materials you share for a commissioned project.
• Billing data: name and email used for invoicing. We do not store full payment card numbers — payments are processed by third-party providers (Wise, PayPal, Stripe, or bank transfer) and the card or account details remain with them.
• Account data: if you create a client portal account, your username, hashed password, and project history.

2.2 Information collected automatically

• Log data: IP address, browser type and version, operating system, referring URL, pages visited, time of visit, and approximate location (country/region) inferred from IP.
• Cookies and similar technologies: see our Cookie Policy for the full list.
• Analytics: we use Google Analytics 4 to understand traffic, popular pages, and conversion behavior in aggregate.

2.3 Information from third parties

If you contact us through a third-party platform (Upwork, Fiverr, Etsy messaging, LinkedIn, Instagram DM, Facebook), we receive whatever profile information that platform shares — typically your display name, profile photo, and the contents of your messages. We do not buy contact lists or scrape data.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries — replying to quote requests, sending proposals, answering questions.
• To deliver commissioned work — producing your designs, mockups, brand assets, listings, or virtual-assistant tasks and delivering the final files.
• To send project-related communication — status updates, revision requests, delivery notifications, invoices.
• To process payments — invoicing, recording payment status, and (where applicable) issuing refunds.
• To improve our website and services — analyzing aggregate traffic patterns, fixing bugs, A/B testing layouts.
• To meet legal and tax obligations — record-keeping for invoices and contracts in line with applicable law.
• To prevent fraud and abuse — detecting suspicious activity, blocking spam, enforcing our Terms of Service.
• To send occasional marketing — only if you have opted in (e.g., subscribed to our newsletter). You can unsubscribe in one click at any time.

4. Legal Basis for Processing (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or another GDPR-equivalent jurisdiction, we rely on the following legal bases:

5. Sharing & Third-Party Service Providers

We share personal information only with the limited set of vendors that help us run the business. Each is contractually obligated to protect your data and use it only for the purpose we engage them for:

• Hosting & infrastructure: our web host and Cloudflare (CDN and basic security).
• Email & calendaring: Google Workspace.
• Analytics: Google Analytics 4 (IP anonymization enabled).
• Payment processing: Wise, PayPal, Stripe, or your local bank — depending on the payment method you choose.
• Project collaboration tools: Slack, Trello, Notion, Figma, Google Drive, Dropbox (used internally and only with team members assigned to your project).
• Customer support tools: WhatsApp Business, email service providers.

We may disclose information when legally required (court order, law enforcement request, tax authority audit) or to defend our legal rights. We do not sell or rent your personal information to advertisers, data brokers, or any other third party.

6. Data Storage & Security

Data is stored on servers operated by our hosting provider and trusted cloud services (Google Drive, Dropbox). We use industry-standard safeguards including HTTPS encryption in transit, access controls, two-factor authentication on critical accounts, and least-privilege role assignment for team members.

Despite these measures, no system is 100% secure. If we ever experience a data breach that affects your personal information, we will notify you and the relevant regulatory authorities within 72 hours as required by GDPR.

7. Data Retention

We keep personal information only as long as we need it for the purpose it was collected:

• Enquiry data (no project follows): deleted after 12 months of inactivity.
• Active project files & communication: retained for the duration of the project plus 24 months for support, revisions, and reference.
• Invoices & financial records: retained for a minimum of 7 years to meet tax and accounting law.
• Marketing list: retained until you unsubscribe.
• Analytics: Google Analytics retention is set to 14 months and then auto-deleted.

8. Your Rights (GDPR, UK GDPR & CCPA)

Depending on where you live, you have some or all of the following rights:

• Right to access — request a copy of the personal information we hold about you.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) — ask us to delete your data, subject to legal retention requirements.
• Right to restrict processing — limit how we use your data in certain situations.
• Right to data portability — receive your data in a structured, commonly used format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint — file a complaint with your local data protection authority.
• California (CCPA) rights — request to know what we collect, request deletion, and opt out of “sale” of personal information (we do not sell).

To exercise any of these rights, email [email protected] from the address we have on file. We respond within 30 days.

9. Cookies & Tracking

We use a small number of cookies and similar technologies for essential site function, analytics, and basic functionality. We do not use third-party advertising cookies or behavioral retargeting pixels. For the full list, see our Cookie Policy.

10. Children’s Privacy

Prinil’s services are intended for businesses and adults aged 18 and over. We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK). If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it promptly.

11. International Users & Data Transfers

Prinil is based in Bangladesh. By using our services, you understand that your personal information may be transferred to, stored, and processed in Bangladesh and any country where our service providers operate. Where required by law, we rely on Standard Contractual Clauses or equivalent safeguards to protect international data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or via a prominent notice on the site.