1. About this list
Total Print Hub, Inc. ("Total Print Hub", "we", "us", "our") offers and operates Total Print Hub. Total Print Hub, Inc. is a corporation; all of its shares are held by ITLOX, Inc., a Delaware corporation.
A subprocessor is a company that processes personal data for us where we act for a merchant, that is, where we handle the personal data of the merchant's shoppers on the merchant's behalf. Our Data Processing Agreement sets the rules for subprocessors. This page also lists the other service providers that handle personal data for which we are responsible ourselves, as our Privacy Policy explains.
We engage a provider only for a stated purpose and under a written agreement that binds it to confidentiality, to security, and to data protection duties no less protective than our own duties towards merchants. A provider may use the data only for that purpose.
2. Subprocessors for the product
These companies process the personal data that merchants and their shoppers put into Total Print Hub.
| Subprocessor | What it does for us | Personal data it handles |
|---|---|---|
| Microsoft Corporation (Microsoft Azure) | Hosts the application, the database, and the file storage, and keeps the backups and the logs | All the data that merchants and shoppers put into the product |
| Microsoft Corporation (Azure Communication Services Email) | Sends the emails of the product itself: to verify an address, to reset a password, and to send a purchase order to a supplier when the merchant chooses to send one by email | The email addresses of merchants and their staff; the content of a purchase order, which can hold a ship-to name and address |
| ITLOX LTD | A group company in England and Wales that develops the software and provides support | Where it handles personal data for us: the data that the task in hand needs |
Total Print Hub, Inc. contracts with Microsoft Corporation under Microsoft's published data protection addendum.
3. AI providers
To run the AI features, we use OpenAI OpCo, LLC and Anthropic, PBC. Total Print Hub, Inc. contracts with each of them under the provider's published data processing addendum. We give 30 days' notice before a new AI provider is added (section 7).
An AI provider receives data only when a merchant has switched on an AI feature and someone uses it:
Inky AI , the assistant for a merchant's staff, sends the request and the store data that the request needs. The rule for Inky AI is to send as little customer and order data as the request allows.AI designer , the AI design help in the Design Studio, sends the description that was typed and the print-area details of the product, or, for AI upscale, the uploaded picture. No shopper's name, email address, or order goes with a request from the Design Studio.
We do not use a merchant's content, its shoppers' content, or its requests to Inky AI to train AI models, and we do not build AI models of our own. Our AI providers do not use a merchant's content to train their models. We send content to an AI provider only to produce the result that was asked for.
Each AI provider handles what it receives under its terms with us. For every AI feature, the AI tools in the Design Studio included, we use provider accounts of our own; no merchant connects an AI account of its own.
4. Other service providers
These companies handle personal data for which we are responsible ourselves: the data of merchants as our customers, and of visitors to our websites.
| Provider | What it does for us | Personal data it handles |
|---|---|---|
| Stripe, LLC | Takes payment from WooCommerce and direct customers and manages their subscriptions | The account's email address, the account's reference number, the store's domain, and the plan. Card data goes to Stripe directly and never to us |
| Microsoft Corporation (Microsoft Azure) | Hosts our websites totalprinthub.com and docs.totalprinthub.com, and runs the handler of the website's forms | The technical data of a visit, such as the network address; what a visitor enters in a form, while it is passed on |
| Microsoft Corporation (Microsoft 365) | Carries the enquiries from our website forms to our support mailbox | What a visitor enters in a form: name, email address, company, store address, and message |
| Usercentrics A/S (Cookiebot) | Runs the consent tool on totalprinthub.com and stores the visitor's choice | The visitor's consent choice |
| Google LLC and Google Ireland Limited (Google Analytics) | Run Google Analytics 4 for website statistics on totalprinthub.com, only for visitors who allow Statistics in the cookie banner | A random visitor identifier, the pages viewed, how the visitor reached the site, the device and browser type, and the approximate location. Google Analytics 4 does not log or store IP addresses |
Total Print Hub, Inc. contracts with each of these providers under the data processing terms that the provider publishes.
Shopify bills the merchants of Shopify stores for their plan, on the merchant's Shopify invoice. Shopify does this as the merchant's own store platform (section 5).
If we start to use a further provider, for example a tool to manage sales enquiries or a support tool, we add it to this page first.
5. Services that a merchant chooses itself
The following are not our subprocessors. They act under the merchant's own agreement with them.
The store platform: Shopify, or WordPress with WooCommerce. We exchange data with it to do what the merchant installed Total Print Hub for: installation and sign-in, products, the storefront, the cart, checkout, orders, and privacy requests.Suppliers and other connected services: the suppliers, fulfilment services, printers, and shipping tools that a merchant connects. A supplier receives data only when the merchant connects it or sends it an order: the order lines and, where the merchant enters one, a ship-to name and address on the purchase order.Video services: a merchant can show a tutorial video from a video service inside the Design Studio; that service may set its own cookies.
6. Where data is processed
Hosting: Our public websites (totalprinthub.com and docs.totalprinthub.com) are hosted by Microsoft Azure in its West Europe region (the Netherlands) and hold no merchant or customer data. The Total Print Hub app and the data of merchants and their shoppers are hosted by Microsoft Azure in the United States, wherever the merchant is based.Our group: it has companies in the United States and in England and Wales.Other providers: they may process personal data in countries other than the merchant's, including the United States. We give the countries in which a provider processes personal data on request.
Where a transfer of personal data out of the United Kingdom or the European Economic Area needs a safeguard, we rely on an adequacy decision where one applies, and otherwise on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another mechanism that the law accepts.
7. Changes and objections
We give at least 30 days' notice before we add or replace a subprocessor, and before a new AI provider is added. We give the notice on this page, and by email to each merchant that has asked us at dpo@totalprinthub.com to be told of changes. We keep the list of the merchants that have asked.
A merchant that has a data protection objection to a change writes to dpo@totalprinthub.com before the change takes effect. The Data Processing Agreement says what follows from an objection.
8. Contact
Total Print Hub, Inc.
- Objections, questions about a provider, the countries that a provider uses, and requests for a signed Data Processing Agreement: dpo@totalprinthub.com
- Security questions: security@totalprinthub.com
Related documents: Privacy Policy, Data Processing Agreement, Cookie Policy, Security, and Legal & company information.