Privacy Notice

The controller is DNIT BV, trading as Prizeli. You can contact us at support@prizeli.com.

• Account data such as email address, login method, and session security data.
• Project data such as uploaded photos, generated artwork, prompts, selected product, and preview choices.
• Order data such as shipping name, address, phone number when provided, payment status, product details, and fulfillment status.
• Support and communication data when you contact us or receive order emails.
• Technical and security data such as IP-derived request metadata, CSRF/session cookies, device/browser metadata, and error diagnostics.

• To create and manage your account and projects.
• To generate, preview, produce, deliver, and support personalized orders.
• To process payment status, VAT, invoices, refunds, disputes, and accounting obligations.
• To protect the service against fraud, abuse, prompt-injection attempts, spam, and unauthorized access.
• To send necessary order and service messages. Marketing messages are only sent with a valid opt-in where required.

We use trusted providers only where needed to run the service. Depending on your order, data can be shared with hosting and infrastructure providers, Stripe for payment, Printful for fulfillment, Google for Google sign-in, image-generation providers, email providers, accountants, professional advisers, and authorities where legally required.

• Some providers may process data outside the European Economic Area with contractual safeguards or other lawful transfer mechanisms.
• Order, payment, VAT, and accounting data are kept as long as legally required.
• Project photos and generated artwork are kept while your account/project needs them, unless deletion is requested and no overriding legal or operational reason requires retention.
• Security and webhook-deduplication metadata is kept only as long as needed for operational safety and legal records.

Subject to legal conditions, you can request access, correction, deletion, restriction, portability, or objection. You can also complain to the Belgian Data Protection Authority if you believe your data protection rights are not respected.