GDPR Compliance & Privacy Notice

Last Updated: October 1, 2026

PrintopperMail respects the privacy of individuals and is committed to protecting personal information in accordance with applicable data-protection laws, including the General Data Protection Regulation (GDPR) where it applies.

This GDPR Notice explains how personal information may be collected, used, stored, and processed when you visit printoppermail.online, contact us, or use our email infrastructure and related services.

1. Scope of This Notice

This Notice applies to personal information processed by PrintopperMail in connection with:

  • Our website

  • Customer inquiries

  • Business email services

  • Mail-server services

  • SMTP configuration

  • Email infrastructure

  • SPF, DKIM, and DMARC configuration

  • Technical support

  • Email campaign-management services

  • Other services provided by PrintopperMail

Where we process personal information on behalf of a business customer, the customer may determine the purposes and means of processing and may act as the data controller, while PrintopperMail may act as a data processor.

The applicable roles depend on the specific service and processing activity.

2. Personal Information We May Process

Depending on how you interact with us, we may process information such as:

  • Name

  • Business or company name

  • Email address

  • Phone number

  • Website or domain information

  • Account or service information

  • Technical configuration information

  • IP address

  • Browser and device information

  • Website usage information

  • Customer support communications

  • Campaign configuration information

  • Email addresses or contact lists provided by customers

  • Email templates and campaign content

  • Delivery and technical information

  • Other information voluntarily provided to us

We aim to collect only information that is reasonably necessary for the relevant purpose.

3. Legal Bases for Processing

Where GDPR applies, we may process personal information based on one or more of the following legal bases under Article 6 of the GDPR:

Consent

Where required, we may process information based on your consent.

You may withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Contract

Processing may be necessary to provide services you request, perform an agreement with you, or take steps at your request before entering into an agreement.

Legal Obligation

We may process information where necessary to comply with applicable legal or regulatory obligations.

Legitimate Interests

We may process information where necessary for legitimate interests, provided those interests are not overridden by your rights and interests.

Examples may include:

  • Maintaining website security

  • Preventing fraud and abuse

  • Protecting our systems

  • Providing customer support

  • Maintaining and improving our services

  • Managing business relationships

  • Troubleshooting technical issues

4. Use of Personal Information

We may use personal information to:

  • Respond to inquiries

  • Provide requested services

  • Configure and maintain email infrastructure

  • Provide technical support

  • Manage customer accounts and services

  • Configure SMTP and email authentication

  • Process campaign-related instructions

  • Maintain and secure our systems

  • Detect and prevent unauthorized activity

  • Improve our website and services

  • Maintain business and technical records

  • Meet legal and regulatory obligations

We do not process personal information for purposes that are incompatible with the purpose for which it was collected unless permitted or required by applicable law.

5. Data Controller and Data Processor Roles

The role PrintopperMail performs may depend on the service involved.

When PrintopperMail is a Data Controller

We may act as a controller when we determine the purposes and means of processing information, such as information relating to our own website visitors, business inquiries, customers, billing, security, and business administration.

When PrintopperMail is a Data Processor

When a business customer provides personal information, such as a recipient list, for us to process according to the customer's instructions, the customer may be the controller and PrintopperMail may act as a processor.

In such circumstances, we process personal information according to the customer's instructions and applicable contractual requirements.

6. Customer Responsibilities

Customers using our email infrastructure or campaign-management services are responsible for ensuring that their processing activities comply with applicable privacy and data-protection laws.

Customers should ensure that:

  • They have an appropriate lawful basis for processing personal information.

  • They have appropriate authorization to use recipient information.

  • They provide required privacy notices to individuals.

  • They respect applicable data-subject rights.

  • They maintain appropriate records where required.

  • Their email campaigns comply with applicable marketing and anti-spam laws.

  • Their recipient lists are collected and used lawfully.

PrintopperMail does not provide legal advice regarding a customer's GDPR compliance.

