Privacy Policy

2. What data we collect

When you place an order or create an account, we collect:

• Name and email address
• Shipping address
• Payment information — processed securely by Stripe. We never store your card details.
• The photo(s) you upload for your portrait
• Order history and communication records

3. Why we collect it

• To fulfil your portrait order and arrange delivery
• To send you order status updates and your digital proof
• To provide customer support
• To comply with legal obligations (e.g. invoicing)

We do not sell your data. We do not use it for advertising.

4. How long we keep it

• Order and account data: 3 years from date of order, for legal and accounting purposes
• Uploaded photos: deleted within 90 days of order completion unless you request earlier deletion
• Support emails: retained for 12 months

5. Your rights under GDPR

If you are in the European Economic Area or UK, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data (subject to legal retention requirements)
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email [email protected]. We will respond within 30 days.

6. Cookies

We use only two types of data collection:

• Session cookie — strictly necessary for keeping you logged in. No tracking. Expires when you close your browser or log out.
• Plausible Analytics — a privacy-first analytics tool that does not use cookies, does not collect personal data, and is fully GDPR compliant. We use it to understand how many people visit the site and which pages are popular.

We do not use Google Analytics, Facebook Pixel, or any advertising cookies.

7. Third-party processors

We share data with the following processors, strictly to fulfil your order:

• Stripe — payment processing (Stripe's privacy policy applies to card data)
• Amazon Web Services (AWS SES) — sending order confirmation and proof emails
• Amazon Web Services (AWS S3) — secure storage of your uploaded photos

All processors are contractually bound to handle your data securely and only for the stated purpose.

8. Changes to this policy

If we make material changes to this policy, we will notify active customers by email. The effective date at the top of this page will always reflect the latest version.

9. Contact

Data-related queries: [email protected]