Privacy and Cookies Policy
Ask-to-Print values your privacy and the protection of your personal data. This Policy explains how we collect, use, store and protect your personal data when you visit the website www.asktoprint.pt, create an account, use our services, place orders, interact with us or subscribe to commercial communications.
This Policy has been prepared taking into account the General Data Protection Regulation, Regulation (EU) 2016/679 (“GDPR”), applicable national legislation and the use of consent and cookie management tools, including Termly.io.
We also recommend reading the following documents:
1. Scope of this Policy
This Policy applies to all users of www.asktoprint.pt, hereinafter the “Site”, whether they are browsing, creating an account, requesting information, subscribing to commercial communications, using tools available on the Site or making a purchase.
Ask-to-Print provides web-to-print, customisation and production services for printed materials and related products. To provide these services, it may be necessary to process certain personal data of users, customers, company representatives, order recipients and people who contact Ask-to-Print.
Browsing the Site is free and does not require registration. However, to access certain features, such as creating an account, placing an order, requesting a quote, saving designs, tracking requests, contacting customer support or receiving commercial communications, it may be necessary to provide personal data.
2. Data controller and contact details
The data controller is ATOPRINT, CUSTOMIZATION SHOP, LDA., owner of the Ask-to-Print brand, with registered office at Rua do Galhano, 15, 4480-089 Árvore, Vila do Conde, Portugal, tax number 518222055, hereinafter “Ask-to-Print”, “we”, “us” or “our”.
For any question related to this Policy, personal data protection or the exercise of rights, you may contact us by email at privacy@asktoprint.com.
You may also contact us by post at the address indicated above. Whenever you contact us, we may request additional information to confirm your identity and ensure that the request is handled securely.
3. What personal data we collect
The categories of personal data processed depend on how you use the Site and Ask-to-Print’s services. We may process the following categories of data:
Identification and account data: first name, last name, username, email address, password or authentication data, data associated with account creation and management.
Contact data: email address, telephone number, billing address, delivery address and other data required to respond to requests or deliver orders.
Purchase, billing and order data: products purchased, order history, files sent for production, quote data, tax number where applicable, delivery information, returns, complaints and order-related communications.
Payment data: information required to process payments. Full payment instrument data, such as full card numbers, security codes or payment credentials, are processed by the relevant payment service providers, such as Ifthenpay, PayPal or Stripe, according to the payment method chosen by the user.
Support and communication data: message content, information requests, complaints, customer support contacts and information provided to us in the context of those communications.
Marketing data: name, email address, communication preferences, consent history and interaction with commercial communications, when you have subscribed to or authorised such communications.
Technical, browsing and usage data: IP address, device identifiers, browser type, operating system, pages visited, access dates and times, traffic source, interactions with the Site, technical logs, cookies and similar technologies.
Approximate location data: location inferred from the IP address or similar technical data. We do not collect precise GPS location unless a specific feature requires it and the user has authorised it.
Social login data: if the Site provides registration or authentication through third-party platforms, such as Google, Facebook, X or other social networks, we may receive profile data made available by those platforms, such as name, email address and profile picture, according to the permissions granted by the user.
Ask-to-Print does not intend to collect special categories of personal data, such as health data, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, sex life or sexual orientation. Please do not send us this type of data through the Site, production files, forms or communications.
The Site is not intended for children under 16 years of age. Children under 16 must not create an account, place orders or provide personal data without proper authorisation from the holders of parental responsibility.
4. Optional or mandatory nature of data
Providing personal data is generally optional. However, some data is necessary to allow account creation, respond to requests, process orders, issue invoices, deliver products, manage payments or comply with legal obligations.
Where certain data is mandatory, this requirement will be indicated in the relevant forms or will result from the nature of the requested service. Failure to provide necessary data may prevent the use of certain features or completion of an order.
The user undertakes to provide true, complete and up-to-date data and to communicate any relevant changes.
5. Purposes and legal bases of processing
We process personal data only when there is a legitimate purpose and an appropriate legal basis under the GDPR. The main purposes include account management, order management, payments, invoicing, customer support, security, Site improvement, marketing and defence of rights.
Account management: account creation, authentication, access recovery and preference management. Legal basis: performance of a contract or pre-contractual steps.
Order and service management: processing purchases, producing customised products, managing uploaded files, confirmations, deliveries, returns and complaints. Legal basis: performance of a contract.
Payments: forwarding to providers such as Ifthenpay, PayPal or Stripe, payment confirmation and fraud prevention. Legal basis: performance of a contract, legal obligation and legitimate interest.
