PRIVACY POLICY

Effective Date: 06.11.2026

This Privacy Policy describes how Printing Limitless LLC, a limited liability company organized under the laws of the State of Delaware, with its principal place of business at 611 South DuPont Highway, Suite 102, Dover, Delaware 19901, United States (the “Company,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes personal data through the website operated under the brand “Printing Limitless” (the “Website”) and in connection with related services provided to individuals located in the United Kingdom (the “UK”).

We process personal data in accordance with the UK General Data Protection Regulation (the “UK GDPR”), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (“PECR”), each as amended, including by the Data (Use and Access) Act 2025.

This Privacy Policy forms part of the Website’s Terms of Use. By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy.

1. Definitions

For purposes of this Privacy Policy:

a. “Personal Data” means any information relating to an identified or identifiable living individual, as defined in the UK GDPR.

b. “Processing” means any operation performed on Personal Data, such as collection, recording, storage, use, disclosure, or erasure.

c. Printing Limitless LLC is the controller of the Personal Data processed through the Website. As the Company is not established in the UK, it has designated a representative in the UK in accordance with Article 27 of the UK GDPR (see Section 16).

Personal Data is processed and stored in the United States. As described in Section 8, Personal Data may also be transferred to, and processed by, our affiliates and service providers located in India and other countries outside the UK.

2. Scope of This Privacy Policy

a. This Privacy Policy applies solely to information collected through the Website and in connection with customer transactions, communications, and service interactions.

b. It does not apply to third-party websites, platforms, or services that are not owned or controlled by the Company, even if linked from the Website.

3. Information We Collect

a. We collect Personal Data that you voluntarily provide to us and information collected automatically through your interaction with the Website.

b. The categories of Personal Data collected may include:

i. Identification and contact data such as name, email address, telephone number, billing address, shipping address, and IP address.

ii. Commercial information including records of products purchased, transaction history, order details, and customer service interactions.

iii. Browsing data such as browser type, device characteristics, pages visited, and interactions with the Website.

iv. Account credentials where you create an account.

v. Payment-related information necessary to complete transactions; however, complete payment card data is processed by third-party payment processors and is not stored by us.

c. We collect only information reasonably necessary to operate the Website, fulfill transactions, provide customer service, maintain security, and comply with legal obligations.

d. Information marked as mandatory on our forms is necessary to conclude and perform your order. If you do not provide it, we will not be able to process your order.

4. Sources of Information

a. We collect information:

i. Directly from you when you place orders, register accounts, submit forms, or communicate with us.

ii. Automatically through cookies and similar technologies, subject to Section 11.

iii. From service providers such as payment processors for confirmation of completed transactions.

5. Purposes and Lawful Bases

a. We process Personal Data for the following purposes and on the following lawful bases:

i. Processing, fulfilling and delivering orders: performance of the contract (Article 6(1)(b) of the UK GDPR).

ii. Payment confirmation and transaction management: performance of the contract.

iii. Customer service and order support: performance of the contract and our legitimate interest in responding to your requests.

iv. Website functionality and security: our legitimate interest in operating a secure Website (Article 6(1)(f) of the UK GDPR).

v. Fraud prevention and risk management: our legitimate interest in preventing payment fraud.

vi. Accounting, tax and business recordkeeping: compliance with our legal obligations (Article 6(1)(c) of the UK GDPR).

vii. Managing disputes and defending our rights: our legitimate interest in establishing, exercising, or defending legal claims.

viii. Sending marketing communications: your consent or, for existing customers, our legitimate interest (see Section 10).

ix. Analytics and Website improvement: our legitimate interest, subject to your right to object (see Section 11).

b. Where we rely on our legitimate interest, we have balanced that interest against your rights and freedoms. You may obtain further information by contacting us (see Section 16).

c. We will not process Personal Data for a purpose incompatible with those listed above without first informing you and, where required by law, obtaining your consent.

d. We do not sell Personal Data.

6. Consent

a. Where processing is based on your consent, you may withdraw it at any time, free of charge, by contacting us or, for cookies, through the cookie settings on the Website. Withdrawal does not affect the lawfulness of processing carried out before it.

7. Disclosure of Personal Data

We may disclose Personal Data to:

a. Service Providers

We engage third-party vendors to perform services such as website hosting, order fulfillment, shipping coordination, customer support systems, analytics, and payment processing. These vendors act as processors, on our instructions and under a contract complying with Article 28 of the UK GDPR.

b. Legal and Regulatory Disclosures

We may disclose Personal Data where required to comply with applicable law, court order, or other lawful request from a public authority, or where disclosure is reasonably necessary to protect our legal rights or the safety of users.

c. Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, Personal Data may be transferred as part of the transaction, subject to applicable confidentiality protections and the UK GDPR.

d. Affiliates and International Service Providers

In connection with performance of our contractual obligations and operation of the Website, Personal Data may be shared with our affiliates and authorized vendors, including entities located outside the UK, where such sharing is necessary to:

  • Deliver products and services;
  • Provide customer support;
  • Facilitate logistics and fulfillment;
  • Maintain technical infrastructure; or
  • Perform services consistent with this Privacy Policy.

e. Categories of Recipients

We disclose Personal Data for the purposes described in this Privacy Policy to the following categories of recipients:

  • Service providers and contractors (including hosting providers, analytics providers, logistics partners, and customer support vendors);
  • Payment processors;
  • Shipping and fulfillment partners;
  • Affiliates and related entities;
  • Professional advisors (including legal, accounting, and compliance advisors);
  • Public authorities where required by law; and
  • Successor entities in connection with corporate transactions.

