Vista Privacy and Cookie Notice
Last updated: 7 October 2024
This Vista Privacy and Cookie Notice ("Privacy Notice") describes how Vista and its signature services, including VistaPrint, VistaCreate, 99designs by Vista, and Vista Corporate Solutions (collectively, "Vista", "we", "our", or "us"), collect, use and share your personal information when you use and access our websites and mobile sites ("Sites"), applications ("Apps") services, and other tools we offer (collectively "Vista Services"). This Privacy Notice also gives information about the rights and options you have to control your personal information.
This Privacy Notice applies to all users of our Vista Services, including unregistered and registered consumer users, business users and employees of business users, designer contributors, customers and potential customers (collectively, "user", "you" or "your"), and to all Vista Services that link to this Privacy Notice.
Please keep in mind that this Privacy Notice does not apply to personal information collected by third-party websites and apps that may post links or advertisements on or otherwise be accessible from our Sites and Apps. We advise you to read the privacy notices of these third parties when you visit their websites or apps in order to understand how such third parties collect and use your personal information.
Content
This Privacy Notice will give you information about:
- Who is responsible for collecting and using your personal information
- What personal information we collect
- Why we use your personal information
- With which parties we share personal information
- How we transfer personal information internationally
- How to exercise your rights
- How we protect and store personal information
- How we handle personal information of children
- The roles and responsibilities for business users for which we act as service provider or processor
- How we use cookies
- How to contact us
- Changes to this Privacy Notice
We encourage you to read this Privacy Notice carefully and to consult it on a regular basis when using the Vista Services. If you have any questions about this Privacy Notice or our privacy practices, please contact us by emailing [email protected].
Who is responsible for collecting and using your personal information
Cimpress Schweiz GmbH and the Cimpress group companies listed below provide the Vista Services and are independently responsible for collecting, using and disclosing your personal information when providing you with the Vista Services you requested. Cimpress Schweiz GmbH and the other Cimpress group companies listed below work together to bring your print, digital and design needs all over the world. Where Cimpress group companies are jointly responsible for using your personal information to bring you with specific Vista Services, appropriate arrangements are in place and you can reach out to each Vista entity to enforce your privacy rights. Depending on the Vista Service you use and your location, the relevant Cimpress companies who are responsible for the collection and use of your personal data can be found below. Regardless of the Vista Service you have used or the Cimpress company responsible for providing the Vista Service, you can reach out to us at any time by sending an email to [email protected].
Vista Services | User Location | Responsible Cimpress Company |
---|---|---|
Vista account | Global | Cimpress Schweiz GmbH, Talacker 41, 8001 Zürich, Switzerland Contact us by sending an email to [email protected] |
VistaPrint Services | If you reside in the European Economic Area (“EEA”), UK or Switzerland | Vistaprint B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands Contact us by sending an email to [email protected] |
If you reside in the United States | Vistaprint Netherlands B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands Contact us by sending an email to [email protected] | |
If you reside in Australia, New Zealand, or Singapore | Vistaprint Australia Pty Limited, 66 Paramount Boulevard, Derrimut, Victoria 3030, Australia Contact us by sending an email to [email protected] | |
If you reside in Canada | Vistaprint Canada Corporation, 333 Bay Street, Suite 2400, Toronto, Ontario, M5H 2T6, Canada Contact us by sending an email to [email protected] | |
If you reside in India | Cimpress India Private Limited, ‘C’ Block, Voltas Premises, T. B. Kadam Marg, Chinchpokli, Mumbai -400 033, Maharashtra, India Contact us by sending an email to [email protected] | |
For all other countries | Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used. | |
VistaCreate Services | Global | Crello Limited, 1 Anastasi Sioukri, Themis Court, 4th floor, Office 402, 3105 Limassol, Cyprus Contact us by sending an email to [email protected] |
99designs by Vista Services | Global, except United States | 99designs Pty Limited, Level 2, 41-43 Stewart Street, Richmond, VIC 3121, Australia Contact us by sending an email to [email protected] |
United States | 99designs LLC, 275 Wyman Street, Waltham, MA 02451, United States Contact us by sending an email to [email protected] | |
Vista Corporate Solutions Services | If you reside in the United States or Canada | Vistaprint Corporate Solutions Incorporated, c/o 275 Wyman Street, Waltham, MA 02451, United States Contact us by sending an email to [email protected] |
If you reside in Australia | Vistaprint Australia Pty Limited, 66 Paramount Boulevard, Derrimut, Victoria 3030, Australia Please use our US postal address for post communications: c/o 275 Wyman Street, Waltham, MA 02451, United States | |
If you reside in the European Economic Area (“EEA”), UK or Switzerland | Vistaprint Corporate Solutions UK Limited, c/o Cogency Global (UK) Limited, 6 Lloyds Avenue, Unit 4CL, London EC3N 3AX Please use our US postal address for post communications: c/o 275 Wyman Street, Waltham, MA 02451, United States | |
For all other counties | Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used. | |
Other Vista Services | Global | Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used. |
What personal information we collect
Personal information is all information that identifies you directly or in combination with other information. Personal information does in general not include information concerning a legal person or entity.
