ī¶

admin@pickapic.co.uk

Privacy Policy

Last Updated: September 20, 2026

Welcome to PicaPic (picapic.co.uk). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website to view, share, or download event photographs.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

PicaPic operates the website picapic.co.uk and acts as the data controller responsible for your personal data.

  • If you have any questions about this Privacy Policy or our data practices, please contact us via the contact page or email address provided on our website.

2. The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data depending on how you interact with our platform:

  • Identity Data: Name (if provided when creating an account, contacting support, or purchasing photos).

  • Contact Data: Email address (used to deliver download links, send gallery notifications, or handle customer support).

  • Technical Data: IP address, browser type and version, time zone setting, operating system, and platform details collected automatically when you visit the site.

  • Usage Data: Information about how you use our website, event galleries, and download features.

  • Image and Biometric Data (Optional): If you choose to use our AI Face Recognition search feature to find your event photos, you may temporarily upload a reference selfie. This image is processed solely to match your face against the event gallery and is deleted immediately after the search process is complete.

3. How We Collect Your Personal Data

We collect data through:

  • Direct Interactions: When you enter an email address to unlock a gallery, contact support, or upload a reference selfie for face matching.

  • Automated Technologies: As you interact with our website, we automatically collect Technical Data via cookies and similar tracking technologies.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your data under the following legal bases:

  • Performance of a Contract: To deliver the event photos, digital downloads, or services you requested.

  • Legitimate Interests: To maintain website security, prevent fraud, and improve our platform functionality.

  • Consent: Where you explicitly consent to the processing of data, such as uploading a selfie for AI Face Recognition matching. You have the right to withdraw your consent at any time.

5. Data Sharing and Disclosures

We do not sell your personal data. We may share your data with trusted third parties only where necessary to operate our service:

  • Service Providers: IT and hosting service providers (such as cloud storage providers) who support the operation of picapic.co.uk.

  • Professional Photographers / Event Organizers: If an event requires email registration or access logs to distribute photos, your contact details may be shared with the specific photographer or organizer hosting that gallery.

  • Legal Obligations: If required to do so by UK law, court order, or regulatory authorities.

6. Data Security

We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. Access to event galleries is strictly restricted via secure tokens, unique URLs, or access codes.

7. Data Retention

  • Gallery Data & Photos: Event galleries and associated images are hosted temporarily, typically remaining active for 3 to 6 months after the event date, after which they are permanently deleted from our active servers.

  • Account & Contact Data: We retain your contact details and transaction records only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Your Legal Rights Under UK GDPR

Under data protection laws in the UK, you have rights including:

  • Your right of access: You have the right to ask us for copies of your personal information.

  • Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate.

  • Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.

  • Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.

  • Your right to object to processing: You have the right to object to the processing of your personal information in certain circumstances.

  • Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organization, or to you, in certain circumstances.

If you wish to exercise any of these rights, please contact us. You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (ico.org.uk).

9. Changes to This Privacy Policy

We keep our Privacy Policy under regular review. Any updates will be posted on this page with a revised “Last Updated” date.