Vista Privacy and Cookie Policy
Last updated May 22, 2024
This Vista Privacy and Cookie Notice (“Privacy Notice“) describes how Vista and its signature services, including VistaPrint, VistaCreate 99designs by Vista and Vista Corporate Solutions (collectively, “Vista“, “we“, “our” or “us“), collects, uses and shares your personal information when you use and access our websites and mobile sites (“Sites“), applications (“Apps“), services and other tools we offer (collectively “Vista Services”). This Privacy Notice also gives information about the rights and options you have to control your personal information.
This Privacy Notice applies to all users of our Vista Services, including unregistered and registered consumer users, business users, and employee of a business users, designer contributors, customers and potential customers (collectively, “user”, “you” or “your”), and to all Vista Services that link to this Privacy Notice.
Please keep in mind that this Privacy Notice does not apply to personal information collected by third-party websites and apps that may post links or advertisements on or otherwise be accessible from our Sites and Apps. We advise you to read the privacy notices of these third parties when you visit their websites or apps in order to understand how such third parties collect and use your personal information.
Content
This Privacy Notice will give you information about:
Who is responsible for collecting and using your personal information
What personal information we collect
Why we use your personal information
With which parties we share personal information
How we transfer personal information internationally
How to exercise your rights
How we protect and store personal information
How we handle personal information of children
The roles and responsibilities for business users for which we act as service provider or processor
How we use cookies
How to contact us
Changes to this Privacy Notice
Additional information for US users
We encourage you to read this Privacy Notice carefully and to consult it on a regular basis when using the Vista Services. If you have any questions about this Privacy Notice or our privacy practices, please contact us by emailing [email protected].
Who is responsible for collecting and using your personal information
Cimpress Schweiz GmbH and the Cimpress group companies listed below provide the Vista Services and are independently responsible for collecting, using and disclosing your personal information when providing you with the Vista Services you requested. Cimpress Schweiz GmbH and the other Cimpress group companies listed below work together to bring your print, digital and design needs all over the world. Where Cimpress group companies are jointly responsible for using your personal information to bring you with specific Vista Services, appropriate arrangements are in place and you can reach out to each Vista entity to enforce your privacy rights. Depending on the Vista Service you use and your location, the relevant Cimpress companies who are responsible for the can be found below. Regardless of the Vista Service you have used or the Cimpress company responsible for providing the Vista Service, you can reach out to us at any time by sending an email to [email protected].
| Vista Services | User Location | Responsible Cimpress company |
|---|---|---|
| Vista account | Global | Cimpress Schweiz GmbH, Talacker 41, 8001 Zürich, Switzerland Contact us by sending an email to [email protected] |
| VistaPrint Services | If you reside in the European Economic Area (“EEA”), UK, or Switzerland | Vistaprint B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands Contact us by sending an email to [email protected] |
| If you reside in the United States | Vistaprint Netherlands B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands Contact us by sending an email to [email protected] | |
| If you reside in Australia, New Zealand, or Singapore | Vistaprint Australia Pty Limited, 66 Paramount Boulevard, Derrimut, Victoria 3030, Australia Contact us by sending an email to [email protected] | |
| If you reside in Canada | Vistaprint Canada Corporation 333 Bay Street, Suite 2400 Toronto, Ontario. M5H 2T6, Canada Contact us by sending an email to [email protected] | |
| If you reside in India | Cimpress India Private Limited, ‘C’ Block, Voltas Premises,T. B. Kadam Marg, Chinchpokli, Mumbai -400 033, Maharashtra, India Contact us by sending an email to [email protected] | |
| For all other countries | Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used. | |
| VistaCreate Services | Global | Crello Limited, 1 Anastasi Sioukri, Themis Court, 4th floor, Office 402, 3105 Limassol, Cyprus Contact us by sending an email to [email protected] |
| 99designs by Vista Services | Global, except United States | 99designs Pty Limited, Level 2, 41-43 Stewart Street, Richmond, VIC 3121, Australia Contact us by sending an email to [email protected] |
| United States | 99designs LLC, 275 Wyman Street, Waltham, MA 02451, United States Contact us by sending an email to [email protected] | |
| Vista Corporate Solutions Services | If you reside in the United States or Canada | Vistaprint Corporate Solutions Incorporated, c/o 275 Wyman Street, Waltham, MA 02451 United States Contact us by sending an email to [email protected] |
| If you reside in Australia | Vistaprint Australia Pty Limited, 66 Paramount Boulevard, Derrimut, Victoria 3030, Australia Please use our US postal address for post communications: c/o 275 Wyman Street, Waltham, MA 02451 United States Contact us by sending an email to [email protected] | |