Vista offers you a wide range of services to bring together your print, digital and design needs. Depending on how you use the Vista Services, we collect and use personal information that you provide to us, automatically or otherwise. If you are a registered user, we link personal information that we automatically collect when you use the Vista Services to other personal information we collect about you. Below we explain which personal information we collect and use, and for which purposes.
Categories of personal information | Description |
---|---|
Account Information | Personal information we collect when you register for an account on our Sites and Apps, including:
|
Technical Information | Personal information we automatically collect when you visit, access or navigate our Sites and Apps, including:
|
Usage Information | Personal information we automatically collect about your activities on our Sites and Apps, including:
|
Transaction Information | Personal information you provide when you place an order or request a Vista Service, including:
|
Content Information | Personal information you provide when you upload and share content (“Content”) with us or other users within our Sites and Apps or to personalise products and services, including:
|
Profile Information | Personal information you share with us when you create a profile, including:
|
Communication Information | Personal information you provide and we automatically collect when you contact our customer care teams (e.g. chat(bot), email or phone) or communicate with us by other means (e.g. social media, text), including:
|
Marketing Information | Personal information you provide to receive marketing materials about our products and services, including:
|
Forms Information | Personal information you provide when you choose to participate in sweepstakes, contests or surveys, including:
|
Personal information we receive from other sources
Vista may also obtain information about you that is publicly available or from other sources, such as independent third parties, business partners or Cimpress group companies. Any information we receive from these sources is combined with the personal information you provide to us for the purposes described in this Privacy Notice. The below overview sets out which personal information we receive from third parties.
Categories of third parties | Description | Categories of personal information |
---|---|---|
Postal service providers | We may need to collect data, (e.g. name and postal address information) to validate your postal address | Transaction Information |
Security providers, fraud detection and prevention providers | In certain instances, and as permitted by applicable law, we may need to collect your personal information to help us screen users for fraud detection and prevention purposes | Account Information Technical Information Usage Information |
Social media platforms | We collect your personal information (e.g. email, username, account information, profile photo) when you log in or sign-up using your social media account | Account Information Profile Information |
Advertising and marketing partners | We receive your personal information from advertising and marketing partners to monitor, manage and measure our ad campaigns and serve you more relevant advertising | Technical Information Usage Information Marketing Information |
Lead enhancement companies | In some cases, we collect personal information (e.g. name, email,address, phone) from lead enhancement companies to help us improve our service offering | Account Information Usage Information Profile Information |
Personal information you give us about others
The Content you choose to upload to our Sites and Apps may include personal information of other individuals. If you choose to share your Content or other information with someone else through a feature we offer, or participate in our referral program, we will use the personal information you provide (for example, the email address of the recipient) to fulfil your request and the specific service requested. Please make sure other individuals are aware of and agree with the sharing of their personal information with us.
Why we process your personal information
In the overview below we explain which personal information we use and how and why we use it.
