Skip to content
hardwareAPI.Privacy policy

SERVICE NOTES / H–005

Privacy policy

Your information, explained simply.

Updated 19 September 2026

01

Who we are

Burwood Ventures Ltd, trading as Hardware API, controls the personal information used to run this service.

Email orders@emails.tw.ltd.

Burwood Ventures Ltd, company number 17455668. Registered in England and Wales.

02

What we use & why

We use your email, account records, saved/submitted models, quote choices, delivery details, order/payment references and support messages to provide the service you request. Our legal basis is performing a contract or taking steps at your request before one.

Technical logs, browser/device details and IP information help secure and operate the service: our legitimate interests are fraud prevention, troubleshooting and account protection. Accounting and lawful disclosure may be legal obligations. Where we rely on consent, you can withdraw it.

You can browse without an account. We need account details for sign-in, a model for a quote, and delivery details for shipping. Don’t upload unnecessary sensitive information.

03

Service providers

Supabase provides accounts, database and private file storage; Vercel hosts the site; Slant receives selected files and delivery details for quotes and fulfilment, sharing delivery information with carriers. Shipping quotes can create unpaid supplier drafts.

Stripe handles card payments—we don’t store full card numbers or security codes. Resend sends account and order emails. Information may also go to advisers or authorities where necessary for legal matters.

ChatGPT or another AI service handles your conversation under its own terms. We receive the tool arguments you send, not automatically your whole chat; tool results can appear in that conversation.

04

International processing

We operate from the UK. Providers may process information abroad, including in the US, where Slant manufactures. Restricted transfers require applicable UK adequacy arrangements or appropriate contractual safeguards. Contact us for details and copies of the safeguards relevant to your data.

Provider terms: Supabase, Vercel, Stripe, Resend.

05

Storage & cookies

Saved designs remain while needed for your account. Request deletion by contacting us. Order, support and security records are kept according to service needs, accounting duties and unresolved disputes. Provider records and backups have separate lifecycles.

Delivery addresses are saved to your account only when you choose to save them. Remove them in Settings; this does not erase existing order or supplier records.

Unsaved chat links and quote handles expire after 30 minutes. Anyone with a full unsaved link can open it during that period. Saving a design makes its original link account-only; the link mapping remains while the design is retained, without its delivery address. Expired encrypted records are cleared during subsequent handoff/quote activity—not necessarily at the instant of expiry. Slant’s copies follow its own retention arrangements.

Necessary cookies support sign-in and security: guest print sessions last one hour, owner sessions up to eight hours, and customer sign-in sessions can refresh. Blocking them may stop those features working. We currently have no advertising trackers or optional analytics cookies; Stripe’s separate checkout has its own cookie information.

06

Your rights

Depending on the circumstances, ask us for access, correction, deletion, restriction or a portable copy of your information. We may verify your identity. You can object to processing based on legitimate interests and withdraw consent where applicable.

We don’t make solely automated decisions with legal or similarly significant effects. Quotes and model checks aren’t safety certifications. You can complain to us or directly to the ICO. Updates to this notice carry a new date.

Back to the print workspace