Privacy policy

This policy explains what personal information we collect when you use pawcassoportraits.com, why we collect it, who we share it with and the rights you have. We keep it to what we need to make your portrait and deliver your order.

Who we are

Pawcasso Portraits is a trading name of [registered company name: add it in Settings], company number [company number: add it in Settings], registered office [registered office address: add it in Settings]. We are the controller of your personal information. Contact us about privacy at [contact email: add it in Settings].

What we collect

Orders: your name, email address, delivery address, what you bought, what you paid, your dog's name and any note you add.
Photos and portraits: the photos you send with your order and the portraits we make from them.
Account details, if you create an account: your email address, your name, your password (stored only in scrambled form, so nobody can read it), and an identifier from Google or Facebook if you choose to sign in with them.
Payments: handled by Stripe. We receive confirmation of payment and limited card details such as the card type and last four digits, never your full card number.
Technical information: a scrambled (hashed) version of your IP address and a device identifier, used to prevent abuse; basic server logs; and error reports if something goes wrong.
Messages: anything you send us by email.

Why we use it, and our legal basis

To make your portrait and fulfil your order, including your proof, delivery and customer service: necessary for our contract with you.
To keep the service secure, prevent fraud and abuse, and fix faults: our legitimate interests in running a safe, reliable service.
To keep financial records as the law requires: legal obligation.

We email you about your account and orders only. We do not send marketing emails or newsletters, and we do not sell your personal information.

Who we share it with

We use trusted service providers who process information for us under contract and only on our instructions:

Cloudflare: website security, delivery and secure file storage.
Fasthosts: server hosting in the UK.
OpenAI: may process your photo when we create your portrait. Under its business terms it does not use data sent to it this way to train its models.
Replicate: may enlarge your approved portrait to full print size.
Stripe: payment processing and fraud prevention.
Resend: sends our account and order emails.
Sentry: error monitoring, so we can find and fix faults.
Google and Facebook: only if you choose to sign in with them.
Royal Mail and other carriers: your name and address, to deliver your order.

We may also share information where the law requires it, or to protect our rights or someone's safety.

International transfers

Some of these providers are based in, or process information in, the United States. Where information is transferred outside the UK, we make sure it is protected by an adequacy decision (such as the UK extension to the EU-US Data Privacy Framework) or by approved safeguards such as the UK International Data Transfer Addendum.

How long we keep it

Photos you send with an order: deleted 12 months after your order, or sooner if you delete them from My account once your order has been sent. If you start an order but do not pay, your photo is deleted within 7 days.
Your account: until you close it.
Order and payment records: 6 years after the end of the financial year they relate to, as tax law requires.
Logs: up to 14 days. Error reports: up to 90 days.
Backups: up to 4 months, after which deleted information is gone from them too.

Your rights

You have the right to access your information, to have it corrected or deleted, to restrict or object to how we use it, and to receive a copy in a portable format. If you have an account, you can delete the photos you sent us, and close your account, from My account at any time once your orders have been sent. For anything else, email [contact email: add it in Settings] and we will reply within one month.

If you are unhappy with how we have handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), or to your local data protection authority if you live in the EU.

Children

Our service is not intended for children under 13, and we do not knowingly collect their information.

Cookies

We use only the cookies needed to run the site and take payments safely. Our cookie policy lists them.

Changes to this policy

We will update this page if anything changes and show the date of the latest version.

Last updated 6 November 2026.