Legal review required. This is a structured draft for your solicitor. Do not rely on it as final until a UK-qualified advisor has approved it for MeshX POD, your data flows, and subprocessors (Supabase, hosting, email, marketplaces).
1. Who we are
MeshX Software Ltd is the controller of personal data collected through meshx.uk and the MeshX POD software services (including Create, Shop Manager, and Print Network modules) described on our website.
It describes how we collect, use, store, and share personal data when you visit meshx.uk or use our services, and your rights under UK GDPR / GDPR where applicable.
3. Data we may collect
Account & profile: name, email, company name, authentication identifiers.
Service usage: designs, catalogue data, listings metadata, logs, support tickets.
Marketplace connections: where you connect Etsy, eBay, TikTok Shop, or similar, we process tokens and shop data strictly as needed to provide features you enable.
Technical data: IP address, device/browser type, cookies (see Cookie policy).
Billing: handled by our payment provider; we receive limited billing metadata.
4. Lawful bases
Performance of a contract (providing the service you subscribe to).
Legitimate interests (security, abuse prevention, product improvement) where balanced against your rights.
Consent where required (e.g. certain cookies or marketing).
Legal obligation where applicable.
5. How we use data
Provide, secure, and improve MeshX POD.
Authenticate users and enforce subscription entitlements.
Communicate service, billing, and security notices.
Comply with law and respond to lawful requests.
6. Subprocessors & transfers
We use trusted infrastructure and service providers (e.g. hosting, database, storage, email). Data may be processed outside the UK/EEA with appropriate safeguards (e.g. UK IDTA / EU SCCs) where applicable.
7. Retention
8. Your rights
You may have rights to access, rectify, erase, restrict, object, and port data, and to withdraw consent where processing is consent-based. You may lodge a complaint with the ICO (UK) or your local supervisory authority.
9. Children
Our services are not directed at children under 16 .
10. Changes
We will update this policy when our practices change. The “Last updated” date will be revised.