Privacy policy

Who is responsible for your information

Paw & Portrait is operated by Sandycroft Workwear Ltd., company 07917944, registered in England and Wales. Registered office: Prior House, 129 High Street, Prestatyn, Wales, LL19 9AS. Contact sales@sandycroftworkwear.uk for privacy enquiries.

Information we use and why

We use uploaded photographs, generated artwork, names and messages, crop and colour choices, and studio identifiers to provide the portrait service you request. If your photo contains people or identifiable information, this can be personal data. Please upload only photos you have permission to use and avoid unnecessary personal details.

When ordering opens, we will use contact and delivery details, approved artwork, order references and payment confirmation to supply your purchase and respond to questions. Payment card details are handled by Stripe; our portrait database does not store full card numbers.

We rely on providing the service or contract you request for studio creation and orders, legitimate interests in keeping the service secure and managing enquiries, and legal obligations for records we are required to keep. We do not currently send marketing messages or use advertising trackers.

Hosting, AI, payment and print providers

The site uses hosted infrastructure supplied through Sites and Cloudflare for application data and private image storage. Requesting an AI style or background sends the selected pet image to OpenAI for image processing. The result may change details, so you should review the likeness.

Stripe handles payment when checkout is available. Prodigi receives approved artwork and the delivery information needed to print and dispatch an order when fulfilment is connected. These providers have their own processing and privacy terms. We do not put customer photos into a public gallery.

When live ordering is enabled, Resend is the planned provider for transactional order and dispatch emails. Messages include the order reference, purchased artwork details, contact and delivery information and any tracking supplied. Order-confirmation emails can include a time-limited private link to the approved artwork. We will also receive an internal sale notification to manage your order. No marketing subscription is created by placing an order.

Providers may process information outside the UK. The applicable location, processing terms and transfer safeguards depend on the provider and account configuration. Contact us for details of the arrangements applying to your information. Provider processing agreements and international-transfer arrangements must be confirmed before live print sales.

How long information stays

Unordered photos and generated versions remain in your private studio history until you delete them or ask us to remove them. They do not automatically disappear when the studio cookie expires. Deleting an original photo removes its unordered versions and approved files.

Artwork attached to an order cannot be deleted through the studio because it may be needed to fulfil that order, resolve a complaint or maintain business records. Retention depends on those purposes and applicable recordkeeping requirements; contact us if you want a specific record reviewed. Provider security logs and backups can have separate retention under their own terms.

Your choices and rights

You can ask to access, correct, delete or restrict your information, request portability where applicable, and object to processing based on legitimate interests. Some rights depend on the purpose and legal basis. Email sales@sandycroftworkwear.uk; we may need to verify the request.

You can object to processing based on our legitimate interests at any time. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. We do not make automated decisions about you with legal or similarly significant effects. AI is used to produce the artwork you request.