Legal

Privacy Policy

Last updated: 1 August 2026

This policy explains what information VaporSpark collects when you enquire about or engage our design services, how we use it, and the choices you have.

This document contains bracketed placeholders such as [Jurisdiction] and [Registered Address]. It is a template and must be reviewed by qualified legal counsel before publication or reliance.

1. Who we are

VaporSpark ("we", "us") is a graphic design studio serving lighter manufacturers, OEM factories and export brands, operating from [Registered Address] under the laws of [Jurisdiction]. For the purposes of applicable data protection law, we act as the controller of personal data described in this policy. Contact us at jobs@boldpath.store.

2. Information we collect

We collect only what we need to quote, deliver and support design work:

  • Enquiry data: name, company, email address and the project details you submit through our contact form or by email.
  • Project data: casing drawings, tooling notes, brand assets, artwork references and correspondence relating to a commission.
  • Commercial data: invoicing details, purchase orders and payment records held by our payment and accounting providers.
  • Technical data: limited server logs such as IP address, browser type and pages requested, used for security and site reliability.

3. How we use information

We use personal data to respond to enquiries, prepare quotations, deliver commissioned artwork, manage invoicing, maintain records required by law, and protect the security of our systems. We do not sell personal data and we do not use client project material to train third-party systems.

4. Legal bases

Where [Jurisdiction] law requires a legal basis, we rely on: performance of a contract (delivering commissioned work), legitimate interests (responding to business enquiries, securing our systems), legal obligation (tax and accounting records) and consent where separately requested.

5. Confidentiality of client artwork

Unreleased designs, tooling drawings and collection plans are treated as confidential. Access is limited to studio personnel assigned to your project and, where necessary, subcontracted specialists bound by equivalent confidentiality terms. Where a signed non-disclosure agreement is in place, its terms take precedence over this section.

6. Sharing with service providers

We share data only with processors that support our operations: email and file transfer hosting, cloud storage, accounting and payment processing. These providers are engaged under contract and may only process data on our instructions. We may also disclose data where required by law or to establish or defend legal claims.

7. International transfers

Because we work with factories and brands across multiple regions, personal data may be transferred outside [Jurisdiction]. Where that occurs, we apply the safeguards required by applicable law, such as standard contractual clauses or an adequacy decision.

8. Retention

Enquiry data that does not lead to an engagement is deleted within [Retention Period, e.g. 24 months]. Project files and correspondence are retained for [Retention Period, e.g. 7 years] to support reprints, warranty questions and statutory record-keeping, after which they are deleted or anonymised.

9. Your rights

Subject to [Jurisdiction] law, you may request access to, correction of, or deletion of your personal data; object to or restrict certain processing; request portability; and withdraw consent where processing relies on it. Send requests to jobs@boldpath.store. You may also lodge a complaint with the supervisory authority in [Jurisdiction].

10. Security

We apply access controls, encrypted transfer for artwork delivery and role-based permissions on project storage. No system is perfectly secure; if a breach affects your personal data we will notify you and any regulator as required by law.

11. Cookies

This site uses only cookies and equivalent storage that are strictly necessary for delivery and security. If analytics or marketing cookies are introduced, we will publish a cookie notice and obtain consent where [Jurisdiction] law requires it.

12. Children

Our services are directed at businesses. We do not knowingly collect personal data from anyone under the age of [Minimum Age].

13. Changes and contact

We may update this policy to reflect changes in our services or the law. The date at the top of this page shows the current version. Questions about this policy can be sent to jobs@boldpath.store.