Privacy policy

The free tools upload nothing

This is the part most people want to know, so it goes first. The prepress tools — bleed and trim marks, resolution checking, safe area, resizing, cut contours, logo vectorising, adding dimensions to a photo — run entirely inside your browser tab.

There is no upload endpoint. Your artwork is never transmitted to us or to anyone else, we never see it, and closing the tab is all it takes to be rid of it. That is a property of how the tools are built, not a promise about how we behave.

What we collect, and when

We only collect personal information when you give it to us:

• When you request an order or send an enquiry — your name, email, and optionally a business name, phone number and delivery suburb, plus whatever you write in the message.
• Artwork you attach to an enquiry. This is different from the tools above: files attached to the order form are sent to us deliberately, because we need them to quote and print your job.
• A quote from another supplier, if you send us one. Compare a quote invites you to show us a price you have already been given. We read it to answer you, and we keep it — see what we do with another printer’s quote below, because that one deserves its own answer.
• Order and invoice records once you become a customer, which we are required to keep for tax purposes.

We do not require an account to use this site, and no page on this site asks for card details. If you pay an invoice by card you do it on Stripe’s own payment page, and your card number goes to Stripe, not to us — see paying for an order below.

Why we hold it, and who sees it

We use your information to quote your job, produce it, deliver it, invoice it, and talk to you about it. That is the whole list.

To produce your job we share what is necessary with the print partner running it — typically your artwork, the specification and the delivery address. They are bound to use it only for producing your work. Couriers receive your delivery address and contact number so they can deliver.

If you pay by card, Stripe processes the payment. Stripe Payments Australia receives what a card payment needs — the amount, your card details, your email address for the receipt, and the invoice reference — and handles it under its own privacy policy. Stripe also uses card and device information to screen payments for fraud. If you pay by bank transfer, Stripe is not involved.

We do not sell your information, we do not trade it, and we do not add you to a marketing list because you asked for a quote. There is one marketing list, you have to ask for it twice to be on it, and it is described in full below.

The newsletter

Ordering does not put you on it, and neither does asking for a quote. The only way onto our email list is the form at /newsletter/, where you tick a box that we never tick for you, and then click a link in an email we send to that address. Until you click that link you are not subscribed, and if you never click it we never email you again. That is deliberate: it is what stops somebody putting your address on our list.

What we store, and why it is more than the address. We keep your email address, the date and time you subscribed, the IP address you subscribed from, and the browser you used. We keep that because the law that governs marketing email in Australia puts the burden on us to show that you consented — so we keep the record of how and when, not just the result.

Leaving takes one click. Every email carries an unsubscribe link at the bottom that works immediately, with nothing to confirm and no reason to give; your email program’s own unsubscribe button works too. One thing worth being straight about: when you unsubscribe we record that you left, and we do not erase the record that you had joined. Keeping the proof of consent is the whole point of having it, and it has to outlive your leaving. If you want that record erased as well rather than just stopping the email, ask us and we will, unless it is attached to something we are required to keep.

Your order emails, proofs, tracking links and invoices are not marketing and are not part of this list. They are about the job you ordered, and unsubscribing from the newsletter does not stop them.

Paying for an order

Nothing is charged when you place an order. After you have approved your proof we email you a tax invoice. You can pay it two ways:

• Bank transfer, to the details on the invoice, quoting its reference. We then see what any supplier sees on a bank statement: that a payment arrived, from what account name, with what reference. We do not ask for and cannot access your banking login.
• Card, through the “Pay this invoice” link on the invoice. It opens a payment page run by Stripe, on Stripe’s own web address, for the exact amount of that invoice. Stripe takes your card details, not us: we see that the invoice was paid, the amount, your name and email, the card brand and its last four digits — never the full card number, its expiry or the security code. Stripe emails you the card receipt; your tax invoice is still ours.

No payment script runs on this site. There is no card field, no third-party payment JavaScript, no payment cookie and no payment tracking on any page here. Stripe’s payment page sets its own cookies for security and fraud checks, on its own address, under its own policy. The cookies and analytics section below is the whole picture for this site.

What we do with another printer’s quote

We never publish it, never name the printer who wrote it, and never pass it on — not to another customer, not to a supplier, and not in any comparison we show anybody. If you would rather cover the other company’s name before you send it, do; the specification is the part we need.

We do keep it, and here is the honest reason. Seeing what real jobs are really priced at is how we keep our own prices sane, so quotes you send us inform what we charge everyone. They are held with your enquiry, not in any shared or public place, and they are never attributed to you or to the printer who wrote them. Ask us to delete yours and we will.

How long we keep it

Enquiries that do not become orders are kept while they might still turn into one, then deleted. Order records and invoices are kept for seven years, because Australian tax law requires it. Artwork is retained so you can reorder the same job later — ask us to delete yours and we will, unless it is attached to a record we must keep. Newsletter consent records are kept for as long as we run the list, including after you leave it, for the reason given in that section.

