Vista Privacy and Cookie Notice

Last updated: 30 September 2024

This Vista Privacy and Cookie Notice ("Privacy Notice") describes how Vista and its signature services, including VistaPrint, VistaCreate, 99designs by Vista, and Vista Corporate Solutions (collectively, "Vista", "we", "our", or "us"), collect, use and share your personal information when you use and access our websites and mobile sites ("Sites"), applications ("Apps") services, and other tools we offer (collectively "Vista Services"). This Privacy Notice also gives information about the rights and options you have to control your personal information.

This Privacy Notice applies to all users of our Vista Services, including unregistered and registered consumer users, business users and employees of business users, designer contributors, customers and potential customers (collectively, "user", "you" or "your"), and to all Vista Services that link to this Privacy Notice.

Please keep in mind that this Privacy Notice does not apply to personal information collected by third-party websites and apps that may post links or advertisements on or otherwise be accessible from our Sites and Apps. We advise you to read the privacy notices of these third parties when you visit their websites or apps in order to understand how such third parties collect and use your personal information.

Content

This Privacy Notice will give you information about:

We encourage you to read this Privacy Notice carefully and to consult it on a regular basis when using the Vista Services. If you have any questions about this Privacy Notice or our privacy practices, please contact us by emailing [email protected].

Who is responsible for collecting and using your personal information

Cimpress Schweiz GmbH and the Cimpress group companies listed below provide the Vista Services and are independently responsible for collecting, using and disclosing your personal information when providing you with the Vista Services you requested. Cimpress Schweiz GmbH and the other Cimpress group companies listed below work together to bring your print, digital and design needs all over the world. Where Cimpress group companies are jointly responsible for using your personal information to bring you with specific Vista Services, appropriate arrangements are in place and you can reach out to each Vista entity to enforce your privacy rights. Depending on the Vista Service you use and your location, the relevant Cimpress companies who are responsible for the collection and use of your personal data can be found below. Regardless of the Vista Service you have used or the Cimpress company responsible for providing the Vista Service, you can reach out to us at any time by sending an email to [email protected].

Vista Services User Location Responsible Cimpress Company
Vista account Global Cimpress Schweiz GmbH, Talacker 41, 8001 Zürich, Switzerland
Contact us by sending an email to [email protected]
VistaPrint Services If you reside in the European Economic Area (“EEA”), UK or Switzerland Vistaprint B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands
Contact us by sending an email to [email protected]
If you reside in the United States Vistaprint Netherlands B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands
Contact us by sending an email to [email protected]
If you reside in Australia, New Zealand, or Singapore Vistaprint Australia Pty Limited, 66 Paramount Boulevard, Derrimut, Victoria 3030, Australia
Contact us by sending an email to [email protected]
If you reside in Canada Vistaprint Canada Corporation, 333 Bay Street, Suite 2400, Toronto, Ontario, M5H 2T6, Canada
Contact us by sending an email to [email protected]
If you reside in India Cimpress India Private Limited, ‘C’ Block, Voltas Premises, T. B. Kadam Marg, Chinchpokli, Mumbai -400 033, Maharashtra, India
Contact us by sending an email to [email protected]
For all other countries Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used.
VistaCreate Services Global Crello Limited, 1 Anastasi Sioukri, Themis Court, 4th floor, Office 402, 3105 Limassol, Cyprus
Contact us by sending an email to [email protected]
99designs by Vista Services Global, except United States 99designs Pty Limited, Level 2, 41-43 Stewart Street, Richmond, VIC 3121, Australia
Contact us by sending an email to [email protected]
United States 99designs LLC, 275 Wyman Street, Waltham, MA 02451, United States
Contact us by sending an email to [email protected]
Vista Corporate Solutions Services If you reside in the United States or Canada Vistaprint Corporate Solutions Incorporated, c/o 275 Wyman Street, Waltham, MA 02451, United States
Contact us by sending an email to [email protected]
If you reside in Australia Vistaprint Australia Pty Limited, 66 Paramount Boulevard, Derrimut, Victoria 3030, Australia
Please use our US postal address for post communications: c/o 275 Wyman Street, Waltham, MA 02451, United States
If you reside in the European Economic Area (“EEA”), UK or Switzerland Vistaprint Corporate Solutions UK Limited, c/o Cogency Global (UK) Limited, 6 Lloyds Avenue, Unit 4CL, London EC3N 3AX
Please use our US postal address for post communications: c/o 275 Wyman Street, Waltham, MA 02451, United States
For all other counties Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used.
Other Vista Services Global Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used.

What personal information we collect

Personal information is all information that identifies you directly or in combination with other information. Personal information does in general not include information concerning a legal person or entity.