Purpose of processing | Categories of personal information | Corresponding legal basis |
---|---|---|
Creating, managing and maintaining your Vista account and facilitate integrated services | Account Information Technical Information Usage Information Content Information Profile Information | This is necessary for us to fulfil our contract with you to create, manage and maintain your Vista account and facilitate integrated services, including:
|
To provide you with the Vista Services | Account Information Technical Information Usage Information Transaction Information Content Information Profile Information Communication Information | This is necessary for us to fulfil our contract with you. For example, to:
|
To provide you with a helpful and seamless customer support experience | Account Information Technical Information Transaction Information Content Information Profile Information Communication Information | It is our legitimate business interest to provide you with a helpful and seamless customer support experience, including by:
|
To provide you with a personalised user experience | Account Information Technical Information Content Information Profile Information | It is our legitimate business interest to provide you with personalised services, including:
|
To analyse customer usage patterns, conduct research, improve and develop our products, features and Vista Services | Technical Information Usage Information Content Information Profile Information Communication Information Marketing Information | It is our legitimate business interest to analyse, develop and improve our Vista Services (including by understanding how you use the services) and to develop new features, services or products. Where required by applicable law we will ask for your prior consent for specific processing activities. |
Supporting collaboration, networking and projects | Account Information Content Information Profile Information | This is necessary for us to fulfil our contract with you to enable you to communicate, collaborate and share Content with users you designate, to enable you to connect with designers, to submit projects and receive bids for design services and to otherwise connect users and designers or other providers. |
To create profiles and market our activities and promote our products and Vista Services (including providing co-branded offers with our partners or affiliated Cimpress companies) | Content Information Profile Information Marketing Information Forms Information | It is our legitimate business interest to market our activities and promote products and services, including to send you offers and promotions of our products and services or products and services offered by our partners or other Cimpress group companies. Where required by applicable law we will ask for your prior consent for specific processing activities. |
To protect, establish, exercise or defend our and third parties’ rights, and to defend against lawsuits | Account Information Technical Information Usage Information Transaction Information Content Information Profile Information Communication Information | It is our legitimate business interest to protect our interests and rights, and the rights and interests of third parties, for instance to defend our rights in legal proceedings. |
To secure our Vista Services and data processed via our Vista Services, and to prevent, detect, and investigate unlawful or unwanted behaviour, including crime and fraud, within or related to the Vista Services and the products we provide | Account Information Technical Information Usage Information Transaction Information Content Information Profile Information Communication Information | It is our legitimate business interest to keep the Vista Services safe, to prevent, detect and investigate unlawful or unwanted behaviour, and to protect our and third parties’ rights and interests. |
To comply with legal and regulatory requirements, and cooperating with regulators and government authorities | Account Information Technical Information Usage Information Transaction Information Content Information Profile Information Communication Information | We process your personal information to comply with our legal obligations, and to cooperate with regulators and government authorities where required by law or when we have legitimate business reasons to do so. |
With Which Parties We Share Personal Information
Where relevant and necessary, we provide your personal information to the following trusted third parties or service providers:
- Third-party service providers to support us in operating our Sites and Apps, and providing the Vista Services, including website and platform hosting companies, IT service providers, marketing and analytics providers, payment processors, fraud detection and prevention companies, order fulfilling and delivering service providers, session replay and chat technologies providers, machine learning providers, and other commercial partners to provide and improve our Vista Services.
- Group companies that support us in providing the Vista Services and the processing of your personal information for the purposes described in this Privacy Notice.
- Our partners if you choose to receive products or services from our partners. In such cases, our partners have access to and process your personal information. We also share your personal information where you direct us as part of the Vista Services to share your personal information with another user or to a third-party service provider to integrate our Vista Services with a service that such user or third party may provide, for example, with a third-party printing partner or third-party designers who may assist you with your website, logo or product designs, website builder or web development service provider so that they can provide you with a service.
- Law enforcement agencies, courts, regulators, government authorities and other similar public authorities or third parties when this is necessary to comply with a legal obligation or when we have legitimate business interests to do so, for instance, to protect our or a third party’s rights and interests.
- Professional advisors when we have legitimate business interests to do so, for instance, to obtain legal advice or to assist us with a criminal or regulatory investigation.
- Third parties in connection with investments, reorganizations, restructurings, mergers, bankruptcy, insolvency events, joint ventures, sale of shares or assets, or similar events. It is our legitimate business interest to share relevant and necessary data to enable such investments, reorganisations, restructurings, mergers, bankruptcy, insolvency events, joint ventures, sale of shares or assets, or similar events.