| If you reside in the European Economic Area (“EEA”), UK, or Switzerland | Vistaprint Corporate Solutions UK Limited, c/o Cogency Global (UK) Limited, 6 Lloyds Avenue, Unit 4CL, London EC3N 3AX Please use our US postal address for post communications: c/o 275 Wyman Street, Waltham, MA 02451 United States Contact us by sending an email to [email protected] | |
| For all other counties | Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used. | |
| Other Vista Services | Global | Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used. |
What personal information we collect
Personal information is all information that identifies you directly or in combination with other information. Personal information does in general not include information concerning a legal person or entity.
Vista offers you a wide range of services to bring together your print, digital and design needs. Depending on how you use the Vista Services, we collect and use personal information that you provide to us, automatically or otherwise. If you are a registered user, we link personal information that we automatically collect when you use the Vista Services to other personal information we collect about you. Below we explain which personal information we collect and use, and for which purposes.
| Categories of personal information | Description |
|---|---|
| Account Information | Personal information we collect when you register for an account on our Sites and Apps, including: – first and last name; – e-mail address; – password. |
| Technical Information | Personal information we automatically collect when you visit, access or navigate our Sites and Apps, including: – your IP address; – information about your computer’s hardware and software (for example, the type of operating system, the browser you use, the versions of the application or software, and language settings); – location information (inferred from your IP address, such as country, state and/or city); – URL requested; – log information; – browser type; – browser history (such as the webpage that led you to our Sites and/or Apps); – online identifiers such as cookie data or data collected with other similar technologies. For more information about how we use these technologies, please see How we use cookies below. |
| Usage Information | Personal information we automatically collect about your activities on our Sites and Apps, including: – the date, time and pages you visit; – how you use our Vista Services and access its contents (such as search history, clickstream data, access logs and other usage data regarding your interactions with our Sites and Apps, and our marketing emails and online ads); – session replay recordings (such as mouse movements, clicks, key touches, typing, and scrolling). |
| Transaction Information | Personal information you provide when you place an order or request a Vista Service, including: – your shipping, billing, and payment information (such as credit card or bank account details). You can also choose to store your credit card or other payment information in your Vista account to make it easier to purchase products or services from our Sites and Apps in the future; – tax information and information to verify your identity where required by local laws (such as passport, ID card or driver’s license information); – purchase and transaction history; – telephone number; – email address. |
| Content Information | Personal information you provide when you upload and share content (“Content”) with us or other users within our Sites and Apps or to personalise products and services, including: – images; – photos; – logos; – videos; – music tracks; – content related information such as time and place of the content creation, tags and similar information stored by your device; – content of reviews you write; – any other content you choose to upload when using the Vista Services. |
| Profile Information | Personal information you share with us when you create a profile, including: – your gender; – country; – preferred language; – other information about your interests and preferences, including favourite templates and work on designs or products; – content you choose to make available to other users, such as your professional background, time zone, location, avatar, design concepts and templates, service offerings, and messages and testimonials. |
| Communication Information | Personal information you provide and we automatically collect when you contact our customer service teams (e.g. chat(bot), email or phone) or communicate with us by other means (e.g. social media, text), including: – first and last name; – email address; – phone number; – subject matter; – description; – content of correspondence; – data exchanged with you by telephone, chat or other means of communication; – call recordings. |
| Marketing Information | Personal information you provide to receive marketing materials about our products and services, including: – name; – email address; – phone number; – marketing and communication preferences; – social media profile(s). |
| Forms Information | Personal information you provide when you choose to participate in sweepstakes, contests or surveys, including: – name; – email address; – phone number; – other relevant personal information as explained in the sweepstake, contest or survey. If you participate, we may publicly disclose that information. |
Personal information we receive from other sources
Vista may also obtain information about you that is publicly available or from other sources, such as independent third parties, business partners or Cimpress group companies. Any information we receive from these sources is combined with the personal information you provide to us for the purposes described in this Privacy Notice. The below overview sets out which personal information we receive from third parties.
