Privacy Policy

Who we are

Heritage Shapes makes custom printing and packaging. Production is in Pakistan and operations are run from the United Kingdom. Heritage Shapes is responsible for the personal information described in this policy. You can reach us at hello@heritageshapes.com.

What we collect

• Quote requests and messages: your name, company, email address, country, the products and options you choose, quantities, the name of any artwork file you mention, and your message.
• Newsletter: your email address.
• Your account: your email address, password (stored only in encrypted form by our login provider), name, company and phone number if you add them, your saved designs, your credit balance and your quote requests.
• AI Studio: the logo files you upload, the product options you choose, and the images created for you. Uploaded logos are re-saved as clean image files and stored privately.
• Usage limits and security: to stop the free AI Studio previews being misused, we keep a one-way scrambled (hashed) version of your internet address and a random visitor ID in a cookie. We do not store your internet address itself for this purpose.
• Analytics (only if you agree): pages visited, how you arrived, approximate location, device and browser type, collected by Google Analytics.

Why we use it

• To reply to your enquiries, prepare quotations and follow up on them (steps you ask us to take before a contract, and our legitimate interest in running our business).
• To provide your account and the AI Studio, including creating images of your logo on our products (to provide the service you asked for).
• To prevent abuse of free features and keep the site secure (our legitimate interest).
• To send the newsletter you signed up for. You can ask us to stop at any time.
• To understand how the site is used and improve it, using analytics only when you have agreed to analytics cookies (your consent).

Who helps us process it

We use trusted service providers who process information on our behalf and only for the purposes above:

• Supabase: our database, login system and private file storage.
• Vercel: hosting for the website.
• Google (Gemini API): when you create a design in the AI Studio, your logo and the chosen product options are sent to Google’s image model to produce the picture.
• Google Analytics: website statistics, only with your consent.
• Resend and ImprovMX: sending and forwarding our emails, including notifications about your enquiry.

We do not sell your personal information. We share it with others only when the law requires us to.

Where it is stored

Our providers may store and process information outside the United Kingdom and the European Economic Area, including in the United States and Asia. Where that happens, we rely on the safeguards those providers offer for international transfers, such as standard contractual clauses.

How long we keep it

• Enquiries and quotations: for as long as needed to deal with them and maintain our business records.
• Accounts, saved designs and uploaded logos: until you delete them or ask us to close your account.
• Designs made without an account: linked to a random visitor ID; ask us if you would like them removed.
• Analytics data: according to the retention period set in Google Analytics.

Cookies and similar storage

• Essential: keeping you logged in, remembering your free AI Studio previews, remembering your light or dark theme, and remembering your cookie choice. The site cannot work properly without these.
• Analytics (optional): Google Analytics cookies, set only if you click “Accept” on the cookie banner.

You can change your choice at any time: Cookie settings.

Your rights

Depending on where you live, you can ask to see the information we hold about you, correct it, delete it, restrict or object to how we use it, or receive a copy. Where we rely on consent, you can withdraw it at any time. To make a request, email hello@heritageshapes.com. If you are in the UK you can also complain to the Information Commissioner’s Office (ico.org.uk), or in the EU to your local data protection authority.

Children

Our services are for businesses and are not intended for anyone under 16.

Changes

We may update this policy as the site changes. The date at the top shows the latest version. See also our Terms of Use.