Legal

Privacy Policy

Last updated: 26 October 2026

1. Who we are

33X Cards is a service of 33x Digital, operated by Jalal Wright, 124 City Road, London, EC1V 2NX, United Kingdom. We are the data controller for the personal information described here. Contact: hello@33x.cards.

2. What we collect

• Order details you send through our form: your name, email address, phone number (optional), the name on your card, role line, bio, links, brand preferences, any file links, and notes.
• Payment information, which is handled by Stripe. We receive confirmation of payment, your name and email, but never your full card details.
• Emails you send us, including any logos, photos or video clips.
• Basic technical data that our hosting provider logs automatically, such as IP address, browser type and pages visited, for security and to keep the site running.

3. How we use it

• To build, publish, host and update your card (to perform our contract with you).
• To take payment and keep financial records (to meet legal obligations).
• To contact you about your preview, your order, your card and your hosting plan, including questions you send us (to take steps at your request and perform our contract with you).
• To keep our website secure and working (our legitimate interests).

We don't send marketing emails unless you've agreed to receive them, for example by ticking the optional box on our forms. You can unsubscribe at any time using the link in any marketing email, or by emailing us. We never sell your data.

4. Information on your card is public

Your card is a public web page. Anything you ask us to include (such as your name, photo, phone number, email and links) can be seen by anyone who visits it, and may be picked up by search engines. Only send us details you're happy to make public, and tell us if you'd like something removed.

5. Who we share it with

We only share your information with trusted providers who help us run the service:

• Stripe: payment processing.
• Hostinger: website hosting and email.
• GoHighLevel: our customer records system, which stores the details you send through our forms (such as preview requests, orders and questions) so we can follow up with you.
• Google Fonts: our pages load fonts from Google, which receives your IP address when you visit.

Some of these providers may process data outside the UK, under appropriate safeguards such as the UK International Data Transfer Addendum or adequacy regulations.

6. Cookies

33x.cards doesn't use advertising or analytics cookies. Stripe may set cookies on its own checkout pages for security and fraud prevention.

To see how our cards and free previews are used, we count page views and which buttons are tapped. This works without cookies and stores nothing on your device. We don't keep your IP address: we only record the page, the time, the button tapped and whether it was a phone or a computer.

7. How long we keep it

We keep your order details for as long as your card is live, and for up to 12 months afterwards in case you come back. Payment and transaction records are kept for 6 years to meet UK tax requirements.

8. Your rights

Under UK data protection law you can ask to access, correct or delete your personal data, restrict or object to how we use it, or receive a copy of it. Email hello@33x.cards and we'll respond within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

9. YouTube API Services

33x Digital runs an internal tool, 33x Uploader, that uses the YouTube API Services to upload and schedule videos to YouTube channels owned by 33x Digital. It is used only by us and is not offered to anyone else. By connecting a YouTube account to 33x Uploader, you agree to be bound by the YouTube Terms of Service. How Google handles data is explained in the Google Privacy Policy.

• What it accesses: only the connected channel's basic details (channel name and ID) and the videos, thumbnails, captions and playlist entries that we upload ourselves. It does not read, store or share any other YouTube user's data.
• How it's stored: the sign-in token for each connected channel is kept only on our own computer. Nothing is sold, shared with third parties or used for advertising.
• Revoking access: you can remove 33x Uploader's access at any time on the Google security settings page.
• Deleting data: when access is revoked, or on request, we delete the stored token within 7 days. Email hello@33x.cards to ask.