Legal
Privacy Policy
Last updated: 1 August 2026
This policy explains what information VaporSpark collects when you enquire about or engage our design services, how we use it, and the choices you have.
This document contains bracketed placeholders such as [Jurisdiction] and [Registered Address]. It is a template and must be reviewed by qualified legal counsel before publication or reliance.
1. Who we are
VaporSpark ("we", "us") is a graphic design studio serving lighter manufacturers, OEM factories and export brands, operating from [Registered Address] under the laws of [Jurisdiction]. For the purposes of applicable data protection law, we act as the controller of personal data described in this policy. Contact us at jobs@boldpath.store.
2. Information we collect
We collect only what we need to quote, deliver and support design work:
- Enquiry data: name, company, email address and the project details you submit through our contact form or by email.
- Project data: casing drawings, tooling notes, brand assets, artwork references and correspondence relating to a commission.
- Commercial data: invoicing details, purchase orders and payment records held by our payment and accounting providers.
- Technical data: limited server logs such as IP address, browser type and pages requested, used for security and site reliability.
3. How we use information
We use personal data to respond to enquiries, prepare quotations, deliver commissioned artwork, manage invoicing, maintain records required by law, and protect the security of our systems. We do not sell personal data and we do not use client project material to train third-party systems.
4. Legal bases
Where [Jurisdiction] law requires a legal basis, we rely on: performance of a contract (delivering commissioned work), legitimate interests (responding to business enquiries, securing our systems), legal obligation (tax and accounting records) and consent where separately requested.
5. Confidentiality of client artwork
Unreleased designs, tooling drawings and collection plans are treated as confidential. Access is limited to studio personnel assigned to your project and, where necessary, subcontracted specialists bound by equivalent confidentiality terms. Where a signed non-disclosure agreement is in place, its terms take precedence over this section.
6. Sharing with service providers
We share data only with processors that support our operations: email and file transfer hosting, cloud storage, accounting and payment processing. These providers are engaged under contract and may only process data on our instructions. We may also disclose data where required by law or to establish or defend legal claims.
7. International transfers
Because we work with factories and brands across multiple regions, personal data may be transferred outside [Jurisdiction]. Where that occurs, we apply the safeguards required by applicable law, such as standard contractual clauses or an adequacy decision.
8. Retention
Enquiry data that does not lead to an engagement is deleted within [Retention Period, e.g. 24 months]. Project files and correspondence are retained for [Retention Period, e.g. 7 years] to support reprints, warranty questions and statutory record-keeping, after which they are deleted or anonymised.
9. Your rights
Subject to [Jurisdiction] law, you may request access to, correction of, or deletion of your personal data; object to or restrict certain processing; request portability; and withdraw consent where processing relies on it. Send requests to jobs@boldpath.store. You may also lodge a complaint with the supervisory authority in [Jurisdiction].
10. Security
We apply access controls, encrypted transfer for artwork delivery and role-based permissions on project storage. No system is perfectly secure; if a breach affects your personal data we will notify you and any regulator as required by law.
11. Cookies
This site uses only cookies and equivalent storage that are strictly necessary for delivery and security. If analytics or marketing cookies are introduced, we will publish a cookie notice and obtain consent where [Jurisdiction] law requires it.
12. Children
Our services are directed at businesses. We do not knowingly collect personal data from anyone under the age of [Minimum Age].
13. Changes and contact
We may update this policy to reflect changes in our services or the law. The date at the top of this page shows the current version. Questions about this policy can be sent to jobs@boldpath.store.