Privacy Policy

1. Data controller

DigitalPhotoPassport is a trading name of HELLSMARKETING LTD, a company registered in England and Wales, company number 16760943. HELLSMARKETING LTD is the data controller for the personal information described in this policy. Our registered office is listed on our contact page. If you have any questions about how we handle your data, contact us at support@digitalphotopassport.com.

2. What we collect

• Photos: the image you upload for processing, and the processed image we generate from it.
• Email address: collected at checkout for your order confirmation and download links.
• Payment data: handled securely by Stripe. We do not store your card details.
• Technical data: IP address and browser information, for fraud prevention and analytics.

3. How we use your data

• To prepare photos that meet the official rules for your document.
• To process payments and deliver your order.
• To handle refunds and support requests.
• To invite you to review your order once it is complete.
• To comply with legal obligations and prevent fraud.
• To improve our service, using aggregated, anonymised data only.

4. Photo storage and deletion

Photos are deleted by an automated sweep that runs once a day:

• The photo you upload: deleted at the first sweep after it is 24 hours old, so in practice within about 48 hours. It is never kept longer.
• Orders that are never paid for: the original photo, the processed photo and the automated analysis are deleted on the same schedule.
• Paid orders: the finished photo is kept for 7 days so you can download it again, then deleted.
• Your email address: removed from the order record after 90 days. The order record without personal details is kept for accounting and tax purposes.

We do not keep backups beyond these periods. If you need a photo again after it has been deleted, upload it again.

5. Legal basis

We process your data on these legal bases under the UK GDPR and, where it applies to you, the EU General Data Protection Regulation: performance of a contract (to fulfil your order), legitimate interests (to invite reviews from customers we have served and to prevent fraud), consent (for marketing, where given) and legal obligation (for tax and fraud prevention).

6. Your rights

You have the right to:

• Access the personal data we hold about you.
• Ask us to correct or delete your data.
• Object to or restrict certain processing.
• Withdraw consent at any time.
• Complain to the UK Information Commissioner's Office (ICO) or to the data protection authority in the country where you live.

7. Cookies

We use essential cookies to keep your session and remember your country preference, and analytics cookies to understand how the site is used.

8. Service providers

We use these processors, each under contract and acting only on our instructions:

• Stripe: card and wallet payments.
• Supabase: database storage.
• Cloudflare R2: temporary photo storage.
• Amazon Web Services (Rekognition): automated face measurement for the photo checks.
• remove.bg: automated background removal.
• Resend: order confirmation and download emails.
• Trustpilot: review invitations. Once your order is complete we share your email address with Trustpilot, who email you an invitation to review us. You can decline or unsubscribe at any time.
• Vercel, Google Analytics, Hotjar and Sentry: hosting, usage analytics and error monitoring.

Some of these providers process data outside your country, including in the United Kingdom and the United States. Where they do, the transfer is covered by an adequacy decision or by standard contractual clauses.

9. Contact

For privacy questions, email support@digitalphotopassport.com.