Your Data Rights

1. Who This Page Is For

This page explains what you can ask us about the personal information we hold and how to ask. It goes with our Privacy Policy.

• Shop owners and staff — you have a DTF Checkout account: we hold your account and billing information and you can make any of the requests below directly to us.
• Customers of a shop — you ordered from a storefront that runs on DTF Checkout: the shop is the business holding your order and your details. Contact it first; its contact details are in its storefront footer. We help shops fulfil requests, and we forward any request we receive directly to the shop concerned.

2. What You Can Ask For

• Access — confirmation of what personal information we hold about you and a copy of it.
• Correction — fixing information that is wrong or incomplete. Shop owners and staff can change most account details themselves in the admin.
• Deletion — removal of your personal information (see section 3 for what that means).
• Portability — a copy of the information you gave us in a machine-readable format.
• Opt out of sale or sharing — we do not sell personal information and do not share it for cross-context advertising, so there is nothing to opt out of; you may still ask and we will confirm.

We will not treat you differently for making a request.

3. What Deletion Means

For a shop owner, deleting your account closes the shop: the subscription is cancelled and the storefront goes offline. Your shop's data is kept for 60 days so you can change your mind and reactivate; after that it is eligible for deletion and may be deleted at any time — or sooner if you ask. Records a shop must keep for tax or accounting purposes may be retained for as long as the law requires. Staff accounts can be removed by the owner at any time.

For a shop's customer, the shop decides, because it is the business that sold to you; we act on its instruction. Artwork on an order is kept for 60 days from the order date so it can be reordered, after which it may be deleted at any time and is deleted on request. Artwork uploaded but never ordered is removed after about 48 hours anyway.

4. How to Submit a Request

Email info@dtfcheckout.com with the subject "Data request", from the email address on the account. Tell us which shop you are (or which shop you ordered from) and what you are asking for. We verify your identity through that mailbox — we may reply to the address on file and ask you to confirm from it — and we will not act on a request we cannot verify.

We respond within 30 days, or sooner where the law requires. If a request is complex we may take longer and will tell you why.

5. California Residents

Under the CCPA/CPRA you have the rights to know, delete, correct and port your personal information, to opt out of sale or sharing (we do neither), to limit the use of sensitive personal information (we collect none beyond account credentials), and not to be discriminated against for exercising them. You may use an authorised agent; we will ask for proof of the agent's authority and may still verify your identity directly.

6. EU and UK Residents

Under the GDPR and UK GDPR you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent where we rely on it. You may also complain to your local supervisory authority. If you ordered from a shop, the shop is the controller and we are its processor; we will pass your request to it. Authorised agents are accepted with proof of authority.

7. Do Not Track

We do not track people across other websites, so there is nothing for a browser's "Do Not Track" or Global Privacy Control signal to switch off on our side. Pixels or scripts a shop adds to its own storefront are the shop's; ask the shop how it honours those signals.