| Categories of third parties | Description | Categories of personal information |
|---|---|---|
| Postal service providers | We may need to collect data, (e.g. name and postal address information) to validate your postal address | Transaction Information |
| Security providers, fraud detection and prevention providers | In certain instances, and as permitted by applicable law, we may need to collect your personal information to help us screen users for fraud detection and prevention purposes | Account Information Technical Information Usage Information |
| Social media platforms | We collect your personal information (e.g. email, username, account information, profile photo) when you log in or sign-up using your social media account | Account Information Profile Information |
| Advertising and marketing partners | We receive your personal information from advertising and marketing partners to monitor, manage and measure our ad campaigns and serve you more relevant advertising | Technical Information Usage Information Marketing Information |
| Lead enhancement companies | In some cases, we collect personal information (e.g. name, email, address, phone) from lead enhancement companies to help us improve our service offering | Account Information Usage Information Profile Information |
Personal information you give us about others
The Content you choose to upload to our Sites and Apps may include personal information of other individuals. If you choose to share your Content or other information with someone else through a feature we offer, or participate in our referral program, we will use the personal information you provide (for example, the email address of the recipient) to fulfil your request and the specific service requested. Please make sure other individuals are aware of and agree with the sharing of their personal information with us.
WHY WE PROCESS YOUR PERSONAL INFORMATION
In the overview below we explain which personal information we use and how and why we use it.
| Purpose of processing | Categories of personal information | Corresponding legal basis |
|---|---|---|
| Creating, managing and maintaining your Vista account and facilitate integrated services | Account Information Technical Information Usage Information Content Information Profile Information | This is necessary for us to fulfil our contract with you to create, manage and maintain your Vista account and facilitate integrated services, including: – single-sign on; – allowing you to log in; – navigate the Sites and Apps; – verify your identity; – store your uploads and designs; – provide technical support. |
| To provide you with the Vista Services | Account Information Technical Information Usage Information Transaction Information Content Information Profile Information Communication Information | This is necessary for us to fulfill our contract with you. For example, to: – enable you to access and use our Vista Services, including uploading, downloading, collaborating on and sharing Content; – process, manage and deliver your purchase order. Further, it is our legitimate business interest to: – provide you with experiences, products and services you request, view, engage with or purchase; – maintain and administer our Vista Services. |
| To provide you with a helpful and seamless customer support experience | Account Information Technical Information Transaction Information Content Information Profile Information Communication Information | It is our legitimate business interest to provide you with a helpful and seamless customer support experience, including by: – sharing relevant data with our Customer Care team to address your questions and needs; – monitoring or recording calls and chats with our Customer Care team for quality control and training purposes. Where required by applicable law we will ask for your prior consent for specific processing activities |
| To provide you with a personalized user experience | Account Information Technical Information Usage Information Content Information Profile Information | It is our legitimate business interest to provide you with personalized services, including: – conducting marketing and/or market research; – to personalize our communications with you; – to tailor the content you see in order to provide features and information that match your interests and preferences; and – to group users of our Vista Services based on, for example, usage and demographics. Where required by applicable law we will ask for your prior consent for specific processing activities. |
| To analyze customer usage patterns, conduct research, improve and develop our products, features and Vista Services | Technical Information Usage Information Content Information Profile Information Communication Information Marketing Information | It is our legitimate business interest to analyze, develop and improve our Vista Services (including by understanding how you use the services) and to develop new features, services or products. Where required by applicable law we will ask for your prior consent for specific processing activities. |
| Supporting collaboration, networking, and projects | Account Information Content Information Profile Information | This is necessary for us to fulfil our contract with you to enable you to communicate, collaborate and share Content with users you designate, to enable you to connect with designers, to submit projects and receive bids for design services and to otherwise connect users and designers or other providers. |