How We Transfer Personal Information Internationally
Vista is an international company and operates globally. We therefore transfer or store your personal information globally, including but not limited to the United States of America, Australia, Brazil, Jamaica, Tunisia and the Philippines. Such countries may provide a lower level of data protection than your country. For example, Cimpress group companies, third-party service providers, or partners may be located outside of the EEA, the United Kingdom or Switzerland. Where required by applicable data protection laws, we put in place appropriate safeguards to make sure your personal information is adequately protected, for instance by putting in place Standard Contractual Clauses as approved by the European Commission, by examining the countries to which the data is transferred, and by imposing specific technical and organisational security measures if needed.
If you would like to receive additional information on the transfer of your personal information or the transfer mechanisms used, please contact us by sending an email to [email protected].
How to Exercise Your Rights
You have certain rights to control how your personal information is used. Depending on the applicable law, these may include the right to:
- Access: Access your personal information and obtain a copy of the personal information we hold about you.
- Rectify: Correct or update inaccurate or incomplete personal information.
- Erasure: In certain situations, request that we erase your personal information.
- Object: In certain situations, object to the processing of your personal information.
- Portability: In certain situations, receive your personal information in a reusable electronic format.
- Restrict: In certain situations, restrict or block the processing of your personal information.
- Withdraw consent: Withdraw your consent where we processed your personal information based on your prior consent.
We may ask you to verify your identity before taking further action on your request. We also rely on you to make sure that the personal information you provide is complete, accurate and up-to-date. Please let us know of any changes to or inaccuracies in your personal information by sending an email to [email protected].
If you have a Vista account, you can access, update, and remove the personal information available in your account and change your preferences by going to your account settings page. You can also contact our Customer Care team by using any of the methods listed in the "How to Contact Us" section below.
Opt-out of Marketing Communications
You can change your marketing preferences at any time by following the "unsubscribe" instructions contained in the messages you receive, by changing your marketing preferences through your Vista account settings, or by contacting the Customer Care team. Even if you choose to unsubscribe from receiving advertising via email, telephone, or by post, we may still communicate with you using any of these methods regarding your orders, your Vista account, or for other administrative purposes (such as communications related to a pending order, an unresolved customer care issue, or a policy update). If you do not want to receive any communications from Vista, please delete your Vista account.
What Happens When You Request Your Account to be Deleted?
After we have verified your identity in response to your deletion request, we will close your Vista account and erase your personal information from our systems. Please note, however, that we may be allowed or required by law to keep certain information (e.g., records of transactions or shipments), for instance, to comply with legal record-keeping and tax obligations. After we process your deletion request, you will immediately lose access to:
- Your Vista account;
- Your Vista account login and password;
- Order history with any Vista Services;
- Products you have designed and stored, and Vista Services you have used;
- Uploaded images, any stored designs and other content with any Vista Services.
Please be aware that deleting your Vista account is a permanent change and cannot be reversed.
We are committed to handling your queries and complaints as best as we can. We encourage you to address any concerns or issues with us first by emailing [email protected], so that we can try to resolve it in a timely and effective manner. You also have the right to file a complaint with your local supervisory authority at any time.
How We Protect and Store Personal Information
Vista has implemented technical and organisational security measures to protect your personal information. These measures are aimed at ensuring the integrity, confidentiality and availability of your personal information and to protect it against unlawful or unauthorised destruction, loss, alteration, use, disclosure or access. These measures include but are not limited to encryption methods, access controls, controlled administration of user rights and limiting access to personal information on a need-to-know basis. We evaluate and update these measures on a regular basis.
We encourage you to also take the security of your personal information seriously and select a strong password when creating a Vista account and not share it with others. You may change your Vista account password as often as you wish by going to your 'Account Settings'. If you have reason to believe that the security of your account might have been compromised (for example, your password has been leaked) or if you suspect someone else is using your account, please let us know immediately.
We take information security and privacy seriously, and our goal is to provide a safe and secure site for all users. To achieve this goal, we have implemented a security program to identify and remediate security issues, and we utilise external security researchers to report vulnerabilities. If you believe you have identified a security issue on our Sites or Apps, please contact [email protected].
