Privacy Policy
Last updated: August 1, 2025
Welcome to The Scripture Print (“we,” “our,” or “us”). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://thescriptureprint.com (the “Site”) or purchase products from us.
Plain-language note: This policy is designed to be easy to read while still meeting legal requirements where we operate. Every business is unique, so please consider asking a qualified lawyer to review it.
1. Scope of This Policy
This Privacy Policy applies to information we collect through the Site, our related services, marketing activities, and any offline communication (such as customer-support calls or events) that links to this policy. It does not apply to third-party websites or services we don’t control.
2. Information We Collect
| Category | Examples | Why We Collect It |
|---|---|---|
| Information you provide directly | • Name, billing & shipping address • Email address & phone number • Payment-method details (via our payment processor) • Account login (username, password) • Product reviews & other content you post | • Process and fulfil orders • Deliver products & manage accounts • Provide customer support • Send service-related messages |
| Information collected automatically | • Device identifiers (IP address, browser type, operating system) • Usage data (pages visited, time spent, referring URLs) • Cookies, pixels, and similar tech (see §5) | • Improve and secure the Site • Personalise content & ads • Measure marketing effectiveness |
| Information from third parties | • Payment processors (confirming your payment) • Marketing & social-media partners • Fraud-prevention services | • Process payments • Detect & prevent fraud • Provide more relevant marketing |
Sensitive Data
We do not knowingly collect sensitive personal data (e.g., health or biometric data) unless you explicitly provide it and we have a lawful basis to process it.
3. How We Use Your Information
We use personal information to:
- Fulfil our contract with you: process orders, deliver products, and manage returns.
- Operate, maintain, and improve the Site: debug, analyse trends, and develop new features.
- Communicate with you: send confirmations, updates, and respond to inquiries.
- Marketing (with your consent where required): send newsletters, promotions, or personalised ads.
- Security and fraud prevention: detect, investigate, and help prevent security incidents or illegal activity.
- Legal compliance: meet obligations under UK GDPR, EU GDPR, CCPA/CPRA, and other applicable laws.
Lawful Bases for Processing (UK GDPR/EU GDPR)
We rely on one or more of the following bases: (a) contract performance, (b) legitimate interests, (c) consent (which you may withdraw at any time), and (d) legal obligations.
4. How We Share Information
We share information only when necessary:
- Service providers – payment processors (e.g., Stripe, PayPal), shipping carriers, cloud-hosting partners, email platforms, analytics providers, and advertising partners. They may access information solely to perform services for us and are bound by contractual confidentiality obligations.
- Legal or regulatory authorities – when required to comply with law, court orders, or to protect rights, property, or safety.
- Business transfers – if we merge, sell, or reorganise our business, information may be transferred as part of that deal, subject to confidentiality.
- With your consent – we’ll share outside of these circumstances only if you give us permission.
We never sell your personal information for money. Under California law, we may “share” certain data for cross-context behavioural advertising. You can opt out—see Your Rights & Choices (§9).
5. Cookies & Similar Technologies
Cookies are small files placed on your device. They help the Site work, remember your preferences, and measure performance. Some are essential (they keep the cart working); others are optional and require your consent.
5.1. Your Choices
When you first visit, a banner lets you Accept, Reject, or Customise non-essential cookies.
You can change your choice anytime by clicking “Cookie Settings” in the footer.
You can also control cookies through your browser settings. Disabling some cookies may affect certain features.
5.2. Do-Not-Track & Global Privacy Control
We honour the Global Privacy Control (GPC) signal as a request to opt out of “sale” or “sharing” of personal information and targeted advertising where legally required. We do not otherwise respond to browser “Do-Not-Track” headers because no industry standard exists.
5.3. Detailed Cookie Table
| Cookie (example) | Provider / Domain | 1st vs 3rd Party | Purpose | Default Expiry |
|---|---|---|---|---|
| _ga | Google Analytics | 1st | Counts visits & tracks site usage | 2 years |
| _gid | Google Analytics | 1st | Distinguishes users for daily stats | 24 hours |
| _gat / dc_gtm* | Google Analytics / Tag Manager | 1st | Throttles request rate | 1 minute |
| _gcl_au | Google Ads | 1st | Stores ad-click info for conversion tracking | 90 days |
| IDE | Google Ads (DoubleClick) – .doubleclick.net | 3rd | Shows / limits personalised ads | 13 months (UK) |
| DSID | Google Ads (DoubleClick) | 3rd | Links user across devices for retargeting | 2 weeks |
| NID | Google Ads | 3rd | Remembers ad settings & language | 6 months |
| test_cookie | Google Ads (DoubleClick) | 3rd | Checks if the browser accepts cookies | 15 minutes |
| gelato_session | Gelato (print-on-demand fulfilment) | 3rd | Keeps your custom-print cart & checkout intact | Session (deleted on close) |
| hjSessionUser* | Hotjar via Gelato | 3rd | Heat-map & UX diagnostics | 1 year |
A cookie served from thescriptureprint.com is “first-party.” If served from another domain, it’s “third-party.”
Google Search Console
We use Google Search Console only for site diagnostics. It does not set or read cookies on end-user devices.
6. Payment Processing
We use Stripe and PayPal to handle card transactions. Your card details are never stored on our servers. They are encrypted and processed directly by these payment processors, which are PCI-DSS Level 1 certified.
7. Retention of Your Information
We keep information only as long as needed for its purpose, to comply with legal obligations, resolve disputes, and enforce our agreements.
- Order records: 6 years (UK tax rules)
- Marketing data: until you opt out or after 24 months of inactivity
- Account data: while your account is active and for up to 2 years after closure (unless we need to keep it longer for fraud-prevention or legal reasons)
8. Security
We use industry-standard safeguards such as HTTPS encryption, firewalls, access controls, and regular security audits. No method of transmission over the Internet is 100% secure, so we can’t guarantee absolute security.
9. Your Rights & Choices
Depending on where you live, you may have rights to:
- Access – request a copy of the personal data we hold about you.
- Correct – ask us to update inaccurate or incomplete data.
- Delete – request deletion of your information (“right to be forgotten”).
- Restrict or object – limit certain processing or marketing.
- Data portability – receive your data in a structured, machine-readable format.
- Opt out of “sale” or “sharing” – use our “Do Not Sell or Share My Info” link or enable the Global Privacy Control.
- Withdraw consent – when processing is based on consent.
How to exercise your rights
Email thescriptureprint@gmail.com or use the forms linked in our footer. We’ll respond within 30 days (or the timeframe required by law).
You may lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data-protection authority.
10. International Data Transfers
We’re based in the United Kingdom but work with providers worldwide. When we transfer data outside the UK/EEA, we rely on approved safeguards such as UK Addendum Standard Contractual Clauses (SCCs) or an adequacy decision.
11. Children’s Privacy
Our Site is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we learn we have done so, we’ll delete it promptly.
12. Automated Decision-Making & Profiling
We do not use automated decision-making that has legal or similarly significant effects. Personalisation of ads is limited to the profiling described in the cookie table, and you can opt out at any time (see §9).
13. Do-Not-Track Signals
As noted in §5.2, we honour the Global Privacy Control (GPC) signal. We currently do not respond to other browser “DNT” signals because there is no industry standard for compliance.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. We’ll post the revised version and update the “Last updated” date. Material changes will be communicated via the Site or email.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
📧 Email: thescriptureprint@gmail.com
