Photo9 allows customers to create personalised items from their photos and videos. This means that the site deals with your personal data and is committed to ensuring the safety and privacy of your data.
This privacy notice explains the personal data Photo9 ("we", "us", or "our") collects from our users and how we manage and use your personal data while ensuring its safety and compliance with GDPR rules. You should read this document in its entirety. By creating an account and using our website to create your personalised products, you acknowledge that you have read and that you agree with this notice.
We use cookies and other tracking technologies to collect usage behaviour as you are using our site. This allows us to better understand user journey and helps us in improving our site. We may also use your usage history to suggest products that we think you might like. For further details about how we use cookies and how to disable them, please refer to our cookie notice.
Personal identifiers - This includes your name, email address and delivery address when you place order with us. We need this information in order for you to securely login and identify you within our system and fulfill your orders. We may use your email address to send you marketing material and offers from time to time (you may choose to exclude yourself from receiving marketing information).
User generated content (including your photos and videos) - We gather your content in order to process your order.
Orders information (date of purchase, products being purchased, purchase amount) - We use this information to fulfill your order and provide you with the customer service. We may also analyse the purchase history to improve our products and services and sending you marketing material and offers (you may choose to exclude yourself from receiving marketing information).
Website login credentials - Your login credentials include your user name (email address) and password, and are saved securely in our site. They are provided by you and used by you to log into the site.
Third party information can be any data that you provide to us that is not related to you. This can include for example, the delivery details that you provide if you are shipping the order to some one else, or photos of others in your uploaded photos. Please ensure that you have prior permission from others before uploading their photos. We treat third party information no different from yours, and is subject to same strict controls and privacy policy.
Since our platform allows users to upload their photos and videos, we have a responsibility to ensure that any inappropriate content is identified and filtered out. In order to achieve this, we use Artificial Intelligence (AI) based moderation of your photos. Content that we filter out includes explicit nudity, violence, visually disturbing content, drugs and hate symbols.
Please note that we do reserve the right to suspend/delete your account if you upload offensive material and report you to relevant authorities if we believe that the uploaded content results in the breaking of the law.
At Photo9, we are committed to your data privacy. We use third-party service providers for processing orders, payments and storage of your content uploaded to our site. These service providers are bound by strict privacy laws and are only allowed to use your data in relation to a specific service being provided on our behalf.
Please note that there are exceptional and limited circumstances where we may be required to share your data. For example, we may be required to share your data in response to a court order or police investigation.
Changes of business ownership and control - Photo9 may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of Photo9. Data provided by users will, where it is relevant to any part of our business, will be transferred along with that part and the new owner or newly controlling party will, under the terms of this privacy policy, be permitted to use the data for the purposes for which it was originally supplied to us. We may also disclose Data to a prospective purchaser of our business or any part of it. In the above instances, we will take steps with the aim of ensuring your privacy is protected.
Photo9 is not directed at children and if we discover that users under the age of 16 have provided their personal information or have uploaded their photos and videos, we will proceed to remove the data immediately.
Keeping your data secure is our number one priority and have implemented robust technical, physical and administrative protocols to safeguard your data.
Data controller - The data controller for your personal information is SSM Media Group, located at 27 Stanley Road, SW14 7EB, United Kingdom
Data processor - The data processors for your data include payment providers and print partner used to help us fulfill your orders.
Data protection officer - The data protection officer at Photo9 is responsible for ensuring that we remain compliant with all GDPR rules. If you have any questions around how we handle your data, please send an email to customer.service@photo9.co.uk
Your personal data retention and integrity - Photo9 will retain your information for the period necessary to fulfill our obligations to you as a service provider. We use technical and organisational measures to safeguard your data. This includes:
Access to your account is controlled by a user name and password and a user name that is unique to you
Your data is encrypted and is physically stored on secure servers in the EU
Payment details are encrypted using SSL technology (typically a lock icon in your browser's address bar). We act as an intermediary between you and our payment provider and do not store your card details and payment information.
Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us via this e-mail address: customer.service@photo9.co.uk
Your rights - You have the following rights in relation to your Data:
Right to access - The right to request (i) copies of the information we hold about you at any time, or (ii) that we modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this, unless your request is "manifestly unfounded or excessive." Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why.
Right to correct - The right to have your Data rectified if it is inaccurate or incomplete.
Right to erase - The right to request that we delete or remove your Data from our systems.
Right to restrict our use of your Data - The right to "block" us from using your Data or limit the way in which we can use it.
Right to data portability - The right to request that we move, copy or transfer your Data.
Right to object - The right to object to our use of your Data including where we use it for our legitimate interests
To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via customer.service@photo9.co.uk
If you are not satisfied with the way a complaint you made in relation to your Data was handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner's Office (ICO). The ICO's contact details can be found on their website at https://ico.org.uk/.
Supervisory Authority - Supervisory Authorities can reach our data representative (appointed under Art. 27 GDPR) at email address customer.service@photo9.co.uk