Privacy Policy

Evrycard ("we", "us", "our") provides digital business cards, NFC cards and related accessories, operating from London, United Kingdom. We are the data controller for the personal information described in this policy.

For any privacy question, or to exercise your rights, email [email protected].

• Account details — name, email address, password (hashed) and, where provided, phone number and company.
• Profile content — everything you add to your digital card: job title, links, social profiles, photos, files and contact details.
• Order details — billing and delivery addresses, card artwork and customisation files, order history and delivery status.
• Payment details — handled by Stripe. We never see or store your full card number.
• Analytics — profile views, taps and link clicks on your card, shown to you in your dashboard.
• Device & usage data — IP address, browser, device type, pages viewed and referral source.

• To create and run your account and digital business card.
• To share your profile when someone taps your NFC card or opens your link.
• To take payment, produce your cards and deliver your order.
• To provide customer support and send service messages about your orders.
• To keep the platform secure, prevent fraud and diagnose faults.
• To improve our products, and — with your consent — to measure marketing performance.

• Contract — creating your account, fulfilling and delivering orders, providing support.
• Legitimate interests — securing the platform, preventing fraud, improving our services, and basic business record keeping.
• Consent — analytics and marketing cookies, and optional marketing emails. You can withdraw consent at any time.
• Legal obligation — tax, accounting and consumer-law record keeping.

We do not sell your personal information. We share it only with service providers who help us run Evrycard:

• Stripe — payment processing.
• Hosting & database providers — to store your account, profile and order data.
• Email delivery — order confirmations, password resets and service notices.
• Google Analytics / Google Ads — only if you accept analytics or marketing cookies.
• Printing and delivery partners — to produce and ship your cards.
• Optional integrations you enable — such as Google sign-in, CRM tools or automation platforms (e.g. Zapier). These process data under their own privacy policies.

We may also disclose information where required by law, or to establish or defend legal claims.

Your digital business card is designed to be shared. Anything you publish on it — name, role, photo, links, contact details — is visible to anyone who taps your card or opens your profile link. Only add information you are happy to make public.

If you capture leads or scan contacts using Evrycard, you are responsible for having a lawful basis to record that person's details and for giving them any notice they are entitled to.

• Account & profile data — while your account is active, then deleted or anonymised within 90 days of closure.
• Order & invoice records — 6 years, to meet UK tax and accounting requirements.
• Support messages — up to 2 years.
• Analytics data — up to 14 months.

All traffic is encrypted in transit (HTTPS). Data is stored on access-controlled infrastructure with row-level permissions, so your records are only reachable by your account and by authorised staff who need access for support or security. Passwords are hashed, and payment card details never touch our servers.

Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your personal information, to data portability, and to withdraw consent at any time. Most of this can be done directly in your dashboard; otherwise email [email protected] and we will respond within one month.

If you are unhappy with our response, you may complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Some of our providers process data outside the UK. Where they do, we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses to keep your data protected to UK standards.

Evrycard is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

We use strictly necessary cookies to run the shop, and — only with your permission — analytics cookies. Full detail, including how to change your choice, is in our Cookie Policy.

We may update this policy from time to time. The "last updated" date at the top of this page always reflects the current version, and material changes will be notified by email or an in-app notice.