7. Data Subject Rights

Where GDPR applies, individuals may have the following rights, subject to applicable legal conditions and limitations:

Right of Access

You may request confirmation of whether we process your personal information and, where applicable, request access to that information.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of personal information where the requirements of Article 17 of the GDPR are satisfied.

Right to Restriction

You may request restriction of processing in circumstances provided by applicable law.

Right to Data Portability

Where applicable, you may request certain personal information in a structured, commonly used, and machine-readable format.

Right to Object

You may object to certain processing activities where the GDPR provides this right, including certain processing based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Right to Lodge a Complaint

You may lodge a complaint with the data-protection authority in your country or EU member state if you believe your rights have been violated.

8. How to Exercise Your Rights

To submit a privacy request, contact us:

Email: contact@printoppermail.online

Please provide enough information for us to understand and verify your request.

For security purposes, we may request additional information to verify your identity before responding to certain requests.

We generally aim to respond to valid GDPR requests within the period required by applicable law.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business records, resolving disputes, preventing abuse, maintaining security, and complying with legal obligations.

When personal information is no longer required, we may delete, anonymize, or securely dispose of it in accordance with applicable requirements.

Where we act as a processor, retention may also be determined by the customer's instructions or applicable service agreement.

10. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, accidental loss, alteration, disclosure, destruction, or misuse.

Security measures may include:

  • Access controls

  • Authentication controls

  • Secure communications

  • System monitoring

  • Security procedures

  • Appropriate technical safeguards

  • Limited access to personal information

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

11. Data Breaches

Where GDPR applies, we maintain procedures designed to identify, investigate, and respond to personal-data security incidents.

Where we act as a data processor, we will notify the relevant customer of a personal-data breach in accordance with applicable contractual and legal requirements.

Where we are the data controller, we will assess incidents and make any legally required notifications to the appropriate supervisory authority and affected individuals.

12. International Data Transfers

Personal information may be processed or stored in countries outside the European Economic Area (EEA).

Where GDPR applies and personal information is transferred outside the EEA, we will use appropriate safeguards where required by applicable law.

Depending on the circumstances, these safeguards may include an adequacy decision, appropriate contractual safeguards, or another legally recognized transfer mechanism.

13. Subprocessors and Service Providers

We may use third-party providers to help operate our website and services, including hosting, infrastructure, security, technical support, analytics, and other business services.

Where PrintopperMail acts as a data processor, applicable subprocessors may process personal information only as authorized and subject to appropriate contractual and data-protection requirements.

We seek to use service providers that provide appropriate security and privacy protections.

14. Cookies

Our website may use cookies and similar technologies for necessary website functionality, security, preferences, and other purposes.

Where consent is legally required, we will seek appropriate consent before using non-essential cookies.

You may also control cookies through your browser settings.

15. Children's Data

Our services are intended for businesses and general users and are not directed toward children.

We do not knowingly seek to collect personal information from children for purposes unrelated to providing a requested service.

If you believe that a child has provided personal information to us, please contact us.

16. Automated Decision-Making

We do not intend to use personal information for automated decision-making that produces legal or similarly significant effects on individuals unless such processing is properly disclosed and permitted under applicable law.

17. Direct Marketing

Where we send marketing communications, we will do so in accordance with applicable privacy and electronic-marketing laws.

Where consent is required, we will obtain appropriate consent before sending marketing communications.

You may request that we stop sending marketing communications at any time by contacting us or using an available unsubscribe mechanism.

18. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or data-protection policies of third-party websites.

We recommend reviewing the applicable privacy notice before providing personal information to a third party.

19. Changes to This GDPR Notice

We may update this GDPR Notice when our services, processing practices, technology, or applicable legal requirements change.

The latest version will always display the applicable Last Updated date.

20. Contact Information

For GDPR, privacy, or data-protection questions, please contact:

PrintopperMail
Email: contact@printoppermail.online
Website: printoppermail.online

If you are contacting us to exercise a GDPR right, please clearly identify the nature of your request so that we can process it efficiently.

© 2026 PrintopperMail. All Rights Reserved.