CARDMINT
Privacy
Last updated: 18 October 2026
1. Who we are
CardMint is responsible for the personal information described in this policy.
Privacy contact: contact@cardmint.co.uk
2. Information we collect
We collect information needed to operate your account and fulfil your orders. This may include:
• Your name, email address, business details and delivery address.
• Account credentials, verification information and correspondence.
• Uploaded photographs, artwork and the details printed on cards.
• Saved templates, card designs, orders and reorder information.
• Payment references, payment status, refunds and delivery information.
• Newsletter preferences and email delivery or engagement information.
• Technical and security information, such as IP addresses and access logs.
If someone orders a card for you, we may receive your information from that person or organisation.
Card payments are processed by Square. CardMint receives payment references and results rather than storing your full payment-card number or security code.
3. Why we use information
We use your information to:
• Create and manage accounts.
• Verify business accounts and authority to use branding.
• Review designs, print cards and fulfil orders.
• Provide saved templates, order history and reordering.
• Process payments, refunds and approved monthly accounts.
• Send account, review, order and delivery messages.
• Respond to enquiries and prevent misuse.
• Send newsletters where you have subscribed.
We use contractual necessity where information is needed to provide a service you request. We rely on legal obligations for required financial records and disclosures.
Our legitimate interests include securing the website, preventing fraud, reviewing potentially misleading designs and handling information about cardholders supplied by business customers. We consider the impact on individuals when relying on these interests.
We rely on consent for newsletter subscriptions and any optional tracking that requires consent. Withdrawing consent does not affect the lawfulness of earlier processing.
Without information required to verify an account, personalise a card, take payment or arrange delivery, we may be unable to provide that service.
4. Information about other people
Only upload information and photographs that you are entitled to provide. Business customers must tell cardholders how their information will be used and ensure they have a lawful basis for sharing it.
We use cardholder information to provide the requested card-printing service and related support. We do not add cardholders to newsletters simply because someone orders a card for them.
5. Who receives information
We share information where necessary with service providers, including:
• Square, for payments and refunds.
• Postmark, for transactional emails and subscribed newsletters.
• Royal Mail Click & Drop, for delivery details and postage administration.
• Our website hosting and technical support providers.
Providers receive information appropriate to their role. Payment and delivery providers may also use information under their own privacy notices.
We may disclose information where required by law or where necessary to establish, exercise or defend legal claims.
6. International processing
Some service providers may process information outside the UK.
Contact us if you would like further information about relevant safeguards.
7. How long information is kept
We retain account information, saved designs and card details where needed to operate your account and provide requested reordering facilities.
Retention is assessed according to whether an account remains active, whether the information is still needed for a saved design or order, and whether an outstanding payment, complaint or legal obligation requires it.
Financial records are retained for the applicable accounting and tax requirements. Support and security records are retained for as long as reasonably needed to resolve enquiries, protect the service and address disputes.
Deleting a design from your active designs may leave a retained copy for restoration. It does not automatically erase its underlying personal information. You can contact us to request erasure.
Backups may retain information for a limited period until they are replaced under our backup arrangements.
8. Emails and newsletters
We send essential messages about accounts, reviews, payments and orders as part of providing the service.
Newsletters are optional. You can unsubscribe using the link in a newsletter or by contacting us. Unsubscribing from newsletters does not stop essential order or account messages.
Where enabled, email tracking may record delivery, bounces, opens and link clicks. Any tracking that requires consent must remain disabled unless that consent has been obtained.
9. Cookies
We use cookies needed for functions such as signing in, maintaining your session and protecting forms.
Any optional analytics, advertising or similar cookies requiring consent will only be used after you agree. You can manage cookies through your browser, although blocking essential cookies may prevent parts of the website from working.
10. Your rights
Depending on the circumstances, you may request access to your personal information, correction, erasure, restriction of processing or a portable copy. You may also object to certain processing.
Where processing relies on consent, you may withdraw it at any time. Some information may need to be retained to meet legal obligations or resolve claims.
Contact contact@cardmint.co.uk to exercise your rights. We may need to verify your identity before responding.
You can also complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.
11. Updates
We may update this policy when our services or handling of information changes. The latest version will be published on this website.