Privacy policy

Last updated: 18 September 2026

Adventure Prints operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Adventure Prints is a trading name of Henry Watson. Adventure Prints is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

The Services include our Create design studio, where you design your print. It runs on a separate address that we operate, create.routetoart.com, and is described in its own section below.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information including payment card information, transaction details, form of payment, payment confirmation and other payment details. Payments are processed by Shopify and its payment providers; we never see or store your full card number.
  • Account information including your username, password, preferences and settings, if you create a store account.
  • Transaction information including the items you view, put in your cart, or purchase, return, exchange or cancel, and your past transactions.
  • Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
  • Design information from the Create studio, including:
    • route files you upload (GPX) or activities you import from Strava: the GPS points of each route, with the elevation and time recorded at each point, the route's name and, for Strava activities, the activity number and calories;
    • your Strava first name, last name, username and athlete number, if you connect Strava;
    • photos you add to a print, from your device or from Google Photos, and their file names;
    • places you search for and the area of the map you view;
    • words you type onto your print (title, date, notes and map labels).

A recorded route can show where you live, train or work, and when. Please only upload routes and photos that you are happy for us to print, and only photos that you have the right to use. If a photo shows other people, please make sure they are content to appear on your print.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you including when you create an account, visit or use the Services, design a print, communicate with us, or otherwise provide us with your personal information;
  • Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
  • From Strava and Google Photos, only when you choose to connect them in the Create studio, and only the activities and photos you select;
  • From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
  • From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to save your design, to produce your print file, to process your payments, to fulfil your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account and orders, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, and to facilitate any returns and exchanges.
  • Marketing and Advertising. Where you have agreed, we use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email or text message, and to show you online advertisements for products or services on the Services or other websites.
  • Security and Fraud Prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, to detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, to protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
  • Communicating with You. We use your personal information to provide customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.
  • Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

Our Legal Bases for Using Your Information

Under UK and EU data protection law we must have a legal basis for each use of your personal information. We rely on the following:

What we do Legal basis
Take and fulfil your order; save your design; make and deliver your print or download; send order emails; handle returns and refunds Performance of our contract with you
Import activities from Strava or photos from Google Photos Your consent, given when you connect the account. You can withdraw it at any time with the provider
Keep the store and the Create studio secure: limiting the rate of requests, checking that orders are placed by a person, preventing fraud, keeping short technical logs Our legitimate interest in protecting our service and our customers from abuse
Answer your questions and support requests Our contract with you, or our legitimate interest in helping our customers
Send marketing emails or texts; set analytics or advertising cookies on the store Your consent. You can unsubscribe or change your cookie choice at any time
Keep order, invoice and tax records Legal obligation

We do not make decisions about you by automated means that have a legal or similarly significant effect on you.

Our Create Design Studio

Our Create page, where you design your print, runs on a separate address that we operate, create.routetoart.com. It is hosted on infrastructure provided by Cloudflare, Inc. Cloudflare acts as our data processor: it processes information only on our instructions and under its Data Processing Addendum, which covers confidentiality, security, sub-processors and international transfers. The use of Cloudflare does not change our responsibilities as the data controller.

When your design is stored, and where

While you design, your routes, photos and text are held in your browser. They are saved to our storage only when you press "Proceed to cart". At that point we store your design (its routes, text, map position and photos) in Cloudflare R2 object storage located in Western Europe. Before a photo is saved we redraw it, which removes its hidden metadata, such as the place and time it was taken and the camera used.

When your order is paid, we copy the design into an order folder and our system produces your print file from it, using a browser run by Cloudflare on our behalf. Your name and delivery address are not stored with your design: they stay in Shopify, and are sent to us by email so that we can place your print order (see "Order handling" below). Our design system never receives your email address.

Security checks and technical logs

Your IP address is used for a moment to limit the rate of requests and, when you press "Proceed to cart", to check that the order is being placed by a person, using Cloudflare Turnstile. We do not store your IP address ourselves.

Cloudflare keeps short technical logs of our service for a few days. We have written the service so that these logs hold order and item numbers and error details, and not your routes, photos, name, address or IP address.

Maps and fonts

Maps, place search and elevation data come from MapTiler AG (Switzerland). These requests are sent from our server, not from your browser, so MapTiler receives the map area, the place name you searched for and points along your route, but not your IP address or anything that identifies you. Fonts are fetched from Google Fonts in the same way, through our server.

Connecting Strava

If you choose "Connect with Strava", you sign in on Strava's own website and give us read-only access to your activities (Strava's "activity:read" permission). We receive your Strava name, username and athlete number, the list of your activities, and the GPS route, elevation, time and calorie data of the activities you choose to import. We use this only to draw your print. The sign-in is held in your browser tab and ends when you close it. We never receive a long-lived Strava token, and nothing from Strava is stored on our systems unless you save a design that contains it. You can withdraw access at any time at strava.com/settings/apps.

Connecting Google Photos

If you choose "Connect to Google Photos", you sign in with Google and pick photos in Google's own picker. We can see only the photos you pick, never the rest of your library. The picked photos pass through our server to your browser; they are stored only if you save a design that contains them. The sign-in is held in your browser tab and ends when you close it. You can withdraw access at any time at myaccount.google.com/permissions.

Adventure Prints' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train artificial intelligence models.

Order handling

When you pay, Shopify tells our system which design to print. Our system then sends us an email containing your order number, name, delivery address and phone number, together with a private link to the print file, so that we can place the order with our print partner, who prints your order and posts it to you. That email is delivered to our business mailbox, which is hosted by Google Workspace. We delete it once your order has been fulfilled.

