Privacy Policy

Yes Print Limited (RC 9699253), of Plot 89 Nsukka Street, Garki 2, Abuja, Nigeria, is the data controller for the information described here. Questions, or any request about your data, can go to privacy@yesprint.ng.

We handle personal data in line with the Nigeria Data Protection Act 2023 and the guidance of the Nigeria Data Protection Commission (NDPC). Where we serve customers outside Nigeria, we apply equivalent standards.

Only what we need to quote, produce and deliver your order:

• Account — name, email address, password (stored only as a secure hash), and phone number if you choose phone sign-in.
• Business — company name and role, where you give them.
• Orders — delivery address, recipient name and phone, order history, quotes and invoices.
• Artwork — the design files you upload or create in our studio. These may contain personal data if your design includes it.
• Payments — the amount, reference and status. We never receive or store your full card number.
• Support — messages you send us.
• Technical — IP address, browser type and pages visited, used to keep the service secure and working.

If you sign in with Google or Apple, we receive your name and email from them — never your password.

• To perform our contract — creating quotes, producing orders, taking payment, delivering, and handling support.
• Legitimate interest — preventing fraud, securing the platform, and improving the service. We balance this against your privacy.
• Legal obligation — keeping tax and accounting records.
• Consent — marketing emails, which you can withdraw at any time. Consent is never a condition of ordering.

Design files often contain unreleased products, pricing or brand work. We treat them as confidential.

Your artwork is used only to produce your order. We do not sell it, share it with other customers, or use it in our own marketing without your written permission. Access is limited to the staff and production partners who need it for your job.

We use a small number of service providers, each handling only what they need:

• Supabase — database, accounts and file storage.
• Paystack — payment processing. They handle your card details directly under their own privacy policy.
• Resend — transactional email such as order confirmations.
• Vercel — hosting and content delivery.
• Delivery partners — the recipient name, address and phone needed to deliver.
• Production partners — where part of a job is produced by a trusted partner, under confidentiality obligations.

We do not sell your personal data. We may disclose data where the law requires it, or to establish or defend legal claims.

Some providers store data outside Nigeria. Where that happens we rely on the safeguards permitted by the NDPA, including contractual protections with each provider. You can ask us where a particular category of data is held.

• Account data — while your account is open, then 12 months.
• Orders, invoices and tax records — 6 years, as required by Nigerian tax law.
• Artwork files — 24 months after the order, so reprints stay easy. Ask us and we will delete them sooner.
• Support messages — 24 months.

Traffic is encrypted in transit. Passwords are hashed, never stored in readable form. Database access is restricted by row-level security, so one customer cannot read another's orders, designs or addresses. Administrative access is limited to staff who need it.

No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify you and the NDPC as the law requires.

Under the NDPA you may ask us to:

• give you a copy of the data we hold about you;
• correct anything inaccurate;
• delete your data, where we are not required to keep it;
• restrict or object to how we use it;
• provide your data in a portable format;
• withdraw consent to marketing at any time.

Email privacy@yesprint.ng and we will respond within 30 days. You are also entitled to complain to the Nigeria Data Protection Commission.

We use cookies that are necessary for the site to work — keeping you signed in and securing forms. These do not require consent.

If we later add analytics or advertising cookies, we will ask for your consent first and offer a way to decline. [Update this section when analytics is added.]

The platform is for businesses and is not directed at children under 18. We do not knowingly collect their data; if we learn that we have, we will delete it.

We will update this policy as the service develops, and will change the date at the top. Where a change materially affects you, we will tell you directly.