Privacy
Last updated Oct 1, 2026
This policy explains what personal information Mantelmade collects when you order a print or a postcard, why we collect it, who we share it with and what you can do about it.
Who we are
Mantelmade is a trading name of JRL Software Ltd, a company registered in England and Wales, company number 15511536. Registered office: Flat 1, 450 Cerulean House, Oldfield Lane North, Greenford, UB6 0GF, United Kingdom. VAT number GB520260639.
We decide how and why your personal information is used, which makes us the data controller under the UK GDPR. In this policy, "we" and "us" mean that company.
Mantelmade is an independent service. It is not made, sponsored or endorsed by OpenAI. If you use Mantelmade inside ChatGPT, OpenAI's own privacy policy covers what OpenAI does with your conversation.
What we collect
We collect what we need to make and send your order, and nothing more.
- Your image and design. The image you ask us to print, its size and file type, and the result of our automated image check (passed, or blocked and why). We do not keep an image that fails the check.
- Postcard message. For postcards, the message you want printed on the back, up to 350 characters.
- Names and addresses. For prints, the name and US address you enter at checkout. For postcards, the recipient's name and US address. If you send a postcard to someone else, we hold their name and address too.
- Your email address. Entered at checkout, and used for your receipt and order emails.
- Order details. The order number, what you ordered, the size, the price, the date, and the status of printing and shipping, including tracking links and our providers' order references.
- Payment details. You enter your card or other payment details in a form run by Stripe. They go to Stripe, not to us. We never see or store your card number. Stripe tells us that you paid and shares the order details it collected for us, such as your name, email and shipping address.
- Technical information. Like most websites, our hosting provider logs IP addresses, browser details and the pages requested, to keep the site secure and running.
- Your messages to us. What you send when you email support.
When you use Mantelmade in ChatGPT, ChatGPT sends us the image, the postcard message and the options you chose. We do not receive the rest of your conversation.
In US privacy terms, that is identifiers (name, email, address), commercial information (orders), images you provide, and internet activity (hosting logs). We do not sell this information or share it for advertising. We disclose it only to the providers named below, for the purposes in this policy.
Why we use it
We use personal information for the purposes below. The UK GDPR requires a legal basis for each one, shown in brackets.
- To take your order and payment, print and ship or mail it, and send you order emails (contract: we need it to carry out your order).
- To enlarge small images so they print sharply (contract).
- To check images before printing and to enforce our print rules (legitimate interests: keeping unlawful or harmful content out of what we make).
- To look up orders, answer questions and fix problems (contract and legitimate interests: running a service that works).
- To prevent fraud and keep the service secure (legitimate interests).
- To keep tax and accounting records and meet other legal duties (legal obligation).
We do not sell your personal information. We do not use it for advertising, we do not send marketing emails, and we do not use your images to train AI models.
Automated image check
Every image goes through an automated check before it is printed. We send the image to fal, which has Google's Gemini AI model decide whether it breaks our print rules, for example because it shows a brand logo or adult content. If it does, we do not print it and we tell you why. For postcards we also send the message to fal, which has the model check that it is fine to mail. If you think the check got it wrong, email support@mantelmade.com and we will review it.
Where it is processed
We are based in the UK and most of our providers are in the US. When personal information is transferred outside the UK, we make sure a lawful safeguard is in place, such as the UK-US data bridge or standard contractual clauses approved for use under UK law.
How long we keep it
- Designs and uploads. We delete your image and design details 30 days after you create them.
- Print files. The files we generate for printing are deleted 90 days after they are made.
- Order records. Kept in Stripe for as long as tax and accounting law requires, which for a UK company is generally up to six years. They include the order number, the item, your email, the shipping details and, for postcards, the message and recipient's address.
- Support emails. Kept for as long as we need to deal with your question and any follow-up.
Our providers keep information for their own periods, set out in their privacy policies. For example, Printful and Lob keep order records. If you want your image deleted sooner, email support@mantelmade.com.
Your rights and choices
UK GDPR
You can ask us for a copy of the personal information we hold about you, to correct it, to delete it, to restrict how we use it, to give it to you in a portable format, and to stop uses that rely on our legitimate interests. Some rights have limits. For example, we have to keep order records for tax purposes. You can also complain to the UK Information Commissioner's Office at ico.org.uk. We would like the chance to put things right first.
US state privacy laws
If you live in a US state with a privacy law, such as California, Colorado, Connecticut, Oregon, Texas, Utah or Virginia, you may also have the right to know what personal information we collect, use and disclose, to access, correct and delete it, to get a portable copy, and to opt out of the sale or sharing of your information, targeted advertising and profiling. We do none of those things. We do not knowingly collect sensitive personal information, and we do not use any that appears in an image for anything except printing your order. You will not be treated differently for using your rights.
How to use your rights
Email support@mantelmade.com from the address on your order and include your order number. We may ask you to confirm it is you, usually by replying from that address. You can ask an authorized agent to act for you, and we may ask for proof. We reply within one month. If a request is complex, the law lets us take longer, and we will tell you why. If we decline a US state request, you can appeal by replying to our answer with the subject "Appeal". If you are still unhappy, you can contact your state attorney general.
How we protect it
Connections to Mantelmade use HTTPS, and card details go straight to Stripe. Files are stored on our own server, run by Hetzner Online GmbH, at long random addresses that we do not publish. Anyone who has the address of a file can open it, so share your order links carefully. No system is completely secure, so we keep as little as we can and delete it on the schedule above.
Children
Mantelmade is for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children under 13. You must be 18 or over to place an order. If you think a child has given us personal information, email support@mantelmade.com and we will delete it.
Changes to this policy
We may update this policy. The date at the top shows when it last changed. If we change how we use information you have already given us in a way that matters, we will say so on this page before the change takes effect.
Contact
Email support@mantelmade.com, or write to us at our registered office: JRL Software Ltd, Flat 1, 450 Cerulean House, Oldfield Lane North, Greenford, UB6 0GF, United Kingdom.