Privacy Policy

1. Who we are

OR PRINTER USA (“we”, “us”) sells hot foil stamping machines, custom magnesium dies, and related supplies from 202 N. Great Southwest Pkwy., Grand Prairie, TX 75050, USA. This policy explains what personal data we collect through orprinterusa.com, why, and the rights you have. Contact us any time at sales@orprinterusa.com or 469-284-8627.

2. Information we collect

• Contact and quote requests (contact forms): name, company, phone number, email address, and the project details you choose to share.
• Customer portal account: company name, full name, email address, and a password (stored only as a salted hash).
• Orders for custom dies: order specifications, artwork files and purchase-order files you upload, shipping contact, address, phone, and carrier account number.
• Payment methods: if you save a card for future orders, it is tokenized and processed by Stripe. We store only the card brand, last four digits, and expiry — never full card numbers.
• Analytics: with your consent, Google Analytics / Google Tag Manager collect pseudonymous usage data (pages visited, approximate location derived from IP, device and browser type).
• Server logs: standard web-server logs (IP address, timestamps, requested pages) kept for security and troubleshooting.

3. How we use it

• To answer quotes and questions, and to provide pricing (performance of a contract or steps prior to it).
• To create and manage your portal account and to manufacture and ship your die orders (contract).
• To process payments, including charges to a card you have saved on file with your authorization (contract).
• To measure and improve the website with analytics (your consent, which you can withdraw at any time).
• To keep the site secure and to comply with legal, accounting, and tax obligations (legitimate interests / legal obligation).

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

3.1 For visitors from the EU / EEA (GDPR)

Where the GDPR applies, we rely on: performance of a contract; compliance with legal obligations; legitimate interests (site security, service improvement); and your consent for analytics cookies. You have the right to access, rectify, erase, restrict processing of, and port your data, to object to processing based on legitimate interests, to withdraw consent at any time, and to lodge a complaint with your national supervisory authority.

3.2 For California residents (CCPA/CPRA)

• Right to know the categories and specific pieces of personal information we collect, use, and disclose.
• Right to delete and right to correct your personal information.
• Right to opt out of sale or sharing — we do not sell or share personal information, so no action is needed.
• Right to limit the use of sensitive personal information — we use it only as permitted by law.
• Right to non-discrimination for exercising any of these rights.

We collect the categories of personal information listed in section 2 and retain them for the purposes described in section 3. To exercise a right, email sales@orprinterusa.com; we verify your identity before acting and respond within the time required by law.

4. Children (COPPA)

This is a business-to-business website and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

5. Cookies and analytics

We use a strictly necessary session cookie for the customer portal and, only with your consent, Google Analytics cookies. See our Cookie Policy; you can change your choice at any time.

6. Sharing

We share personal data only with: Stripe (payment processing), shipping carriers such as UPS and FedEx (delivery of your order), our hosting and email providers, and public authorities where required by law. These parties process data on our instructions and under their own privacy and security obligations. Data may be processed in the United States and, where required for transfers of EU personal data, under appropriate safeguards such as standard contractual clauses.

7. Retention

Contact inquiries are kept up to 24 months. Account and order records are kept for as long as your account is active and thereafter as required for accounting and tax purposes (typically up to 7 years). Analytics data is retained according to your consent and Google’s defaults. You may request deletion at any time, subject to legal retention duties.

8. Security

The site uses TLS encryption; passwords are stored hashed; card data is tokenized by Stripe (PCI-DSS Level 1); portal and administrative areas are access-restricted. No method of transmission or storage is 100% secure, but we review and update our safeguards regularly.

9. Changes to this policy

We will post any changes on this page with a new “last updated” date. Material changes will be highlighted on the site.