Privacy policy

Who is responsible

The shop that uses Bespiq decides what happens to its customers' data (the controller). Bespiq processes that data on the shop's instructions (the processor).

What is collected, and why

The customer's e-mail address or messaging handle, to send the proof link and order updates.

The customer's name, only where the shop's order carries one.

What the customer asked for (texts, sizes, dates, files) and their comments on a proof, because that is the order.

The time, the network address and a short browser summary of an approval, as evidence that it happened.

How it is stored

Customer data is encrypted with a key per customer. One shop can never read another shop's data.

Erasure

When a customer asks to be forgotten, their key is destroyed, which makes every encrypted value about them unreadable, including in backups. What stays is the fact that an approval was made, when and on which file, which identifies nobody.

What is never collected

Card numbers or payment details. This website sets no cookies and loads no analytics or advertising scripts.

Who else processes data

See the data processing page for the list of subprocessors.