| To create profiles and market our activities and promote our products and Vista Services (including providing co-branded offers with our partners or affiliated Cimpress companies) | Content Information Profile Information Marketing Information Forms Information | It is our legitimate business interest to market our activities and promote products and services, including to send you offers and promotions of our products and services or products and services offered by our partners or other Cimpress group companies. Where required by applicable law we will ask for your prior consent for specific processing activities. |
| To protect, establish, exercise or defend our and third parties’ rights, and to defend against lawsuits | Account Information Technical Information Usage Information Transaction Information Content Information Profile Information Communication Information | It is our legitimate business interest to protect our interests and rights, and the rights and interests of third parties, for instance to defend our rights in legal proceedings. |
| To secure our Vista Services and data processed via our Vista Services, and to prevent, detect, and investigate unlawful or unwanted behavior, including crime and fraud, within or related to the Vista Services and the products we provide | Account Information Technical Information Usage Information Transaction Information Content Information Profile Information Communication Information | It is our legitimate business interest to keep the Vista Services safe, to prevent, detect and investigate unlawful or unwanted behavior, and to protect our and third parties’ rights and interests. |
| To comply with legal and regulatory requirements, and cooperating with regulators and government authorities | Account Information Technical Information Usage Information Transaction Information Content Information Profile Information Communication Information | We process your personal information to comply with our legal obligations, and to cooperate with regulators and government authorities where required by law or when we have legitimate business reasons to do so. |
With which parties we share personal information
Where relevant and necessary, we provide your personal information to the following trusted third parties or service providers:
- Third party service providers to support us in operating our Sites and Apps, and providing the Vista Services, including website and platform hosting companies, IT service providers, marketing and analytics providers, payment processors, fraud detection and prevention companies, order fulfilling and delivering service providers, session replay and chat technologies providers and other commercial partners to provide and improve our Vista Services.
- Group companies that support us providing the Vista Services and the processing of your personal information for the purposes described in this Privacy Notice.
- Our partners if you choose to receive products or services of our partners. In such case, our partners have access to and process your personal information. We also share your personal information where you direct us as part of the Vista Services to share your personal information with another user or to a third-party service provider in order to integrate our Vista Services with a service that such user or third party may provide, for example with a third-party printing partner, third-party designs who may assist you with your website, logo or product designs, website builder or web development service provider so that they can provide you with a service.
- Law enforcement agencies, courts, regulators, government authorities, and other similar public authorities or third parties when this is necessary to comply with a legal obligation or when we have legitimate business interests to do so, for instance to protect our or a third party’s rights and interests.
- Professional advisors when we have legitimate business interests to do so, for instance to obtain legal advice or to assist us with a criminal or regulatory investigation.
- Third parties in connection with investments, reorganizations, restructurings, mergers, bankruptcy, insolvency event, joint ventures, sale of shares or assets or similar events involving us. It is our legitimate business interest to share relevant and necessary data to enable such investments, reorganizations, restructurings, mergers, bankruptcy, insolvency event, joint ventures, sale of shares or assets or similar events.
How we transfer personal information internationally
Vista is an international company and operates globally. We therefore transfer or store your personal information globally, including but not limited to the United States of America, Australia, Brazil, Jamaica, Tunis and the Philippines. Such countries may provide a lower level of data protection than your country. For example, Cimpress group companies, third-party service providers, or partners may be located outside of the EEA, the United Kingdom or Switzerland. Where required by applicable data protection laws, we put in place appropriate safeguards to make sure your personal information is adequately protected, for instance by putting in place Standard Contractual Clauses as approved by the European Commission, by examining the countries to which the data is transferred, and by imposing specific technical and organisational security measures if needed.
