Privacy Policy

01 CONTROLLER

Who is responsible

Ligature Press is operated from Norway. The registered business identity (legal name, organisation number, address) is being finalised — pending ENK registration with Brønnøysundregistrene — and will be published here the day it is issued. Until then, every data question reaches the owner directly at hello@ligature.press.

02 DATA

What we collect, and why

When you order: the two names on the poster, your optional caption, your email address, your shipping address, and your country. We process these because they are necessary to perform the contract — to compose, print, number, and deliver your poster (GDPR Art. 6(1)(b)). Order records are kept as long as Norwegian accounting law requires.

When you join the waitlist: your email address, your country, and — if you had already composed — the two names. We store these only with your consent (Art. 6(1)(a)), given by the checkbox on the form, and use them for exactly one thing: writing to you when your country opens. You can withdraw at any time by emailing us; we then delete the entry.

Marketing is a separate, optional, unticked opt-in on both forms. We record your choice but send nothing today — no newsletter system is even wired up. If that changes, only opted-in addresses are used, and every send will carry an unsubscribe path. If you opt in at checkout, you may also leave an optional anniversary or wedding date; we store it under the same consent, use it only for occasion reminders to you, and delete it with the opt-in if you withdraw.

03 ANALYTICS

Analytics with no cookies

Our visitor analytics is self-hosted and cookieless: no cookies, no consent banner, no client-side tracking script, and no advertising identifiers. Per request we keep the page path, the derived country, the referrer's host name, and a visitor_id hashed with a salt that rotates daily — so the same visitor cannot be recognised across days. Your raw IP address and raw browser user-agent are never written to disk. We rely on legitimate interest (Art. 6(1)(f)) for this minimal, non-identifying measurement.

04 PROCESSORS

Who else touches it

We share data only with the services needed to run the shop, only what each needs:

• Mollie (Netherlands) — payment processing. Sees your payment details; we never do.
• Prodigi (UK/EU production) — printing and shipping. Receives your name and shipping address.
• Tradebrain (our own accounting service) — bookkeeping and VAT. Receives order and payment records.
• Bunny Fonts (Slovenia) — serves the web fonts, GDPR-compliant, logs no personal data with us.
• Scaleway (France) — DNS for ligature.press.
• Hetzner (Germany/Finland) — hosting. All shop data lives on EU servers.

05 RIGHTS

Your rights

You can ask us for access to the data we hold about you, ask for it to be corrected or deleted, withdraw any consent you gave, and receive your data in a portable format. Write to hello@ligature.press — one person reads it, and answers. You also have the right to complain to the Norwegian supervisory authority, Datatilsynet (datatilsynet.no).