Privacy Policy

Last updated: February 2026

1. Who we are

MapToPoster is a UK-based online store that creates custom map posters. When we refer to "we", "us", or "our" in this policy, we mean MapToPoster. For any privacy-related enquiries, contact us at support@maptoposter.co.

2. What data we collect

  • Account information: Name and email address (via Google OAuth through Supabase Auth).
  • Order information: Shipping address, order details, and payment metadata. We do not store card numbers or payment credentials.
  • Map data: Locations you search for and poster configurations you select. Map data is sourced from OpenStreetMap.
  • Usage data: Basic analytics such as pages visited and error reports to improve the service.

3. How we use your data

  • To create and deliver your custom map poster.
  • To process payments and send order confirmations.
  • To provide customer support.
  • To improve our service and fix errors.

4. Third-party services

We share your data with the following third parties only as necessary to fulfil your order:

  • Stripe — Payment processing. Stripe handles all card details directly; we never see or store them. See Stripe's Privacy Policy.
  • Prodigi — Print fulfilment and shipping. Your shipping address and poster file are shared so they can print and deliver your order. See Prodigi's Privacy Policy.
  • Resend — Transactional email delivery (order confirmations).
  • Supabase — Database hosting and authentication (Google OAuth). See Supabase's Privacy Policy.
  • OpenStreetMap — Map data used to generate posters. See OSM's Privacy Policy.

5. Data retention

We retain your order data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations (e.g. tax records). You can request deletion of your account and personal data at any time.

6. Your rights (UK GDPR)

Under the UK General Data Protection Regulation, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate personal data.
  • Request erasure of your personal data ("right to be forgotten").
  • Restrict or object to processing of your data.
  • Data portability — receive your data in a structured format.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email support@maptoposter.co. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the email address associated with your account.