Invoicing, accounting and legal obligations: issuing invoices, accounting records, tax obligations and responses to authorities. Legal basis: compliance with a legal obligation.
Customer support: responding to questions, quotes, complaints, technical issues or order problems. Legal basis: performance of a contract, pre-contractual steps or legitimate interest.
Security and abuse prevention: protecting accounts, preventing unauthorised access, fraud, abusive use, technical incidents and unlawful activities. Legal basis: legitimate interest and, where applicable, legal obligation.
Site improvement and statistical analysis: performance analysis, error correction and optimisation of the experience. Legal basis: legitimate interest or consent, when non-essential cookies are involved.
Marketing and commercial communications: sending newsletters, offers, campaigns, news and promotional communications. Legal basis: consent or another legal basis permitted by law.
When processing is based on consent, the user may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
6. Commercial communications and marketing
Ask-to-Print only sends commercial communications, newsletters, campaigns or offers when there is user consent or another legal basis permitted by law.
The user may unsubscribe at any time through the unsubscribe link included in the emails, where available, or by contacting us at privacy@asktoprint.com.
Even if you unsubscribe from marketing communications, we may continue to send operational or transactional communications related to your account, orders, payments, security, service changes or compliance with legal obligations.
7. Sharing data with third parties
Ask-to-Print may share personal data only when necessary to provide the requested services, comply with legal obligations, protect rights or ensure the operation of the Site.
Payment providers: Ifthenpay, PayPal, Stripe or other providers selected by the user at checkout.
Carriers and logistics operators: entities responsible for order delivery and shipment management.
Technology providers: hosting, infrastructure, cloud, storage, maintenance, security, e-commerce tools, customer support tools and software providers.
Analytics, advertising and marketing tools: Google Analytics, Google Tag Manager, advertising platforms, social networks, email marketing tools or other equivalent technologies, always respecting applicable consent preferences.
Consent and cookie management tools: Termly.io or equivalent solutions used to manage cookie and consent preferences.
Public, tax, regulatory, judicial or administrative authorities: when there is a legal obligation or a valid request from a competent authority.
Professional advisers: accountants, auditors, lawyers, insurers or other advisers, where necessary for legal compliance, audit, risk management or defence of rights.
Whenever third parties process personal data on behalf of Ask-to-Print, we seek to ensure that they are bound by appropriate confidentiality, security and data processing obligations under the GDPR.
In the event of a corporate reorganisation, merger, acquisition, sale of assets or similar transaction, personal data may be transferred as part of that transaction, to the extent necessary and with appropriate safeguards.
8. Payments
When you make a purchase, the data necessary for payment is processed by the payment providers available on the Site, such as Ifthenpay, PayPal and Stripe, according to the chosen method.
Ask-to-Print does not store full payment card data, security codes or payment credentials.
These providers may act as independent controllers or processors, depending on the service provided and their respective terms. We recommend reading the privacy policies of the payment providers used.
9. Cookies and similar technologies
The Site uses cookies and similar technologies, such as pixels, tags, device identifiers and local storage, to ensure the operation of the Site, protect browsing, save preferences, analyse performance, improve services and, when authorised, personalise content or advertising.
Cookies are small text files stored on the user’s device when visiting a website. They may be session cookies, deleted when the browser is closed, or persistent cookies, kept for a defined period.
Ask-to-Print uses a cookie consent management tool, including Termly.io, to present cookie information, collect preferences and allow the user to accept, reject or configure non-essential cookies.
Strictly necessary cookies: required for security, authentication, shopping cart, session, checkout, essential preferences and technical operation of the platform.
Analytics cookies: help us understand how users interact with the Site, measure traffic, identify errors, improve performance and optimise the experience. Their use depends on user consent where legally required.
Advertising, social media and marketing cookies: may be used to measure campaigns, display more relevant advertising, create audiences, avoid excessive repetition of ads, send abandoned cart reminders or integrate social media features. Their use depends on user consent where legally required.
The user may change preferences at any time through the cookie management link or button available on the Site, through the Termly panel or through browser settings.
If you block or delete cookies, some Site features may not work properly, including login, shopping cart, preferences, checkout or customisation tools.
More detailed information about the specific cookies used, their purposes, providers and retention periods should be available in the Cookie Policy or in the preferences panel managed by the consent tool.
10. Google Analytics, Google Tag Manager and Google services
We may use Google Analytics and Google Tag Manager to measure and analyse Site usage, manage tags and improve the user experience.
These tools may collect technical and usage data, including online identifiers, IP address, pages visited, events and information about the device and browser.
