Printsakes — Privacy Policy

Last updated: 4 July 2026

Printsakes ("Printsakes", "we", "us", "our") is an online studio where you design custom photo frames and photobooks that we print and deliver, operated by Ledge Africa Ltd (RC 9577536) of BLK 411, Akinyele Street, Ipaja, Lagos, Nigeria. This Privacy Policy explains what personal data we collect when you use printsakes.com (the "Service"), how we use and share it, and the rights you have under the Nigeria Data Protection Act, 2023 (NDPA). It works together with our Terms of Service.

This Policy is here to inform you about how we handle your data; it is not a contract and does not ask you to waive any right.

1. Who is responsible for your data

We are the data controller for the personal data described here. For any privacy question, or to exercise your rights, contact us at printsakes@ledgeapp.co. Our data-protection contact can be reached at the same address.

2. What we collect

We collect only what we need to let you design a keepsake and to print and deliver it.

a. Content you give us

• Photos and design content you upload (images, captions, layout choices). These are the heart of the Service and can include images of you and other people.
• Contact and delivery details: your name, phone number, email address, and delivery address.
• Messages you send us by email or through support.

b. Order and payment data

• Order details (what you ordered, price, order reference, status).
• Payments are processed by Paystack (card or bank transfer), and by manual bank transfer where offered. For card and bank payments via Paystack, your payment details are entered on Paystack's secure systems — we do not receive or store your full card number; we receive a payment reference and confirmation of success/failure. For a manual bank transfer, we receive the transfer reference/details you send us to match your payment.

c. Account and sign-in data

• You can use the Service without an account — we create an anonymous session so your design is saved on your device. If you choose to save across devices, you can sign in by email one-time code or Google. If you sign in with Google, we receive your name, email address and profile picture from Google (nothing else).

d. Technical and usage data (collected automatically)

• Device and browser information, and your IP address, which we use to run the Service, apply upload limits, and prevent abuse and fraud.
• Local storage / essential cookies used to keep your session and your in-progress design. We do not currently use third-party advertising or cross-site tracking cookies.

3. How we use your data and our lawful basis (NDPA)

We do not sell your personal data, and we do not use your photos for advertising, training, or any purpose other than producing your order and running your account, unless you give us separate, explicit permission (for example, if you reply to share a photo of your finished keepsake).

4. Who we share your data with

We share personal data only with service providers ("data processors") who help us run Printsakes, and only as needed:

• Print & finishing partners — to produce your order, our print partner receives the design files and the information needed to make and label your item. They are bound to use it only to fulfil your order.
• Delivery / logistics partners — your name, phone and delivery address, to deliver your order.
• Paystack — to process payments (paystack.com).
• Supabase — database, file storage and authentication (supabase.com).
• Vercel — website hosting (vercel.com).
• Resend — to send transactional emails such as your receipt and order updates (resend.com).
• Google — only if you choose "Continue with Google" to sign in.
• fal.ai (which runs Google's image models) — only if you use the optional "Make it a painting" feature, to turn the photo you chose into an artistic version. Your photo is sent to fal.ai solely to create your painting and is not used to train any AI model.

We may also disclose data if required by law, to protect our rights, or in connection with a business transfer (e.g. merger or sale), in which case we will tell you.

5. Your photos — how we treat them

Your uploaded photos are stored privately and are access-controlled so that only you (through your session) and the systems needed to fulfil your order can reach them. We access them to render your design and to send the print-ready files to our print partner for a paid order. We do not publish them or share them with anyone except as needed to produce and deliver your order.

6. International transfers

Some of our processors (e.g. Supabase, Vercel, Paystack, Resend, Google, fal.ai) may store or process data outside Nigeria. Where we transfer personal data across borders, we do so in line with the NDPA — relying on adequacy, appropriate safeguards, or your consent — and we use reputable providers with recognised security and privacy commitments.

7. How long we keep your data

• Designs and uploaded photos: kept while your design is active so you can re-order or edit it. When you delete a design, we remove it; the underlying photos are deleted on request (email us and we will erase them, subject to anything we must keep by law). Abandoned uploads that are never ordered may be periodically cleaned up.
• Orders and payment records: kept for as long as needed to fulfil the order and, for financial and order records, generally for around 6 years to meet our tax, accounting and legal obligations.
• Account data: kept while your account is active; deleted (or anonymised) on account closure, subject to records we must keep by law.

8. Your rights under the NDPA

Subject to the NDPA, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; object to or restrict certain processing; withdraw consent at any time (without affecting prior processing); and data portability. To exercise any right, email printsakes@ledgeapp.co. We will respond within the timeframe required by law.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) (ndpc.gov.ng). We would appreciate the chance to resolve it with you first.

9. Security

We protect your data with encryption in transit, access controls, row-level security on our database and private storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to notify you and the NDPC of a breach where the law requires.

10. Children

The Service is intended for adults (18+). We do not knowingly collect personal data directly from children. If you believe a child has provided us data, contact us and we will delete it. Photos that include children, uploaded by an adult who has the right to use them, are treated as the uploading adult's content and responsibility (see our Terms of Service); we use them only to produce and deliver your order, never for marketing or any other purpose.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date, and for material changes we will take reasonable steps to notify you.

12. Contact

Questions or requests: printsakes@ledgeapp.co · Ledge Africa Ltd (RC 9577536), BLK 411, Akinyele Street, Ipaja, Lagos, Nigeria.