Privacy Policy

1.1. This Privacy Policy explains how RIPPLE18 LTD ("we", "us") collects and uses personal data through OnlinePhotoPrinting.co.uk (the "Site"). For the purposes of the UK GDPR and the Data Protection Act 2018, RIPPLE18 LTD is the data controller.

1.2. Registered office: 128 City Road, London EC1V 2NX, United Kingdom. Companies House number: 14970354.

1.3. We follow a data-minimisation approach: we only collect the personal data we need, and we delete the photographs you upload for an order within 30 days of that order being completed.

1.4. Privacy queries: hi@onlinephotoprinting.co.uk. Please mark the subject line "Privacy" so we can route it promptly.

2.1. Account & profile. Name, email, password (hashed), phone, optional date of birth.

2.2. Order & billing. Delivery and billing address, order history, payment confirmation token (we do not store full card details — these are handled by our PCI-DSS-compliant payment provider).

2.3. Uploaded content. Photographs and any text or design choices you submit for printing.

2.4. Communications. Emails, chat transcripts and call records (calls may be recorded for training; you will be told before any recording).

2.5. Technical & usage data. IP address, device and browser information, referral URLs, pages visited, cookies and similar identifiers (see our Cookie Policy).

2.6. We do not knowingly collect "special category" data (UK GDPR Art. 9), and we do not intentionally collect data from children under 16.

3.1. The table below summarises why we use your data and the lawful basis under UK GDPR Article 6.

4.1. We will send marketing emails about our products in two situations: (i) you have consented (e.g. ticked a marketing box at sign-up or in the dashboard); or (ii) the "soft opt-in" under PECR reg 22(3) applies — you bought from us, we are emailing about similar products, and you can opt out in every email.

4.2. You can withdraw consent or stop the soft opt-in at any time using the unsubscribe link in every marketing email, or by emailing hi@onlinephotoprinting.co.uk.

5.1. We use strictly necessary cookies without consent (these are required to make the Site work). For all other cookies (analytics, marketing, preferences) we rely on your prior consent given through our cookie banner. See our Cookie Policy.

6.1. We share data only where necessary and on the basis described:

• Payment processors (e.g. Stripe) — to take payment.
• Delivery and fulfilment partners (Royal Mail, courier services) — to deliver your order.
• Cloud hosting and email providers — to host the Site and send transactional email.
• Analytics and marketing providers — only with your cookie consent.
• Professional advisors (accountants, lawyers) — where reasonably necessary.
• Authorities — where required by law (e.g. HMRC, police on lawful request).
• A buyer of our business — in the event of a sale, merger or reorganisation, subject to confidentiality and equivalent protection.

6.2. We do not sell personal data.

7.1. Some of our processors operate outside the UK. Where personal data is transferred outside the UK, we rely on one of:

• UK adequacy regulations (for countries the UK has declared adequate, e.g. EEA, Switzerland);
• the UK International Data Transfer Agreement (IDTA), or EU Standard Contractual Clauses combined with the UK Addendum;
• another mechanism permitted under UK GDPR Article 46.

7.2. A list of countries and safeguards is available on request to hi@onlinephotoprinting.co.uk.

8.1. Retention can be longer where required to establish, exercise or defend legal claims.

9.1. Under the UK GDPR you have the right to:

• be informed about how we use your data (this policy);
• access a copy of the personal data we hold about you;
• have inaccurate personal data corrected;
• have your personal data erased in certain circumstances;
• restrict how we use your personal data;
• data portability (receive certain data in a machine-readable form);
• object to processing based on legitimate interests, including profiling;
• withdraw consent at any time where we rely on consent;
• not be subject to a decision based solely on automated processing that has legal or similarly significant effects (we do not carry out such processing).

9.2. To exercise any right, email hi@onlinephotoprinting.co.uk. We will respond within one month and may extend by up to two further months for complex requests, telling you why.

9.3. You can complain to the Information Commissioner's Office (ICO) — the UK supervisory authority — at ico.org.uk or call 0303 123 1113. We would appreciate the chance to address your concern first.

10.1. We use appropriate technical and organisational measures including encryption in transit (TLS), encrypted backups, role-based access, password hashing, and PCI-DSS-compliant payment processors. No system is 100% secure; please use a strong unique password and contact us immediately at hi@onlinephotoprinting.co.uk if you suspect unauthorised account access.

11.1. The Site is intended for adults aged 18 or over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

12.1. We may update this policy from time to time. Material changes will be notified by email or on next sign-in. The "Last updated" date is at the foot of this page.