tracemaps Limited Privacy Policy

tracemaps prints are created using location information, such as .gpx files, that have been provided by the customer. In most cases this data contains information on the location of the person who recorded it, at a particular time, on a particular date. This information is used to plot the map that will potentially be purchased by the customer.

Location information uploaded to tracemaps is handled in two stages, first to show visitors a preview of their print pre-sale, and second to produce the print for the customer post-sale.

Once uploaded, pre-sale location information is stored by Amazon Web Services and processed by Syncano. Please see section 4 Third party services for more information.

The lawful basis for collecting location information pre-sale is tracemaps legitimate interest. We cannot provide our services without this information and believe potential customers would reasonably expect us to process their information in this way for this purpose.

Post-sale location information is shared with a third party company called Mapbox who help us to produce some of the graphic elements of our products. Please see section 4 Third party services for more information.

Post-sale this data is retained in case the customer has any issues with their order that was produced or if they would like to make a new order using the same data.

This information is also retained by tracemaps to help us develop our products and services internally. If a new product or service is created using a customer’s data it will not be published without anonymizing the data or by obtaining consent from the owner.

The lawful basis for processing location information post-sale is consent.

Alongside our map creator we offer a bespoke service we call “custom maps” to handle more complicated customer requests. Customers can upload their location information and type a message to explain what they would like us to make.

Section 3.2 above, location information upload, describes how this information is used but in addition, for custom map requests tracemaps ask for a customer’s name, and an email and/or phone number. This information is required so we are able to contact you to discuss your request and provide our service.

The lawful basis for processing location and contact information for custom maps is consent.

When you place an order with us we ask you for your name, address, email address and telephone number so we can arrange delivery of your order and contact you in relation to it if the need arises.

To deliver your order to you we will share your name and address with our delivery partner who is currently Royal Mail. Please see section 4 Third party services for more information.

We do not receive or store any credit or debit card details; these are sent directly to our payment partner Stripe through their payment interface integrated into our website. To take a payment Stripe will request your email address to send you a receipt, they will ask for your card number, its expiry date and its CVC (Card Verification Code) which is used to process the payment to tracemaps. You also have the option to ask Stripe to remember your payment details to make payment with them faster in the future. Please see section 4 Third party services for more information.

The lawful basis for processing customer information is contract.

To keep in touch and let customers and visitors know about new products, services or company updates that may be of interest tracemaps send out emails from time to time to mailing list subscribers.

If you would like to receive this information visitors can subscribe by entering their email address at the bottom of the home page or by putting a tick in the subscribe box at the checkout stage.

tracemaps only send marketing material to visitors and customers that directly consent and if you decide to opt-in you can opt-out at any time by clicking the ‘unsubscribe’ link in one of our marketing emails, or by sending an email to hello@tracemaps.com.

MailChimp are our email marketing partner and they store and process the email addresses of our subscribers. We do not share our mailing list with anyone else other than MailChimp. Please see section 4 Third party services for more information.

The lawful basis for collecting and storing email addresses for email marketing is consent.

tracemaps have active social media accounts on Facebook, Instagram and Twitter to be able to communicate more easily with customers.

All content posted and shared by visitors on these web based applications is covered by the privacy policy of the host service and is separate from this privacy policy. More privacy policy information for each of these social media companies can be found from the relevant link below.

• Facebook - https://www.facebook.com/policy.php
• Instagram - https://help.instagram.com/155833707900388
• Twitter - https://twitter.com/en/privacy

Content posted and shared by visitors on these sites is never removed from the site it was posted on by tracemaps without acquiring detailed consent from the user first.

Users of these web applications have the right to request their data be deleted by using the delete features within the web application or by contacting the social media provider directly.

From time to time visitors and customers may communicate with tracemaps regarding our services in the form of email with questions or suggestions for how we can improve what we do.

We use this information for the development of our services and for training purposes.

tracemaps emails are hosted by Google’s Gmail service and are protected by their privacy policy. Please see section 4 Third party services for more information.

The lawful basis for collecting and processing communication and feedback is tracemaps legitimate interest.

Location information is retained in case the customer has any issues with their order that was produced or if they would like to make a new order using the same data. This information is also retained by tracemaps to help us develop our products and services internally.

Location information may be held until a website user requests for it to be deleted.

Customer information is retained to keep a record of an order for accounting purposes.

Email addresses are held for as long as the customer is subscribed to our email marketing.

If a customer opts-out of our email marketing their details are deleted from our contact list as soon as possible. This can be done automatically if the user clicks on the unsubscribe link in a marketing email or it can usually be done within 48 hours if they send an email to hello@tracemaps.com.

All contributions to our social media pages are retained unless deleted by the contributor.

All communication and feedback received by email is retained by tracemaps for training and the improvement of our products and services.

All visitors and customers of tracemaps have the right for their data to be deleted upon their request. If you would like to make this request please email hello@tracemaps.com and we will make the necessary arrangements.

Personal data sent to tracemaps is stored and backed up by Amazon Web Services who employ industry leading practices to prevent security breaches. These measures include network firewalls, data encryption, and penetration testing. More information on Amazon Web Services’ security measures can be found here https://aws.amazon.com/security/.

Payment information is not received by tracemaps and is processed securely and directly by Stripe. Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1. More information on Strips’ security measures can be found here https://stripe.com/gb/privacy.

Emails are protected by googles’ advanced security infrastructure making use of encryption and threat detection measures amongst other policies. More information can be found here https://privacy.google.com/intl/en-GB/your-security.html?categories_activeEl=sign-in.

Mapbox host location information of our customers on their network. Their website is served exclusively by HTTPS protocols and their infrastructure runs inside state of the art data centers designed and operated by Amazon Web Services. More information can be found here https://www.mapbox.com/platform/security/.

Syncano run their processes on behalf of tracemaps. Syncano has put in place appropriate physical, electronic and administrative procedures to safeguard and secure the information from loss, misuse, unauthorized access or disclosure, alteration or destruction.

Royal Mail only process address information for the purpose of delivering good to customers. More information can be found here https://www.royalmail.com/personal/identity-verification/your-security.

Mail chimp store and process tracemaps email marketing at multiple world class data centers located in the United States. Their sites feature biometric scanners and they use DDOS mitigation strategies amongst others. More information can be found here https://mailchimp.com/legal/privacy/.

Data stored and processed locally provides us with a third data backup should there be a problem with our cloud storage service. This data is kept behind password protected accounts that are regularly updated with strong passwords on secure physical premises.