When we use Google advertising or remarketing features, this will be done according to the user’s consent preferences.
If the Site uses Google APIs, including Google Maps or other APIs, data processing may be subject to the applicable Google policies and terms. Whenever these features involve cookies or non-essential technologies, the user’s consent preferences will be respected.
11. Social login and third-party integrations
If the Site provides registration or login through third-party accounts, such as Google, Facebook, X or other platforms, we may receive certain profile information authorised by the user, such as name, email address, account identifier and profile picture.
The use of this information is limited to the purposes described in this Policy, namely authentication, account creation and provision of the requested services. Ask-to-Print does not control how these platforms process their users’ personal data, so we recommend reading their respective privacy policies.
12. Retention of personal data
We retain personal data only for the period necessary to fulfil the purposes for which it was collected, unless there is a legal obligation, need to defend rights or another legitimate basis for longer retention.
Account data: while the account remains active and, after deletion, for the period necessary to comply with legal obligations, prevent fraud or defend rights.
Order, billing and payment data: for the legally required periods for tax, accounting and commercial purposes.
Support and communication data: for the time necessary to manage the request, complaint or contractual relationship and, where applicable, to defend rights.
Marketing data: until consent is withdrawn, the user objects or prolonged inactivity occurs, without prejudice to retaining proof of consent or unsubscribe.
Cookies: according to the periods indicated in the Cookie Policy or cookie preferences panel.
When data is no longer necessary, it will be deleted, anonymised or securely archived until deletion is possible.
13. Storage and international transfers
Personal data may be stored on servers located in Portugal, in other Member States of the European Union or in the European Economic Area.
Some service providers used by Ask-to-Print or its partners may process data outside the European Economic Area.
Where international data transfers occur, we will seek to ensure that an appropriate legal basis exists, such as an adequacy decision by the European Commission, standard contractual clauses, supplementary measures or another mechanism permitted by the GDPR.
14. Security of processing
Ask-to-Print adopts appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure, unauthorised access or unlawful processing.
These measures may include access controls, authentication, encryption where applicable, backups, monitoring, permission segregation, internal training and confidentiality obligations.
Despite our efforts, no electronic transmission or storage system is completely secure. The user should also adopt security measures, such as using strong passwords, keeping credentials confidential, logging out on shared devices and using secure networks.
15. User rights
Under the GDPR, and within the applicable legal limits, the user may exercise the following rights: access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent and the right not to be subject to solely automated decisions producing legal or similarly significant effects, where applicable.
To exercise your rights, please contact us at privacy@asktoprint.com.
Ask-to-Print will respond to requests within the legally applicable time limits. In certain cases, we may refuse or limit the request where permitted by law, namely where there is a legal retention obligation, need to defend rights or manifestly unfounded or excessive requests.
16. Account management and data deletion
The user may request the update, correction or deletion of their account and associated data by contacting Ask-to-Print.
After a deletion request, we may deactivate or delete the account from active systems, without prejudice to retaining data necessary for compliance with legal obligations, fraud prevention, dispute resolution, collection, audit or defence of rights.
17. Complaints to the supervisory authority
If you believe that your personal data is not being processed in accordance with applicable law, you have the right to lodge a complaint with the competent supervisory authority. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).
Website: www.cnpd.pt | Email: geral@cnpd.pt | Telephone: +351 213 928 400
18. Links to external websites
The Site may contain hyperlinks to third-party pages, platforms or services over which Ask-to-Print has no control. Access to those websites is the user’s responsibility.
We recommend reading their respective privacy and cookie policies. Ask-to-Print is not responsible for the content, security, availability or privacy practices of external websites or services.
19. Do Not Track and automatic browser signals
Some browsers provide “Do Not Track” features or similar signals. There is currently no uniform and mandatory technical standard for recognising or responding to such signals in all contexts.
Ask-to-Print respects the choices made through the cookie consent tool and the options made available on the Site.
20. Applicable law
The processing of personal data is carried out in accordance with the GDPR, Law no. 58/2019 of 8 August and other applicable national and European legislation on data protection, privacy, e-commerce and electronic communications.
Any disputes arising from the application of this Policy will be settled by the competent Portuguese courts, without prejudice to the application of mandatory consumer protection or data protection rules.
21. Updates to this Policy
Ask-to-Print may update this Policy at any time, namely to reflect legislative, regulatory, technical, operational or commercial changes.
The updated version will be published on this page, with the update date indicated. Whenever changes are materially relevant, we may adopt additional communication measures, such as a notice on the Site or direct communication, where appropriate.
Version 2.0, updated on 24 April 2026