Privacy notice
Last updated [[DATE]]
This notice explains what Altytude does with your personal data, why, who else sees it, how long it is kept and what you can ask us to do about it. It is written to meet Articles 13 and 14 of the UK GDPR.
Who we are
Altytude is operated by [[LEGAL ENTITY NAME]][[COMPANY NUMBER, IF A REGISTERED COMPANY]], whose registered address is [[REGISTERED ADDRESS]]. We are the data controller for the personal data described here.
For anything in this notice, including any of the rights below, contact [[PRIVACY CONTACT EMAIL]]. [[IF YOU HAVE APPOINTED A DPO, NAME THEM AND THEIR CONTACT DETAILS HERE. MOST SHOPS OF THIS SIZE ARE NOT REQUIRED TO — SEE docs/DATA-PROTECTION.md]]
What we collect
When you browse and design a map
- What you type into the place search. When you search for a place, the text you type is sent to OpenStreetMap's Nominatim service to be turned into coordinates. It is not stored by us.
- The map you design. The coordinates, size, contour settings, colours and any label you add. We treat these as personal data, because choosing a place that means something to you often means choosing where you live, were born, or were married.
-
Your basket. Stored in your own browser using
localStorage, not in a cookie and not on our servers. It stays on your device until you check out or clear it. - Your IP address, in server logs and in the request counters that stop one visitor overwhelming the site.
When you buy something
- Your name, email address, delivery address and — if you give one — phone number.
- What you ordered, what it cost, and a reference to the payment.
- The finished artwork for your design, so it can be printed.
We never see or store your card details. Payment is taken by Stripe on Stripe's own pages. Your card number does not pass through this site.
Cookies and similar storage
This site sets no cookies — none for analytics, none for advertising, and none for tracking you between visits. There is nothing to consent to and no banner to dismiss.
The one thing stored on your device is your basket, held in
localStorage so that it survives you moving between pages. That is
strictly necessary to provide a shop you asked to use, so it is exempt from the
consent requirement in regulation 6 of PECR. You can clear it at any time
through your browser, or by emptying your basket.
Why we are allowed to use it, in law
| What | Why | Lawful basis (Art. 6) |
|---|---|---|
| Name, address, email, phone, order and design | To take your order, print it, ship it and deal with returns | Performance of a contract — Art. 6(1)(b) |
| Order and payment records | To meet tax and accounting obligations | Legal obligation — Art. 6(1)(c) |
| IP address, request counters, server logs | To keep the site available and resist abuse | Legitimate interests — Art. 6(1)(f) |
| Place searches and map tile requests | To show you a map and find the place you asked for | Performance of a contract / legitimate interests — Art. 6(1)(b), (f) |
We do not use your data for marketing, do not profile you, and make no automated decisions that produce legal or similarly significant effects.
Who else sees it
We use the following organisations. Each is given only what it needs, and none of them is permitted to use your data for their own purposes.
| Who | What they receive | Where |
|---|---|---|
| Stripe — payment processing | Your name, email, billing and delivery address, and your card details, which you give directly to them | USA / Ireland |
| Printify — printing and shipping | Your name, email, delivery address, phone if given, and the artwork to print | USA |
| [[HOSTING PROVIDER — e.g. Sliplane]] — hosting | Everything above, at rest on the server, plus server logs | [[HOSTING REGION]] |
| OpenStreetMap Foundation — place search and map tiles | Your IP address, and the text you type into the place search | EU / UK |
| Amazon Web Services — public elevation and relief tiles | Your IP address, and which part of the world you are looking at | USA |
The last two are worth being clear about, because they happen in your browser rather than on our server: when you use the designer, your device contacts OpenStreetMap and Amazon directly to fetch map tiles and to look up place names. Those services therefore see your IP address, and OpenStreetMap sees what you searched for. We tell you this on the designer page as well as here.
We will also disclose data where we are legally required to — for example to a tax authority or in response to a valid court order.
Data leaving the UK
Stripe, Printify and Amazon Web Services involve transfers to the United States. Those transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, and — where the recipient is certified — the UK Extension to the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards in place using the contact address above.
How long we keep it
| What | How long | Then what |
|---|---|---|
| A basket you never checked out | Until you clear it | Never leaves your own browser |
| An order you started but did not pay for | [[7]] days | Deleted entirely |
| Your name, email, address, phone and map coordinates on a completed order | [[180]] days after the order | Erased from the order record |
| The artwork file for a custom design | Until no order references it | Deleted from disk |
| The order itself — reference, items, amounts, dates | [[6 YEARS — UK COMPANIES ACT / HMRC]] | Kept, but with nothing in it that identifies you |
This happens automatically. It is not a promise that depends on somebody remembering: a routine runs on the server every few hours and does it.
Your rights
Under the UK GDPR you have the right to:
- Access — get a copy of the personal data we hold about you.
- Rectification — have inaccurate data corrected.
- Erasure — have your data deleted, subject to the limit below.
- Restriction — ask us to stop using it while a dispute is resolved.
- Portability — receive your data in a machine-readable form.
- Object — object to processing we carry out on the basis of legitimate interests.
To exercise any of these, email [[PRIVACY CONTACT EMAIL]]. We will respond within one month. There is no charge.
One honest limit on erasure. If you have bought something, we are separately required to keep a record of the sale for tax purposes. When you ask us to erase your data we remove your name, email, address, phone number and the coordinates of your map, and keep only the order reference, what was bought, what it cost and when. What is left identifies nobody. We cannot delete the sale itself until the accounting retention period has passed.
Keeping it safe
The site is served over HTTPS. Card details never reach our servers. Order records are held on a server that only the operator can reach, and the one administrative tool that can display a customer's details requires a separate credential, is read-only, and records every access. Your design parameters are validated and clamped on our side rather than trusted from your browser.
No system is perfectly secure. If we suffer a breach that is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours and tell you directly where the risk is high.
Children
This shop is not aimed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us their data, contact us and we will delete it.
Complaints
If you are unhappy with how we have handled your data, please tell us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or on 0303 123 1113.
Changes
If we change this notice we will update the date at the top. Where a change materially affects how we use data we already hold, we will tell affected customers directly.