Privacy Policy

1. Information We Collect

1.1 Personal Information

We may collect personally identifiable information that you voluntarily provide to us when you place an order, register on the Site, subscribe to our mailing list, or otherwise contact us. This may include:

• Full name
• Email address
• Shipping address
• Billing address
• Phone number
• Payment information (processed securely via Stripe; we do not store your full card details)

1.2 Uploaded Content

When you use our services, you upload photographs of your pet(s). These images are processed by our AI system to generate artwork. We retain uploaded images and generated artwork for a reasonable period to fulfil your order and provide customer support. You may request deletion of your uploaded images at any time by contacting us.

1.3 Automatically Collected Information

When you visit the Site, we may automatically collect certain information about your device and usage, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on those pages
• Referring website address

2. How We Use Your Information

We use the information we collect for the following purposes:

• To process and fulfil your orders
• To generate AI-powered pet portraits from your uploaded photographs
• To send order confirmations and shipping updates
• To communicate with you about your orders and respond to enquiries
• To improve our services, website, and user experience
• To detect and prevent fraud or misuse of our services
• To comply with legal obligations

3. Payment Processing

All payments are processed securely through Stripe. When you make a payment, your card details are sent directly to Stripe's servers and are encrypted using industry-standard SSL/TLS technology. We do not have access to or store your full payment card details.

For more information on Stripe's security practices, please visit stripe.com/privacy.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data with the following categories of service providers:

• Payment processors (Stripe) to process transactions securely
• Shipping partners (DHL UK) to deliver physical products
• AI service providers who process your images to generate artwork
• Hosting providers (Netlify) who host our website and server functions

These providers only receive the information necessary to perform their services and are bound by their own privacy policies and data protection obligations.

5. Data Retention

We retain your personal information for as long as necessary to:

• Fulfil the purposes outlined in this Privacy Policy
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements

Uploaded pet photographs are retained for a reasonable period (typically 30 days after order completion) to facilitate customer support and potential re-orders. After this period, images may be deleted from our systems.

6. Your Rights

Under applicable data protection laws (including the UK GDPR), you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete personal data
• Erase your personal data (right to be forgotten)
• Restrict the processing of your personal data
• Object to the processing of your data for certain purposes
• Port your data to another service provider

To exercise any of these rights, please contact us using the details provided below.

7. Cookies

Our Site may use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files placed on your device. We use:

• Essential cookies: Required for the Site to function properly (e.g., session management)
• Analytics cookies: Help us understand how visitors use our Site

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site.

8. Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data in transit
• Secure API key management via environment variables
• CORS origin restrictions on server endpoints
• URL validation to prevent SSRF attacks
• Regular security reviews

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information promptly. If you believe a child has provided us with personal data, please contact us immediately.

10. Third-Party Links

Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party site you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the Site after any changes constitutes acceptance of the revised policy.

12. Contact Us