Vista offers you a wide range of services to bring together your print, digital and design needs. Depending on how you use the Vista Services, we collect and use personal information that you provide to us, automatically or otherwise. If you are a registered user, we link personal information that we automatically collect when you use the Vista Services to other personal information we collect about you. Below we explain which personal information we collect and use, and for which purposes.

Categories of personal information Description
Account Information Personal information we collect when you register for an account on our Sites and Apps, including:
  • first and last name;
  • e-mail address;
  • password.
Technical Information Personal information we automatically collect when you visit, access or navigate our Sites and Apps, including:
  • your IP address;
  • information about your computer's hardware and software (for example, the type of operating system, the browser you use, the versions of the application or software, and language settings);
  • location information (inferred from your IP address, such as country, state and/or city);
  • URL requested;
  • log information;
  • browser type;
  • browser history (such as the webpage that led you to our Sites and/or Apps);
  • online identifiers such as cookie data or data collected with other similar technologies.
For more information about how we use these technologies, please see How we use cookies below.
Usage Information Personal information we automatically collect about your activities on our Sites and Apps, including:
  • the date, time and pages you visit;
  • how you use our Vista Services and access its contents (such as search history, clickstream data, access logs and other usage data regarding your interactions with our Sites and Apps, and our marketing emails and online ads);
  • session replay recordings (such as mouse movements, clicks, key touches, typing and scrolling).
Transaction Information Personal information you provide when you place an order or request a Vista Service, including:
  • your delivery, billing and payment information (such as credit card or bank account details). You can also choose to store your credit card or other payment information in your Vista account to make it easier to purchase products or services from our Sites and Apps in the future;
  • tax information and information to verify your identity where required by local laws (such as passport, ID card or driving licence information);
  • purchase and transaction history;
  • telephone number;
  • email address.
Content Information Personal information you provide when you upload and share content (“Content”) with us or other users within our Sites and Apps or to personalise products and services, including:
  • images;
  • photos;
  • logos;
  • videos;
  • music tracks;
  • content-related information such as time and place of the content creation, tags and similar information stored by your device;
  • content of reviews you write;
  • any other content you choose to provide or upload when using the Vista Services.
Profile Information Personal information you share with us when you create a profile, including:
  • your gender;
  • country;
  • preferred language;
  • other information about your interests and preferences, including favourite templates and work on designs or products;
  • content you choose to make available to other users, such as your professional background, time zone, location, avatar, design concepts and templates, service offerings, and messages and testimonials.
Communication Information Personal information you provide and we automatically collect when you contact our customer care teams (e.g. chat(bot), email or phone) or communicate with us by other means (e.g. social media, text), including:
  • first and last name;
  • email address;
  • phone number;
  • subject matter;
  • description;
  • content of correspondence;
  • data exchanged with you by telephone, chat or other means of communication;
  • call recordings.
Marketing Information Personal information you provide to receive marketing materials about our products and services, including:
  • name;
  • email address;
  • phone number;
  • marketing and communication preferences;
  • social media profile(s).
Forms Information Personal information you provide when you choose to participate in sweepstakes, contests or surveys, including:
  • name;
  • email address;
  • phone number;
  • other relevant personal information as explained in the sweepstake, contest or survey.
If you participate, we may publicly disclose that information.

Personal information we receive from other sources

Vista may also obtain information about you that is publicly available or from other sources, such as independent third parties, business partners or Cimpress group companies. Any information we receive from these sources is combined with the personal information you provide to us for the purposes described in this Privacy Notice. The below overview sets out which personal information we receive from third parties.

Categories of third parties Description Categories of personal information
Postal service providers We may need to collect data, (e.g. name and postal address information) to validate your postal address Transaction Information
Security providers, fraud detection and prevention providers In certain instances, and as permitted by applicable law, we may need to collect your personal information to help us screen users for fraud detection and prevention purposes
Account Information
Technical Information
Usage Information
Social media platformsWe collect your personal information (e.g. email, username, account information, profile photo) when you log in or sign-up using your social media account
Account Information
Profile Information
Advertising and marketing partnersWe receive your personal information from advertising and marketing partners to monitor, manage and measure our ad campaigns and serve you more relevant advertising
Technical Information
Usage Information
Marketing Information
Lead enhancement companiesIn some cases, we collect personal information (e.g. name, email,address, phone) from lead enhancement companies to help us improve our service offering
Account Information
Usage Information
Profile Information

Personal information you give us about others

The Content you choose to upload to our Sites and Apps may include personal information of other individuals. If you choose to share your Content or other information with someone else through a feature we offer, or participate in our referral program, we will use the personal information you provide (for example, the email address of the recipient) to fulfil your request and the specific service requested. Please make sure other individuals are aware of and agree with the sharing of their personal information with us.

