Consent first
Ask the customer before you upload their document, and tell them why it is needed.
Minimum data
Do not collect extra identifiers when the print job can be done without them.
Private storage
Uploads are private and reachable only from a logged-in account.
Limited access
Each member sees only their own jobs and records.
Deletion
Temporary files are removed after the service window. On shared counter computers, clear downloads and browser history at the end of the day.