Privacy policy

wallnine publishes and licenses printable wall art, delivered as digital downloads worldwide. We decide what is collected here and why, which makes us the data controller. For anything in this policy, write to hello@wallnine.co.

• Your email address — the one thing a download genuinely needs, because it is where the links go and how a grant knows it is yours.
• Account details — your name, email address and a securely hashed password, if you choose to create an account. Guest checkout works without any of it.
• Order information — what you bought, what you paid, the licence tier, and the billing country. We keep the country because digital goods are taxed where the buyer is and because prices are shown per market; we do not ask for a street address.
• Your consent to immediate delivery — the exact wording you were shown at checkout and the moment you ticked it. Consumer law requires us to hold and confirm this, and it is the record that shows what you agreed to; see the terms.
• Download records — for each file actually served: which file, when, the IP address and the browser it went to. This is how we answer “did it definitely download?”, and how we notice one link being used from thirty countries in an hour. It is the one place on this site where an IP address is stored.
• Payment information — handled entirely by our payment provider. We are told that a payment succeeded, along with a reference and the card's last digits. We never receive or store your full card number.
• Support and reviews — the content of any message you send us, and any review or photo you submit.
• Technical data — a cookie to keep you signed in, a cookie remembering your cookie choice, a cookie remembering which currency you picked, and the basic request information needed to run and protect the site, including rate limiting.

We run our own visitor analytics on our own servers. No third-party analytics service receives your browsing data.

• Aggregate analytics (always on, cookieless) — we count page views, visits, referring sites and basic events such as adding to basket or completing checkout, so we can see which prints and pages work. It uses a random identifier held only in your browser tab's session storage: not a cookie, discarded when the tab session ends, and unable to recognise you on a later visit. We store the pages viewed without any query parameters, the referring site, campaign tags from the arriving link, and whether the screen was mobile- or desktop-sized. No IP address and nothing that identifies you is stored in the analytics record — the IP is used transiently for rate limiting and then dropped. (Downloads are the exception, and they are described above.)
• Session recordings (only with your consent) — if you accept cookies on our banner, we may record how a page is used: mouse movement, scrolling, taps and page structure, to find usability problems. Everything you type is masked before it leaves your browser, and checkout and your account pages are never recorded at all. We honour the “Do Not Track” and Global Privacy Control browser signals: when either is set we do not record, whatever the banner says. Declining never affects your ability to buy.
• Retention — aggregate analytics data is deleted after 90 days; session recordings after 30 days. Both are swept automatically rather than when somebody remembers.

We use your data to:

• take payment and deliver the files you bought;
• create and maintain your download links, and prove they are yours when you come back for them;
• send order confirmations, download emails and other service messages;
• hold the record of your consent to immediate delivery, which we are legally required to keep and to confirm to you;
• detect and stop licence abuse — shared links, scripted downloading, fraudulent orders;
• run your account, if you have one;
• answer support requests and issue refunds;
• ask for a review after a purchase, which you can ignore or opt out of; and
• keep the site secure and working.

Our legal bases are: performance of our contract with you (to deliver files and run your account); our legitimate interests (to operate, secure and improve the shop, and to protect artwork from being copied wholesale); your consent, where we ask for it, such as session recordings and marketing email; and compliance with our legal obligations, including tax records and the consumer-law consent record.

Only the providers we need to run the shop, each under an agreement that requires them to protect it:

• Polar, our payment provider, which acts as merchant of record: it takes the payment, collects the billing details and tax location evidence it needs, issues your invoice and handles VAT and sales tax;
• our hosting and file-storage providers, which run the site and hold the artwork files and any image you attach to a review or a support message;
• our email provider, which sends your order, download and service emails.

We do not sell your personal data, and we do not share it for anyone else's advertising. There is no print-on-demand partner in this list because there is no parcel: nobody outside that list is given your details in order to make or send you anything.

Some of those providers operate outside the UK and the EEA. Where data is transferred, we rely on the appropriate safeguards for that transfer, such as approved standard contractual clauses.

• Order records — for as long as we need them to support the purchase and to meet our legal and accounting obligations, typically six years.
• Consent records — for the same period as the order they belong to. They are the evidence of what you agreed to, so they outlive the download itself.
• Download records — for as long as the licence they belong to is live. Your entitlement to a file you bought does not expire, so that is an open-ended period, and we would rather say so than publish a tidier number we do not keep to. What does run out is anonymous use of an emailed link, 24 hours after we issue it — the link stops opening for whoever holds it, and the purchase behind it carries on.
• Account details — while your account is open. Ask us to close it and we remove what we are not required to keep.
• Analytics and recordings — 90 and 30 days respectively, as above.

You have the right to:

• access the personal data we hold about you;
• ask us to correct anything inaccurate;
• ask us to delete it;
• object to or restrict certain processing;
• receive a copy in a portable format; and
• withdraw consent wherever we rely on it.

Deleting your account does not delete the order record behind it: we are required to keep proof of what was sold, to whom and on what terms. It does mean the download links stop working, so ask us to close the account only when you are sure you have the files.

To exercise any of these, email hello@wallnine.co. You can also complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.

Connections are encrypted, passwords are hashed, and the artwork files are never publicly addressable — a download is always brokered through a link tied to your order, so there is no path to guess at a full-resolution file. Access to customer data is limited to the people who need it. No system is perfectly secure, but we would rather design out a risk than promise it away.

wallnine is intended for adults. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will remove it.

We may update this policy. When we do, we revise the date at the top of this page, and where a change materially affects how your data is used we will say so rather than leave you to spot it.