Security

The site is served over HTTPS. Enquiries and any attached artwork are stored on our hosting outside the publicly reachable part of the server. No system is perfect, and we will tell you promptly if something happens that affects your information.

Cookies and analytics

This site runs Google Analytics, and it sets cookies. Until 11 September 2026 it did not, and this page said so; that changed and this section changed with it.

Since 27 September 2026 it also runs Google Ads conversion measurement, because we now advertise on Google and need to know whether an ad led to anything. It uses the same Google tag as Analytics. When you arrive from one of our ads, Google sets a cookie recording that click; if you then place an order or send us a request, the thank-you page tells Google Ads that it happened — for an order, with the order reference and total, and nothing else. It does not send your name, email, phone, address or what you ordered. Google may also use the visit, under its own terms, to decide which people are shown our ads. The same opt-outs below apply, and Google’s My Ad Center controls the ads you see from anyone.

Google Analytics records which pages you looked at, roughly where in the world you are, what kind of device and browser you used, which site or search sent you, and how you moved from one page to the next. When you tap one of our WhatsApp buttons it also records that a tap happened and which button it was — nothing about what you then write, which goes to WhatsApp and never through this site. It stores a couple of cookies in your browser so that a second visit is recognised as the same browser returning rather than a new person. Google processes this on our behalf, and also uses it under its own terms; Google states that it does not log or store individual IP addresses in Analytics, using them to work out an approximate location and then discarding them. We use it to see which guides and products people actually arrive on, which is the one thing our own records cannot tell us reliably.

If you would rather not be counted, Google publishes a browser add-on that opts you out of Analytics on every site that uses it, and blocking third-party scripts or using your browser’s tracking protection has the same effect here. Nothing on this site stops working if you do — the cart, the tools and the proofing all run without it.

Your cart is stored in your own browser, in local storage rather than in a cookie or an account. It holds what you configured — product, quantity, options — and it is not sent to us until you place an order. Clearing your browser data clears it, and nothing about it reaches our server, or anyone else’s, in the meantime.

We do keep a first-party, self-hosted record of page visits — which pages were viewed, a coarse device category, roughly how long each page was open in front of you (a count of seconds that the page itself sends as you leave it or switch away, so we can tell a page that was read from one that was closed at once), and whether a visit led to a quote request. Referrers are handled differently depending on where they come from: from another site, we record the domain only, never the full URL; moving between our own pages, we note which page sent you to the next one (just the path, never a query string), so we can see how the guides and tools connect through to an order. We also note which kind of thing was tapped on a page — a product link, a guide, the phone number, the WhatsApp button, “get a quote”, the first field of a quote form — never which product or what was typed, and how far down the page was scrolled, in fifths. If a link carries campaign tags such as utm_source or utm_campaign — the kind used in an ad or a bio link — we record those tags too. We also log any path that returns “page not found”, so broken links get found and fixed.

To count roughly how many different people visit each day without tracking anyone individually, we derive a one-way hash from your IP address, browser and the date; because the date is baked into it, the hash changes every day and cannot be used to recognise the same visitor tomorrow, and it cannot be reversed back to an IP address. We do not store your IP address or full browser string, we do not use this to follow you across other sites, and nobody outside HSH Prints and Signages sees it.

We also record an approximate location — your country, generally your state or territory, sometimes your city, never anything more precise. The site is delivered through Cloudflare’s content network, which sees the address a request comes from in order to route it, as any network in between does; Cloudflare works out that approximate location at its edge and passes it to us as a label alongside the request. We keep the label, not the address it came from. Cloudflare sets no cookies on this site as we have it configured.

Ratings on the free tools. After one of the tools has produced a result, it may ask how it did. If you answer, we keep the tool’s name, the star count, anything you typed, an approximate location worked out the same way as page visits, and the same one-way same-day hash — no name, no email, no IP address. The star counts are shown on that tool’s page once there are enough of them; a comment is shown there only after we have checked it for abuse; a suggestion is read by the desk and never published. Your browser remembers that you answered, in local storage, the same way it remembers the cart.

Where an order stops. Alongside page visits we record five plain steps — something was put in a basket, the cart was opened with something in it, the checkout was reached, the order button was pressed, the order was placed — so we can see which step people give up at and fix it. Each one records the step, the page it happened on, the same approximate location and the same one-way same-day hash. It does not record what you configured, how much it cost, or anything you typed. If you go on to place an order, the order itself is the record of what you bought; if you do not, all that survives is that somebody reached that step.

If what we measure changes again, we will update this page first and disclose exactly what is added.

Accessing or correcting your information

You can ask what we hold about you, ask for it to be corrected, or ask us to delete it. Email hello@hshprints.com.au or contact the desk and we will respond within a reasonable time. If you are not satisfied with how we handle a privacy issue, you can escalate it to the Office of the Australian Information Commissioner.

Ready to order? See products and prices, or read the terms of sale.