If you buy a digital download, the link in your order email works for 7 days. The file can be fetched by anyone who has the link, so please do not share it. If your link has expired, contact us and we can send a new one while the file still exists.

What the Create studio does not do

The Create page sets no cookies and uses no analytics, advertising or tracking tools. We do not sell your routes, photos or designs, we do not use them for marketing, and we do not use them to train artificial intelligence models.

Cookies and Similar Technologies

Our store uses cookies that are necessary for it to work, for example to keep items in your cart, remember your currency and country, and keep checkout secure. With your consent, given through the cookie banner, the store may also use analytics and advertising cookies. You can change your choice at any time through the cookie settings on the store.

The Create page sets no cookies. It keeps two items in your browser's session storage, which your browser deletes when you close the tab: your Strava sign-in and your Google Photos sign-in, if you use them. These are strictly necessary for the import you asked for.

How We Disclose Personal Information

In certain circumstances we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • With Shopify, vendors and other third parties who perform services on our behalf such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.
  • With Cloudflare, Inc., which hosts the Create studio, stores saved designs and print files, produces print files, carries out security checks and delivers our order notification emails.
  • With MapTiler AG (Switzerland), which receives map areas, place searches and route points from our server, without your IP address or identity.
  • With Strava, Inc. and Google LLC, only if you choose to connect them, and only to sign you in and fetch the activities or photos you select.
  • With Google Workspace (Google Ireland Limited / Google LLC), which hosts our business email, including the order emails described above.
  • With our print partner, PRODIGI GROUP LTD, and its delivery carriers, who receive your name, delivery address, phone number and print file in order to print and deliver your order.
  • With business and marketing partners to provide marketing services and advertise to you, where you have consented. For example, we use Shopify to support personalised advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites.
  • When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
  • With our affiliates or otherwise within our corporate group.
  • In connection with a business transaction such as a merger or bankruptcy, to comply with applicable legal obligations, including responding to subpoenas, search warrants and similar requests, to enforce applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.

In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify.

In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes.

To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information through the Shopify Privacy Portal at https://privacy.shopify.com/en.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions.

We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party.

Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction.

If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Security of Your Information

We take steps to protect your information. Saved designs and print files are kept in private storage that cannot be browsed publicly; print files and downloads are reached only through signed links that expire; the Create studio is served over encrypted connections; and the keys to our map, Strava and Google services are kept on our server and never sent to your browser.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

How Long We Keep Your Information

Information How long we keep it
A design saved to the cart but not ordered (its routes, text, photos and cart picture) 30 days, then deleted automatically
An ordered design, its photos and the finished print file 90 days after the order, then deleted automatically
Digital download links Work for 7 days; we can issue a new one while the file exists
Strava and Google Photos sign-ins Held in your browser tab only, until you close it
Order emails sent to us (your name, address and phone number) Until your order has been fulfilled
Technical logs A few days
Order, payment and customer records held in Shopify Up to 6 years, as UK tax and accounting law requires
Customer support messages Up to 2 years after your query is resolved
Marketing preferences Until you unsubscribe or withdraw your consent

You can ask us to delete a saved design or an order's files sooner (see "Your Rights and Choices").

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

  • Right to Access / Know. You may have a right to request access to personal information that we hold about you.
  • Right to Delete. You may have a right to request that we delete personal information we maintain about you, including your saved designs, photos and print files.
  • Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
  • Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
  • Managing Communication Preferences. We may send you promotional emails if you have agreed to receive them, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

Rights for UK and European Economic Area Residents

If you reside in the UK or European Economic Area, and subject to exceptions and limitations provided by local law, you may exercise the following rights in addition to the rights outlined above:

  • Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information for certain purposes, including where we rely on our legitimate interests. You may object to direct marketing at any time.
  • Withdrawal of Consent: Where we rely on consent to process your personal information, you may withdraw your consent. If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent before that withdrawal.

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising your rights. We may need to verify your identity before we can process your requests, as permitted or required by law. To find a design or order, we may ask for your order number.

In accordance with applicable laws, you may designate an authorised agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we may require proof that you have authorised them to act on your behalf, and we may need to verify your identity directly with you.

We will respond to your request within one month, as UK law requires. For complex requests we may extend this by up to two further months, and we will tell you if we need to.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details set out below. We will acknowledge your complaint within 30 days and respond without undue delay.

Depending on where you live, you may have the right to appeal our decision by contacting us, or to lodge a complaint with your local data protection authority.

UK residents may complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

For the EEA, you can find a list of the responsible data protection supervisory authorities at https://edpb.europa.eu/about-edpb/about-edpb/members.

International Transfers

Your saved designs and print files are stored in Western Europe. However, some of our providers, including Shopify, Cloudflare, Google and Strava, are based outside the United Kingdom and may transfer, store and process your personal information outside the country in which you live, including in the United States and Canada.

If we transfer your personal information out of the United Kingdom or the European Economic Area, we will rely on recognised transfer mechanisms: a decision that the destination provides an adequate level of protection (including the UK–US data bridge and the EU–US Data Privacy Framework, where the provider is certified), or the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum, or the UK International Data Transfer Agreement, as relevant.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices, legal requirements, technology, service providers or other operational, legal or regulatory reasons.

We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices, or if you would like to exercise any of the rights available to you, please contact us using the details below:

Adventure Prints
11 Danes' Rd
Exeter
EX4 4LS
United Kingdom

Telephone: +44 7873 172339
Email: policy@adventureprints.co.uk

For the purpose of applicable data protection laws, Adventure Prints is the data controller of your personal information.