If you would like to receive additional information on the transfer of your personal information or the transfer mechanisms used, please contact us by sending an email to [email protected].
How to exercise your rights
You have certain rights to control how your personal information is used. Depending on the applicable law, these may include the right to:
- Access: access your personal information and obtain a copy of the personal information we hold about you;
- Rectify: correct or update inaccurate or incomplete personal information;
- Erasure: in certain situations, request that we erase your personal information;
- Object: in certain situations, object to the processing of your personal information;
- Portability: in certain situations, receive your personal information in a re-usable electronic format;
- Restrict: in certain situations, restrict or block the processing of your personal information;
- Withdraw consent: withdraw your consent where we processed your personal information based on your prior consent.
We may ask you to verify your identity before taking further action on your request.
We also rely on you to make sure that the personal information you provide is complete, accurate and up-to-date. Please let us know of any changes to or inaccuracies of your personal information by sending an email to [email protected].
If you have a Vista account, you can access, update and remove the personal information available in your account and change your preferences by going to your account settings page. You can also contact our Customer Care team by using any of the methods listed in the How to contact us section below.
Opt-out of marketing communications
You can change your marketing preferences at any time by either clicking the “unsubscribe” link at the bottom of any marketing email, by changing your marketing preferences through your Vista account settings, or by contacting the Customer Care team.
Even if you choose to unsubscribe from receiving advertising via email, telephone or by post, we may still communicate with you using any of these methods regarding your orders, your Vista account or for other administrative purposes (such as communications related to a pending order, an unresolved customer service issue or a policy update). If you do not want to receive any communications from Vista, please delete your Vista account.
What happens when you request your account to be deleted?
After we have verified your identity in response to your deletion request, we will close your Vista account and erase your personal information from our systems. Please note however that we may be allowed or required by law to keep certain information (e.g. records of transactions or shipments), for instance to comply with legal record keeping and tax obligations.
After we process your deletion request, you will immediately lose access to:
- Your Vista account;
- Your Vista account login and password;
- Order history with any Vista Services;
- Products you have designed and stored, and Vista Services you have used;
- Uploaded images, any stored designs and other Content with any Vista Services.
Please be aware that deleting your Vista account is a permanent change and cannot be reversed.
Lodge a complaint
We are committed to handling your queries and complaints as best as we can. We encourage you to address any concerns or issues with us first by emailing [email protected], so that we can try to resolve it in a timely and effective manner. You also have the right to file a complaint with your local supervisory authority at any time.
How we protect and store personal information
Vista has implemented technical and organisational security measures to protect your personal information. These measures are aimed at ensuring the integrity, confidentiality and availability of your personal information and to protect it against unlawful or unauthorized destruction, loss, alteration, use or disclosure, or access. These measures include but are not limited to encryption methods, access controls, controlled administration of user rights and limiting access to personal information on a need-to-know basis. We evaluate and update these measures on a regular basis.
We encourage you to also take the security of your personal information seriously and select a strong password when creating a Vista account and not sharing it with others. You may change your Vista account password as often as you wish by going to your ‘Account Settings’. If you have reason to believe that the security of your account might have been compromised (for example, your password has been leaked) or if you suspect someone else is using your account, please let us know immediately.
We take information security and privacy seriously, and our goal is to provide a safe and secure site for all users. To achieve this goal, we have implemented a security program to identify and remediate security issues and we utilise external security researchers to report vulnerabilities. If you believe you have identified a security issue on our Sites or Apps, please contact [email protected].
We will retain your personal information for the duration of our relationship, unless a shorter retention period is required by law or the data is no longer necessary for the purposes for which we processed your data. Once our relationship with you has come to an end, we will retain your personal information for the period of time that enables us to:
- check our records of transactions or shipments;
- fulfil our legal obligations, including legal retention periods;
- initiate, investigate or defend against legal claims;
- address your questions, requests or complaints; and
- keep our records for analysis and audit purposes.