8. Transfers Outside the UK

a. Personal Data we collect is stored in the United States and may be transferred to, accessed from, and processed in India and other countries in which our affiliates and service providers operate.

b. Where Personal Data is transferred to a recipient outside the UK, we rely on UK adequacy regulations where they apply, including the UK Extension to the EU-U.S. Data Privacy Framework for certified recipients in the United States, or put in place appropriate safeguards, in particular the International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission’s standard contractual clauses.

c. While located outside the UK, Personal Data is subject to the laws of the country in which it is held and may be accessible to the courts and authorities of that country.

d. You may obtain a copy of the safeguards in place by contacting us (see Section 16).

9. Payment Processing

a. All payment transactions are processed by independent third-party payment processors. We do not store full credit card numbers or full payment authentication data on our servers.

b. The processing of payment information by such third parties is governed by their respective privacy policies. Users should consult those policies for additional information.

10. Marketing Communications and Advertising

a. We send marketing emails and text messages only with your prior consent. However, if you are an existing customer, we may send you marketing emails about similar products and services, unless you opted out when your details were collected, as permitted by PECR.

b. Every marketing message identifies the Company and contains a simple and free means of unsubscribing. You will continue to receive transactional messages relating to your orders and account.

c. We do not engage in targeted or personalized advertising using your Personal Data. If we do so in the future, we will obtain your consent where required by law.

11. Cookies and Tracking Technologies

a. The Website uses cookies and similar technologies to:

i. Maintain session functionality.

ii. Remember user preferences.

iii. Analyze website performance.

iv. Enhance user experience.

b. Cookies that are strictly necessary for the operation of the Website, and cookies used only to collect statistical information to improve the Website or to remember your display preferences, are placed without consent, as permitted by PECR. You may object to the analytics and preference cookies at any time, free of charge, through the cookie settings on the Website.

c. Advertising and other non-essential cookies are placed only with your prior consent, which you may give, refuse, or withdraw at any time through the cookie settings on the Website.

d. You may also configure your browser settings to limit cookies; however, certain Website features may not function properly as a result.

12. Data Retention

a. We retain Personal Data only for as long as necessary for the purposes for which it was collected, in particular:

i. Customer and order data: for the duration of our relationship with you and for six (6) years after your last order, to deal with any claims under the contract;

ii. Invoices, tax and accounting records: at least six (6) years, as required by UK tax law;

iii. Marketing data: until you unsubscribe or, for existing customers, until two (2) years after your last order;

iv. Data relating to a dispute: until the dispute is resolved and the applicable limitation period has expired;

v. Account data: until you close your account or after three (3) years of inactivity.

b. At the end of these periods, Personal Data is deleted or anonymized.

13. Data Security

a. We implement administrative, technical, and physical safeguards designed to protect Personal Data from unauthorized access, disclosure, alteration, or destruction.

b. These measures include encrypted transmission, secure hosting environments, restricted internal access, and monitoring systems designed to detect unauthorized activity.

c. No method of data transmission or storage is completely secure; however, we maintain reasonable safeguards consistent with industry standards and appropriate to the sensitivity of the information.

d. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Information Commission within seventy-two (72) hours where required by law, and will inform you without undue delay where the breach is likely to result in a high risk to you.

14. Children’s Privacy

a. The Website is intended for individuals aged 18 or over and is not directed to children. We do not knowingly collect Personal Data from children under 13 years of age. If we become aware that such data has been collected, we will delete it.

15. Your Rights

a. Subject to the conditions set out in the UK GDPR, you have the right to:

i. Access your Personal Data and obtain a copy of it;

ii. Rectify inaccurate or incomplete data;

iii. Erasure of your data;

iv. Restriction of processing;

v. Portability of the data you have provided to us, where processing is automated and based on your consent or on the contract;

vi. Object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest, and object at any time, without giving reasons, to direct marketing;

vii. Withdraw your consent at any time (see Section 6).

b. We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

c. Making a Request

You may exercise your rights by submitting a written request to the contact set out in Section 16. We will respond within one (1) month of receipt. This period may be extended by two (2) months where the request is complex or we have received a number of requests from you, in which case we will inform you within the first month. Where we need further information to identify you or to clarify the scope of your request, the time limit runs from when we receive it. Exercising your rights is free of charge, except for manifestly unfounded or excessive requests.

d. Verification

Where we have reasonable doubts as to your identity, we may request additional information necessary to confirm it. We will use information provided in a request solely for purposes of verification and responding to the request.

A request may be made on your behalf by a person duly authorized to act for you. We may require proof of that authority and verification of your identity before processing the request.

16. Data Protection Contact

a. For any question regarding this Privacy Policy or to exercise your rights, you may contact:

Data Protection Contact

Printing Limitless LLC

611 South DuPont Highway, Suite 102, Dover, Delaware 19901, United States

Email: [email protected]

CC: [email protected]

17. Complaints

a. If you have a concern about how we handle your Personal Data, you may complain to us using the online complaint form on the Website or by email to [email protected]. We will acknowledge your complaint within thirty (30) days of receipt and respond without undue delay, keeping you informed of progress.

b. You also have the right to lodge a complaint with the Information Commission (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF (www.ico.org.uk).

18. Changes to This Privacy Policy

a. We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Effective Date.” Where a change is material, including any new purpose for which we use your Personal Data, we will notify you by email or by a notice on the Website before the change takes effect and, where required by law, obtain your consent.

b. We encourage you to review this Privacy Policy periodically.

19. Contact Information

Printing Limitless LLC

Attention: Data Protection Contact

Email: [email protected]

CC: [email protected]