Why we process your personal information

In the overview below we explain which personal information we use and how and why we use it.

Purpose of processing Categories of personal information Corresponding legal basis
Creating, managing and maintaining your Vista account and facilitate integrated services
Account Information
Technical Information
Usage Information
Content Information
Profile Information
This is necessary for us to fulfil our contract with you to create, manage and maintain your Vista account and facilitate integrated services, including:
  • single-sign on;
  • allowing you to log in;
  • navigate the Sites and Apps;
  • verify your identity;
  • store your uploads and designs;
  • provide technical support.
To provide you with the Vista Services
Account Information
Technical Information
Usage Information
Transaction Information
Content Information
Profile Information
Communication Information
This is necessary for us to fulfil our contract with you. For example, to:
  • enable you to access and use our Vista Services, including uploading, downloading, collaborating on and sharing Content;
  • process, manage and deliver your purchase order.
Further, it is our legitimate business interest to:
  • provide you with experiences, products and services you request, view, engage with or purchase;
  • maintain and administer our Vista Services.
To provide you with a helpful and seamless customer support experience
Account Information
Technical Information
Transaction Information
Content Information
Profile Information
Communication Information
It is our legitimate business interest to provide you with a helpful and seamless customer support experience, including by:
  • sharing relevant data with our Customer Care team to address your questions and needs;
  • monitoring or recording calls and chats with our Customer Care team for quality control and training purposes;
  • using an AI assistant to offer reply suggestions and summarize key information at the end of a customer interaction to enhance response accuracy, consistency and efficiency of our Customer Care team.
Where required by applicable law we will ask for your prior consent for specific processing activities.
To provide you with a personalised user experience
Account Information
Technical Information
Content Information
Profile Information
It is our legitimate business interest to provide you with personalised services, including:
  • conducting marketing and/or market research;
  • to personalise our communications with you;
  • to tailor the content you see in order to provide features and information that match your interests and preferences; and
  • to group users of our Vista Services based on, for example, usage and demographics.
Where required by applicable law we will ask for your prior consent for specific processing activities.
To analyse customer usage patterns, conduct research, improve and develop our products, features and Vista Services
Technical Information
Usage Information
Content Information
Profile Information
Communication Information
Marketing Information
It is our legitimate business interest to analyse, develop and improve our Vista Services (including by understanding how you use the services) and to develop new features, services or products. Where required by applicable law we will ask for your prior consent for specific processing activities.
Supporting collaboration, networking and projects
Account Information
Content Information
Profile Information
This is necessary for us to fulfil our contract with you to enable you to communicate, collaborate and share Content with users you designate, to enable you to connect with designers, to submit projects and receive bids for design services and to otherwise connect users and designers or other providers.
To create profiles and market our activities and promote our products and Vista Services (including providing co-branded offers with our partners or affiliated Cimpress companies)
Content Information
Profile Information
Marketing Information
Forms Information
It is our legitimate business interest to market our activities and promote products and services, including to send you offers and promotions of our products and services or products and services offered by our partners or other Cimpress group companies. Where required by applicable law we will ask for your prior consent for specific processing activities.
To protect, establish, exercise or defend our and third parties’ rights, and to defend against lawsuits
Account Information
Technical Information
Usage Information
Transaction Information
Content Information
Profile Information
Communication Information
It is our legitimate business interest to protect our interests and rights, and the rights and interests of third parties, for instance to defend our rights in legal proceedings.
To secure our Vista Services and data processed via our Vista Services, and to prevent, detect, and investigate unlawful or unwanted behaviour, including crime and fraud, within or related to the Vista Services and the products we provide
Account Information
Technical Information
Usage Information
Transaction Information
Content Information
Profile Information
Communication Information
It is our legitimate business interest to keep the Vista Services safe, to prevent, detect and investigate unlawful or unwanted behaviour, and to protect our and third parties’ rights and interests.
To comply with legal and regulatory requirements, and cooperating with regulators and government authorities
Account Information
Technical Information
Usage Information
Transaction Information
Content Information
Profile Information
Communication Information
We process your personal information to comply with our legal obligations, and to cooperate with regulators and government authorities where required by law or when we have legitimate business reasons to do so.