How we handle personal information of children
The Vista Services are not targeted at or meant for use by children under the age of sixteen (16) years old, and children under that age are prohibited from creating an account or otherwise providing their personal information. If we become aware that a child under the age of sixteen (16) has provided personal information through our Sites and/or Apps, we will delete their personal information. We ask parents or guardians to contact us at [email protected] if they become aware that their child has shared their personal information with us.
The roles and responsibilities for business users for which we act as service provider or processor
We provide our business users with specific services on their websites for which we act as service provider or processor. We collect personal information of visitors and users of the business user’s websites or services (“End Users Information“), only as instructed by and on behalf of the business user. For example, business users are able to add a contact form on their website. Any personal information submitted by visitors of the website of the business users are then stored with Vista on the business user’s behalf. For such purposes, Vista acts as service provider or processor on the business user’s behalf when processing End Users Information and will act in accordance with the data processing agreement between Vista and the business user. Business users will be solely and independently responsible for the collection and use of End Users Information by using Vista Services and are responsible for complying with applicable data protection laws.
How we use cookies and other similar technologies
We use cookies, pixels and other similar technologies (collectively referred to as “cookies”) to provide and improve our Vista Services, to tailor your website experience and to show personalised ads. Cookies are useful because they allow a website to recognize a user’s device. To learn more about what type of cookies VistaPrint uses, please visit our Cookie Notice.
You can manage which cookies are placed on your device by:
- Using browser controls: The Help menu on the menu bar of most browsers will tell you how to enable or prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie and how to disable cookies altogether. You can also disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on’s settings or visiting the website of its manufacturer. Please be aware that if you disable or delete certain cookies our websites will not work properly.
- Third-Party Cookies: When you use our Sites and Apps, you may notice content provided by a company other than us. Also, if you ‘share’ Vista content with friends through social networks, such as Facebook and Pinterest, these social networks may place cookies on your browser. We have no access to or control over cookies used by these companies or third-party websites. If you’d like to opt out of cookies created by ‘sharing’ Vista content through social networks — such as Facebook and Pinterest — we suggest you check those third-party websites for more information about their cookies and how to manage them.
If you want to know more about Third-Party Cookies and how to opt out of them, see www.allaboutcookies.org and www.youronlinechoices.eu.
How to contact us
If you have general questions about the Vista Services or would like to update your marketing preferences, please reach out to the Customer Care team as listed below:
- For VistaPrint, please go to the “Help Center” or “Contact Us” page.
- For VistaCreate, please submit your request through https://support.create.vista.com/hc/en-us/requests/new/ or email at [email protected].
- For 99designs by Vista, please contact the Support & Contact | 99designs or email [email protected].
- For Vista Corporate Solutions, please send an email to [email protected].
If you have any questions about this Privacy Notice or our privacy practices, or would like to exercise your privacy rights, please contact us by emailing [email protected].
Users residing in the EU may also contact our EU representative at Vistaprint B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands.
Users residing in the UK may also contact our UK representative at Tradeprint Distribution Limited, 2 Fulton Rd, Dundee Scotland, UK, DD2 4SW.
Changes to this Privacy Notice
From time to time, we may change this Privacy Notice to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We reserve the right to modify this Privacy Notice at any time in accordance with the applicable law. If we do so, we will post the revised Privacy Notice and update the “Last Updated” date at the top, so please review it frequently. In case of material changes, we will also provide notice to you and, where required by applicable law, we will obtain your consent. We will send such notice by email to the last email address you provided to us, by posting the notice on our Sites and Apps, and/or by other means, consistent with applicable law.
ADDITIONAL INFORMATION FOR US USERS
Your California Privacy Rights
California Civil Code Section § 1798.83 permits users of the Site that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to [email protected].
Copyright © 2024 Vista Corporate Solutions. All rights reserved. Terms and Conditions | Privacy and Cookie Policy