Privacy Policy

Deinspar Ltd is the controller of personal data processed through the Deinspar Creator Platform where we determine why and how that data is used.

This policy is intended to explain our processing under the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable data-protection law. Where the EU GDPR or another local privacy law also applies to you, you may have additional rights under that law.

This policy applies to personal data connected with the Deinspar Creator Platform at b2b.deinspar.com, including creator registration, authentication, profiles, artwork submissions, products, earnings, payouts, affiliate features, community features and creator support.

It also explains limited processing connected with creator affiliate attribution on deinspar.com where that information is linked to a creator's affiliate programme.

Depending on how you use the platform, we may collect the following categories of personal data.

We do not ask you to provide passwords or authentication codes to our support team. Please do not include special category data or other highly sensitive information in artwork metadata or support messages unless it is genuinely necessary.

We may use personal data to:

• create, authenticate and administer creator accounts;
• review artwork submissions and manage approved products;
• connect creator products with sales and order information;
• calculate creator earnings, refunds and payouts;
• operate the affiliate programme and calculate affiliate commission;
• provide account, technical and creator support;
• send essential account, security, payout and service communications;
• send optional marketing or creator updates where permitted;
• operate community and creator-platform functionality;
• detect fraud, abuse, security threats and technical problems;
• improve the reliability and usability of the platform;
• comply with legal, tax, accounting and regulatory obligations.

We process personal data only where we have a lawful basis. The basis depends on the specific processing activity.

The Creator Platform includes the Deinspar Assistant, an AI-assisted support feature used for routine creator questions. The assistant may receive your support message and a limited amount of recent text conversation context so that it can provide an answer or decide that a matter should be handed to human support.

We currently use OpenAI to provide this AI-assisted functionality. Text submitted to the AI assistant and generated responses are therefore processed through the OpenAI API. Our normal text-support flow does not send support image attachments to the AI model.

Where Deinspar has enabled optional API data sharing for the OpenAI project used by the Deinspar Assistant, API inputs and outputs may also be used by OpenAI under its applicable terms and privacy practices. Do not submit passwords, security codes, confidential documents or unnecessary sensitive personal information to the AI assistant.

AI responses are intended for routine support. Account-specific, sensitive or uncertain matters may be escalated to a human support agent.

If you participate in the Deinspar creator affiliate programme, we process information needed to attribute valid referrals and calculate affiliate performance.

When a visitor follows an eligible creator referral, the system may process a creator affiliate code, a pseudonymous visitor identifier, the Deinspar landing URL and a timestamp. We use this information to recognise valid clicks, reduce duplicate counting and connect eligible orders to the correct creator.

We use service providers to operate the Creator Platform. Depending on the feature you use, these may include:

We may also disclose information to professional advisers, auditors, insurers, regulators, courts, law-enforcement authorities or other parties where reasonably necessary to comply with law, protect rights, investigate fraud or manage a corporate transaction.

We do not sell your personal data.

Deinspar is established in the United Kingdom and some of our service providers operate internationally. Personal data may therefore be processed in the UK, EEA, United States or other countries in which our providers maintain infrastructure or personnel.

Where data-protection law requires a transfer mechanism, we use appropriate safeguards such as applicable adequacy regulations, the UK International Data Transfer Agreement or UK Addendum, EU Standard Contractual Clauses where relevant, or another lawful transfer mechanism.

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including account operation, creator payments, support, security, dispute resolution and legal compliance.

• Active account and profile information is normally kept while your creator account remains active.
• Artwork, product and operational records may be retained while products, completed orders, rights issues or creator obligations remain relevant.
• Financial, payout, commission and transaction records may be kept for at least six years where required for UK tax or accounting purposes.
• Support conversations and attachments are retained for as long as reasonably needed for support, quality, security, dispute handling and record-keeping.

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss or disclosure. These measures include authenticated access controls, restricted administrative access, encrypted network connections and separation of private support-file storage from public storefront assets.

No online service can guarantee absolute security. You are responsible for keeping your account credentials secure and should contact us promptly if you believe your account has been compromised.

The Creator Platform uses cookies and similar browser storage where needed for authentication, security, session continuity, preferences and core platform functionality.

Where affiliate attribution is used on deinspar.com, a pseudonymous visitor identifier and related referral information may be stored or transmitted so that valid creator referrals can be recognised for the applicable attribution period.

Depending on the law that applies to you and the lawful basis for our processing, you may have rights to:

• request access to personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete personal data where the right to erasure applies;
• ask us to restrict certain processing;
• receive certain data in a portable format where applicable;
• object to processing based on legitimate interests;
• object to direct marketing at any time;
• withdraw consent where consent is the lawful basis.

To exercise a privacy right, email b2b@deinspar.com. We may need to verify your identity before completing a request.

We may send essential communications about your creator account, security, artwork status, products, sales, payouts, support tickets, policy changes or other operational matters. These messages may still be sent if you disable optional marketing emails.

Where optional creator or promotional emails are enabled, you can change your email preferences through the Creator Dashboard where available or use an unsubscribe option in the relevant message.

We use automated systems for routine platform functions such as authentication, calculations, affiliate attribution, technical validation, support routing and AI-assisted support.

The Deinspar Assistant can answer routine questions and recommend escalation to a person, but we do not currently use it to make solely automated decisions that have legal or similarly significant effects on a creator.

The Creator Platform is intended for people aged 18 or over who can enter into a binding creator agreement. We do not knowingly operate the platform for children.

We may update this Privacy Policy when our platform, providers, legal obligations or data practices change. When a change is material, we will provide reasonable notice through the Creator Platform, by email or by another appropriate method.

If you are in the United Kingdom, you also have the right to complain to the Information Commissioner's Office (ICO). If EU or EEA data-protection law applies to you, you may also have the right to complain to the competent supervisory authority in your country.