What we collect, why, who sees it, and how long it stays. Short, because there is not much.
Your activity data
When you connect Strava, your activities come from Strava through the Studio’s server, which passes them to your browser to draw the print and keeps none of them. The Studio keeps the prints you are working on in your browser, activities included, for up to 30 days. When you order or save a print, the finished print file and a short summary — activity name, date, distance, and the race if one was recognised — come to us so we can make it. Photographs you add to a print come to us as part of that file. You can disconnect Strava at any time in the Studio or at strava.com; we access it only through Strava’s API, under their terms.
A place you search for in the Studio is looked up by the Studio’s server, through OpenStreetMap-based services (and postcodes.io for a UK postcode). The old maps of the Historic Print load in your browser straight from the National Library of Scotland.
Your order
To make and deliver a print we collect your name, delivery and billing address, email address and, if you give it, a phone number for the courier. Card payments are taken by Stripe; your card number never reaches us. We keep order records for six years, as tax law requires. The print file, and any photograph you added to it, is kept for twelve months after your order so a print can be replaced or reordered, and is then deleted. A photograph you upload but never order is deleted after 30 days.
Who we share it with
- Our print partner (Prodigi) receives your name, delivery address and the print file, to print, frame and post it.
- Stripe processes payment.
- Cloudflare and Railway host the store and the Studio.
- Brevo sends our emails, so it receives your email address and the message.
- Google Analytics, Meta and TikTok receive usage and purchase events if you accept analytics and advertising cookies. When you do, a purchase is also reported to them from our server with your email address, phone number, name and address each turned into a one-way code (hashed), plus your IP address and browser, so it can be matched to an ad you saw. With “Essential only” none of that is sent. Google Analytics still loads, but in Google’s consent mode: it sets no cookies and sends only anonymous signals that a page was viewed, with nothing that identifies you or follows you between visits. Meta’s tag, where we use it, loads but sends no events; TikTok’s does not load at all.
We do not sell your data and we do not share it with anyone else.
We email you about your order: confirmation, dispatch and tracking, a gift card if you bought one. We email you about anything else — a race anniversary, a new style — only if you tick the box at checkout, and every such email carries an unsubscribe link that works in one click. If you type your email at checkout and leave without paying, we may send one reminder within a day; the notice above the form says so.
Cookies
Essential cookies keep your cart and your session working and are always on. Analytics and advertising cookies are set only after you accept them in the banner; you can choose “Essential only” and the store works exactly the same. Your choice is remembered for six months.
Saved prints
If you email yourself a print from the Studio, we keep the print and your address for 30 days and then delete them. A reminder is sent only if you asked for one. If you share a print with someone, we keep their address for 30 days too and send them one short note with a link to the print — nothing you type goes in it — and never write to them again.
Your rights
Under UK data protection law you can ask for a copy of what we hold about you, have it corrected or deleted, or object to how it is used. Email [email protected] and we will act within a month. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Who is responsible
Contour Prints, run by Joe Lines in the United Kingdom, is the data controller. Contact: [email protected].
Last updated 16 September 2026.