With Which Parties We Share Personal Information

Where relevant and necessary, we provide your personal information to the following trusted third parties or service providers:

  • Third-party service providers to support us in operating our Sites and Apps, and providing the Vista Services, including website and platform hosting companies, IT service providers, marketing and analytics providers, payment processors, fraud detection and prevention companies, order fulfilling and delivering service providers, session replay and chat technologies providers, machine learning providers and other commercial partners to provide and improve our Vista Services.
  • Group companies that support us in providing the Vista Services and the processing of your personal information for the purposes described in this Privacy Notice.
  • Our partners if you choose to receive products or services from our partners. In such cases, our partners have access to and process your personal information. We also share your personal information where you direct us as part of the Vista Services to share your personal information with another user or to a third-party service provider to integrate our Vista Services with a service that such user or third party may provide, for example, with a third-party printing partner or third-party designers who may assist you with your website, logo or product designs, website builder or web development service provider so that they can provide you with a service.
  • Law enforcement agencies, courts, regulators, government authorities and other similar public authorities or third parties when this is necessary to comply with a legal obligation or when we have legitimate business interests to do so, for instance, to protect our or a third party’s rights and interests.
  • Professional advisors when we have legitimate business interests to do so, for instance, to obtain legal advice or to assist us with a criminal or regulatory investigation.
  • Third parties in connection with investments, reorganizations, restructurings, mergers, bankruptcy, insolvency events, joint ventures, sale of shares or assets, or similar events. It is our legitimate business interest to share relevant and necessary data to enable such investments, reorganisations, restructurings, mergers, bankruptcy, insolvency events, joint ventures, sale of shares or assets, or similar events.

How We Transfer Personal Information Internationally

Vista is an international company and operates globally. We therefore transfer or store your personal information globally, including but not limited to the United States of America, Australia, Brazil, Jamaica, Tunisia and the Philippines. Such countries may provide a lower level of data protection than your country. For example, Cimpress group companies, third-party service providers, or partners may be located outside of the EEA, the United Kingdom or Switzerland. Where required by applicable data protection laws, we put in place appropriate safeguards to make sure your personal information is adequately protected, for instance by putting in place Standard Contractual Clauses as approved by the European Commission, by examining the countries to which the data is transferred, and by imposing specific technical and organisational security measures if needed.

If you would like to receive additional information on the transfer of your personal information or the transfer mechanisms used, please contact us by sending an email to [email protected].

How to Exercise Your Rights

You have certain rights to control how your personal information is used. Depending on the applicable law, these may include the right to:

  • Access: Access your personal information and obtain a copy of the personal information we hold about you.
  • Rectify: Correct or update inaccurate or incomplete personal information.
  • Erasure: In certain situations, request that we erase your personal information.
  • Object: In certain situations, object to the processing of your personal information.
  • Portability: In certain situations, receive your personal information in a reusable electronic format.
  • Restrict: In certain situations, restrict or block the processing of your personal information.
  • Withdraw consent: Withdraw your consent where we processed your personal information based on your prior consent.

We may ask you to verify your identity before taking further action on your request. We also rely on you to make sure that the personal information you provide is complete, accurate and up-to-date. Please let us know of any changes to or inaccuracies in your personal information by sending an email to [email protected].

If you have a Vista account, you can access, update, and remove the personal information available in your account and change your preferences by going to your account settings page. You can also contact our Customer Care team by using any of the methods listed in the "How to Contact Us" section below.

Opt-out of Marketing Communications

You can change your marketing preferences at any time by following the "unsubscribe" instructions contained in the messages you receive, by changing your marketing preferences through your Vista account settings, or by contacting the Customer Care team. Even if you choose to unsubscribe from receiving advertising via email, telephone, or by post, we may still communicate with you using any of these methods regarding your orders, your Vista account, or for other administrative purposes (such as communications related to a pending order, an unresolved customer care issue, or a policy update). If you do not want to receive any communications from Vista, please delete your Vista account.

What Happens When You Request Your Account to be Deleted?

After we have verified your identity in response to your deletion request, we will close your Vista account and erase your personal information from our systems. Please note, however, that we may be allowed or required by law to keep certain information (e.g., records of transactions or shipments), for instance, to comply with legal record-keeping and tax obligations. After we process your deletion request, you will immediately lose access to:

  • Your Vista account;
  • Your Vista account login and password;
  • Order history with any Vista Services;
  • Products you have designed and stored, and Vista Services you have used;
  • Uploaded images, any stored designs and other content with any Vista Services.

Please be aware that deleting your Vista account is a permanent change and cannot be reversed.

We are committed to handling your queries and complaints as best as we can. We encourage you to address any concerns or issues with us first by emailing [email protected], so that we can try to resolve it in a timely and effective manner. You also have the right to file a complaint with your local supervisory authority at any time.