We will retain your personal information for the duration of our relationship, unless a shorter retention period is required by law or the data is no longer necessary for the purposes for which we processed your data. Once our relationship with you has come to an end, we will retain your personal information for the period of time that enables us to:
- Check our records of transactions or shipments;
- Fulfil our legal obligations, including legal retention periods;
- Initiate, investigate or defend against legal claims;
- Address your questions, requests or complaints; and
- Keep our records for analysis and audit purposes.
How We Handle Personal Information of Children
The Vista Services are not targeted at or meant for use by children under the age of sixteen (16) years old, and children under that age are prohibited from creating an account or otherwise providing their personal information. If we become aware that a child under the age of sixteen (16) has provided personal information through our Sites and/or Apps, we will delete their personal information. We ask parents or guardians to contact us at [email protected] if they become aware that their child has shared their personal information with us.
The Roles and Responsibilities for Business Users for Which We Act as Service Provider or Processor
We provide our business users with specific services on their websites for which we act as service provider or processor. We collect personal information of visitors and users of the business user’s websites or services ("End Users Information"), only as instructed by and on behalf of the business user. For example, business users are able to add a contact form on their website. Any personal information submitted by visitors of the website of the business users are then stored with Vista on the business user’s behalf. For such purposes, Vista acts as service provider or processor on the business user’s behalf when processing End Users Information and will act in accordance with the data processing agreement between Vista and the business user. Business users will be solely and independently responsible for the collection and use of End Users Information by using Vista Services and are responsible for complying with applicable data protection laws.
How We Use Cookies and Other Similar Technologies
We use cookies, pixels and other similar technologies (collectively referred to as “cookies”) to provide and improve our Vista Services, to tailor your website experience and to show personalised ads. Cookies are useful because they allow a website to recognise a user’s device. To learn more about what type of cookies VistaPrint uses, please visit our [Cookie Notice](#).
You can manage which cookies are placed on your device by:
-
Using browser controls: The Help menu on the menu bar of most browsers will tell you how to enable or prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie and how to disable cookies altogether. You can also disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on's settings or visiting the website of its manufacturer. Please be aware that if you disable or delete certain cookies, our websites will not work properly.
-
Third-Party Cookies: When you use our Sites and Apps, you may notice content provided by a company other than us. Also, if you 'share' Vista content with friends through social networks, such as Facebook and Pinterest, these social networks may place cookies on your browser. We have no access to or control over cookies used by these companies or third-party websites. If you’d like to opt out of cookies created by 'sharing' Vista content through social networks — such as Facebook and Pinterest — we suggest you check those third-party websites for more information about their cookies and how to manage them.
If you want to know more about Third-Party Cookies and how to opt out of them, see www.allaboutcookies.org and www.youronlinechoices.eu.
How to Contact Us
If you have general questions about the Vista Services or would like to update your marketing preferences, please reach out to the Customer Care team as listed below:
- For VistaPrint, please go to the “Help Centre” or “Contact Us” page.
- For VistaCreate, please submit your request through https://support.create.vista.com/hc/en-us/requests/new/ or email at [email protected].
- For 99designs by Vista, please contact the Support & Contact | 99designs or email [email protected].
- For Vista Corporate Solutions, please send an email to [email protected].
If you have any questions about this Privacy Notice or our privacy practices, or would like to exercise your privacy rights, please contact us by emailing [email protected].
Users residing in the EU may also contact our EU representative at Vistaprint B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands.
Users residing in the UK may also contact our UK representative at Tradeprint Distribution Limited, 2 Fulton Rd, Dundee Scotland, UK, DD2 4SW.
Changes to This Privacy Notice
From time to time, we may change this Privacy Notice to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We reserve the right to modify this Privacy Notice at any time in accordance with the applicable law. If we do so, we will post the revised Privacy Notice and update the "Last Updated" date at the top, so please review it frequently. In case of material changes, we will also provide notice to you and, where required by applicable law, we will obtain your consent. We will send such notice by email to the last email address you provided to us, by posting the notice on our Sites and Apps, and/or by other means, consistent with applicable law.