How we look after your data.
A short, plain-English summary of what we collect, why we collect it, how long we keep it, and your rights under UK GDPR. The full legal-reviewed document lands before our public launch.
What we collect
When you contact us about a yearbook quote, we collect your name, school, role, email address and the project details you share (year group, quantity, page count, deadline). When you place an order, we collect a delivery address and payment details (processed by Stripe — we never see or store card numbers).
When you upload artwork, we store the file alongside the order record. We don’t use the contents of your yearbook for anything beyond fulfilling your order.
Why we collect it
To answer your enquiry, produce your quote, fulfil your order, and deliver the books. We use a privacy-respecting analytics tool to understand which pages are useful — no individual tracking, no behavioural advertising.
Where it lives
All customer data is hosted in the UK / EU. Our database lives in DigitalOcean’s London region; uploaded files live in DigitalOcean Spaces. We don’t transfer personal data outside the UK / EU.
How long we keep it
Quote enquiries that don’t convert are kept for two years and then deleted. Orders are kept for seven years for accounting purposes. Uploaded files are kept while your order is active and for one year after delivery, then deleted unless you ask us to keep them for reorders.
Your rights
Under UK GDPR you have the right to access the data we hold about you, correct it, ask us to delete it, ask us to port it elsewhere, and object to processing. Email [email protected] for any of these — we’ll respond within 30 days.
This page is a working draft. The legal-reviewed final document lands before public launch.