How We Protect and Store Personal Information

Vista has implemented technical and organisational security measures to protect your personal information. These measures are aimed at ensuring the integrity, confidentiality and availability of your personal information and to protect it against unlawful or unauthorised destruction, loss, alteration, use, disclosure or access. These measures include but are not limited to encryption methods, access controls, controlled administration of user rights and limiting access to personal information on a need-to-know basis. We evaluate and update these measures on a regular basis.

We encourage you to also take the security of your personal information seriously and select a strong password when creating a Vista account and not share it with others. You may change your Vista account password as often as you wish by going to your 'Account Settings'. If you have reason to believe that the security of your account might have been compromised (for example, your password has been leaked) or if you suspect someone else is using your account, please let us know immediately.

We take information security and privacy seriously, and our goal is to provide a safe and secure site for all users. To achieve this goal, we have implemented a security program to identify and remediate security issues, and we utilise external security researchers to report vulnerabilities. If you believe you have identified a security issue on our Sites or Apps, please contact [email protected].

We will retain your personal information for the duration of our relationship, unless a shorter retention period is required by law or the data is no longer necessary for the purposes for which we processed your data. Once our relationship with you has come to an end, we will retain your personal information for the period of time that enables us to:

  • Check our records of transactions or shipments;
  • Fulfil our legal obligations, including legal retention periods;
  • Initiate, investigate or defend against legal claims;
  • Address your questions, requests or complaints; and
  • Keep our records for analysis and audit purposes.

How We Handle Personal Information of Children

The Vista Services are not targeted at or meant for use by children under the age of sixteen (16) years old, and children under that age are prohibited from creating an account or otherwise providing their personal information. If we become aware that a child under the age of sixteen (16) has provided personal information through our Sites and/or Apps, we will delete their personal information. We ask parents or guardians to contact us at [email protected] if they become aware that their child has shared their personal information with us.

The Roles and Responsibilities for Business Users for Which We Act as Service Provider or Processor

We provide our business users with specific services on their websites for which we act as service provider or processor. We collect personal information of visitors and users of the business user’s websites or services ("End Users Information"), only as instructed by and on behalf of the business user. For example, business users are able to add a contact form on their website. Any personal information submitted by visitors of the website of the business users are then stored with Vista on the business user’s behalf. For such purposes, Vista acts as service provider or processor on the business user’s behalf when processing End Users Information and will act in accordance with the data processing agreement between Vista and the business user. Business users will be solely and independently responsible for the collection and use of End Users Information by using Vista Services and are responsible for complying with applicable data protection laws.

How We Use Cookies and Other Similar Technologies

We use cookies, pixels and other similar technologies (collectively referred to as “cookies”) to provide and improve our Vista Services, to tailor your website experience and to show personalised ads. Cookies are useful because they allow a website to recognise a user’s device. To learn more about what type of cookies VistaPrint uses, please visit our [Cookie Notice](#).

You can manage which cookies are placed on your device by:

  • Using browser controls: The Help menu on the menu bar of most browsers will tell you how to enable or prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie and how to disable cookies altogether. You can also disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on's settings or visiting the website of its manufacturer. Please be aware that if you disable or delete certain cookies, our websites will not work properly.

  • Third-Party Cookies: When you use our Sites and Apps, you may notice content provided by a company other than us. Also, if you 'share' Vista content with friends through social networks, such as Facebook and Pinterest, these social networks may place cookies on your browser. We have no access to or control over cookies used by these companies or third-party websites. If you’d like to opt out of cookies created by 'sharing' Vista content through social networks — such as Facebook and Pinterest — we suggest you check those third-party websites for more information about their cookies and how to manage them.

If you want to know more about Third-Party Cookies and how to opt out of them, see www.allaboutcookies.org and www.youronlinechoices.eu.

How to Contact Us

If you have general questions about the Vista Services or would like to update your marketing preferences, please reach out to the Customer Care team as listed below:

If you have any questions about this Privacy Notice or our privacy practices, or would like to exercise your privacy rights, please contact us by emailing [email protected].

Users residing in the EU may also contact our EU representative at Vistaprint B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands.

Users residing in the UK may also contact our UK representative at Tradeprint Distribution Limited, 2 Fulton Rd, Dundee Scotland, UK, DD2 4SW.

Changes to This Privacy Notice

From time to time, we may change this Privacy Notice to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We reserve the right to modify this Privacy Notice at any time in accordance with the applicable law. If we do so, we will post the revised Privacy Notice and update the "Last Updated" date at the top, so please review it frequently. In case of material changes, we will also provide notice to you and, where required by applicable law, we will obtain your consent. We will send such notice by email to the last email address you provided to us, by posting the notice on our Sites and Apps, and/or by other means, consistent with applicable law.