Privacy Policy

1. Data Controller

DigitalPhotoPassport Ltd is the data controller for your personal information. If you have any questions about how we handle your data, please contact us at support@digitalphotopassport.com.

2. What We Collect

• Photos: The image you upload for processing.
• Email address: Collected at checkout for order confirmation and download links.
• Payment data: Handled securely by Stripe. We do not store your card details.
• Technical data: IP address and browser information for fraud prevention and analytics.

3. How We Use Your Data

• To generate compliant passport/ID photos.
• To process payments and deliver your order.
• To comply with legal obligations and prevent fraud.
• To improve our service (aggregated, anonymised data only).

4. Photo Storage & Deletion

Your original and processed photos are stored temporarily during processing and automatically deleted after 24 hours. We do not retain backups. If you need your photo re-processed, you must upload it again.

5. Legal Basis (GDPR)

We process your data under the following lawful bases: contract performance (to fulfil your order), consent (for marketing, where given), and legal obligation (for tax and fraud prevention).

6. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict certain processing.
• Withdraw consent at any time.
• Lodge a complaint with the UK Information Commissioner's Office (ICO).

7. Cookies

We use essential cookies to maintain your session and remember your country preference. We do not use tracking or advertising cookies.

8. Third-Party Services

We use Stripe for payments, Supabase for database storage, and Cloudflare R2 for temporary photo storage. Each provider is GDPR-compliant and processes data only on our behalf.

9. Contact

For privacy-related questions, email support@digitalphotopassport.com.