Privacy policy

• We collect what we need to run Inkari and to answer you: your name, your work email, the company you work for, and what you do in the portal.
• We don’t sell personal data, we don’t advertise, and there are no analytics or tracking cookies.
• Inkari runs on servers in the United Kingdom. A few trusted providers help us run it, and they’re all listed below.
• You can ask to see, correct or delete what we hold about you at any time.

Inkari (“we”, “us”) is software for running campaign print and point-of-sale across a multi-site estate, used by brands, their stores and the companies that print for them.

For anything about your data or this policy, email hello@inkari.co.uk.

When you visit the website

The public website sets no cookies and runs no analytics, advertising or tracking. Like any web server, ours records errors when something goes wrong, and an error record can include your IP address and browser. We use them only to keep the site secure and to fix faults.

When you ask for access or a walk-through

The name, work email, company and role you give us, your estate size if you choose to share it, anything you write in the message, and the page you sent it from. We use it to reply and to talk with you about Inkari, which is our legitimate interest in answering enquiries about our business. We won’t add you to a mailing list.

When you use Inkari

• Your account: your name, work email, the organisation you belong to, your role, and the stores you look after. Your password is never stored, only a one-way hash of it that can’t be turned back into the password.
• How you sign in: each time you sign in we record the browser and device, the IP address, and when the session was last used, so you can see where you’re signed in and end a session you don’t recognise.
• What you do: Inkari keeps a record of who changed what and when, such as approvals, orders, deliveries confirmed and problems reported, because a print programme depends on knowing who signed something off.
• What you upload: artwork, spreadsheets, photographs of fittings and deliveries, and messages. A photograph taken in a store can show people by accident, so please avoid that where you can.
• Store and delivery details: store addresses, contact names, email addresses and phone numbers, and the tracking of deliveries.
• Payments: where card payment is offered, it’s handled by Stripe. Card details go straight to Stripe; we never see or store them.

We use this to provide the service your organisation has asked for (performing our contract), to keep it secure and improve it (our legitimate interests), and to keep the records the law requires, such as invoices (legal obligation).

Emails we send

Invitations, sign-in links, password resets, notices about your work, such as an approval waiting, a delivery due or a problem reported, and replies to your enquiries. We don’t send marketing emails.

Much of what’s in Inkari is put there by the organisations that use it: a brand’s stores and the people who run them, or a print company’s clients and their jobs. For that information the organisation is the controller and we are its processor. We handle it only on its instructions and under our agreement with it, and we don’t use it for anything of our own.

If you work for one of those organisations and want to know what’s held about you, ask your organisation first. We’ll help it answer, and if you write to us we’ll pass your request on.

We never sell personal data. We share it only where we need to in order to run Inkari:

Where a provider handles personal data outside the UK, it does so under safeguards recognised by UK data protection law, such as the UK’s addendum to the EU standard contractual clauses.

We may also share information where the law requires it, to protect our rights or someone’s safety, or with professional advisers who are bound to keep it confidential. If Inkari’s business were ever sold, the buyer would take on this policy.

Inkari’s database, uploaded files and backups are all kept on servers in the United Kingdom.

• Everything travels encrypted over HTTPS, and browsers are told never to connect any other way.
• Passwords are stored only as one-way hashes, and repeated wrong guesses lock an account for a while.
• Sessions are held on our side, so signing out, or changing your password, ends them at once.
• The database and file store can’t be reached from the internet; only the website can.
• Each organisation sees only its own data, and each person sees only what their role allows.
• Everything is backed up every night.

No system is perfectly secure. If something happens that puts your data at risk, we’ll tell the people affected, and the Information Commissioner’s Office where the law requires it.

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you
• correct it if it’s wrong
• delete it, where we don’t need to keep it
• restrict how we use it, or object to our using it
• give it to you, or to another organisation, in a common format

Email hello@inkari.co.uk. It costs nothing, and we’ll reply within one month. We may need to check who you are first.

If you’re unhappy with how we’ve handled your data, please tell us so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Inkari uses only the cookies it needs to work, so we don’t ask you to accept them. There are no analytics, advertising or third-party cookies. The public website sets none at all; these appear once you sign in, or on the demo:

Your browser also keeps two settings that never leave your device: whether you prefer the light or dark look, and the last figures you entered in the nesting planner.

Inkari is for businesses and isn’t meant for anyone under 16.

When we change this policy we’ll update the date at the top. If a change matters, we’ll tell account holders by email before it takes effect.