Who we are
Bicep Xpress is operated by Bicep Press Ltd, Unit 11 Dragon Court, Crofts End Road, Bristol BS5 7XX, United Kingdom. We are the controller of the personal information described in this policy. Contact hello@bicep-xpress.com or 07745 203004 with privacy questions or requests.
Information we collect
When you order, we collect your name, email, phone number, delivery and billing addresses, print configuration, order details and payment confirmation. If you arrange delivery to someone else, we also receive the recipient details you provide. Please only provide details you are entitled to share.
We receive the artwork files you upload, their file details, and the previews and print files generated to prepare your order. Support enquiries include the information you choose to send us.
We use a guest session to connect your upload, basket and checkout. This platform does not provide customer accounts, passwords, loyalty points or gift cards. Payment details are collected by Stripe on its hosted checkout; we do not store your full card number.
How we use your information
We use artwork and order information to prepare and fulfil your prints, take payment, arrange delivery or collection and send order and dispatch messages. The ordering customer receives order messages; a separately specified delivery recipient may receive tracking information.
Processing needed to provide your order is based on our contract with you. We also process information to meet legal and accounting obligations. Our legitimate interests include responding to enquiries, keeping the service secure, preventing fraud and operating the print studio.
This ordering platform does not enrol you in a mailing list or use your artwork for advertising. We do not sell your personal information.
Service providers and disclosures
We share only the information needed with providers supporting the service: Cloudflare for hosting and private artwork storage, Stripe for payment processing, Resend for transactional and contact emails, and delivery services for shipping. Authorised studio staff use order information and artwork to produce and dispatch your prints.
We may disclose information where required by law, to protect rights and prevent fraud, or in connection with a lawful business transfer. If you follow a link to another website, its own privacy policy applies.
Service providers may process information outside the UK. Where required, transfers use recognised safeguards such as adequacy decisions or approved contractual protections.
Cookies and browser storage
We use an essential guest-session cookie to protect and connect your uploads and orders. Upload recovery information is stored on your device while a file is uploading, and your print configuration is kept in browser session storage. Blocking essential storage can prevent upload recovery or checkout from working.
The ordering platform uses no optional analytics, advertising pixels or marketing cookies. Stripe may use its own technologies on the hosted payment page. You can manage browser cookies and storage in your browser settings.
Security and retention
Artwork is held in private storage and access is limited to the upload, ordering and fulfilment flows and authorised studio operations. No security measure can guarantee complete protection.
The artwork retention clock is 30 days from upload. Cleanup removes originals, previews and generated artwork after that period when it can safely run; active printing, unfinished transfers and backup safety checks can delay deletion. Keep your own copy because the platform is not an artwork archive.
Order, payment and accounting records are kept separately for fulfilment, legal obligations and resolving disputes. Contact messages and operational records are retained only as needed for their purpose. Restricted recovery backups may retain information until replaced under the backup cycle.
Your rights and complaints
Depending on applicable law, you may request access to, correction or deletion of your information, restrict processing, object to processing based on legitimate interests, or request a portable copy. Where processing relies on consent, you may withdraw it. Some records must be retained to meet legal obligations.
Contact hello@bicep-xpress.com to exercise your rights. We may need to verify your identity before responding. You will not be penalised for making a request. If you are unhappy with our response, you can complain to the UK Information Commissioner’s Office at ico.org.uk.
The service is not directed at children. A parent or guardian can contact us about information submitted by a child.
Changes to this policy
We may update this policy when the platform or our practices change. We will publish the revised wording and update its date.