Privacy Policy

• Account details — if you choose to register an account, we store the name, email address and password hash you provide.
• Order details — when you buy a photo or match bundle, we store the email address you provided at checkout, the items purchased, the order total, and the timestamp/version of the licensing terms you accepted.
• Payment data — payments are processed by Stripe. We never see or store your card details. Stripe receives your billing email and IP address as part of normal fraud screening.
• Analytics — if you accept analytics cookies, we load Google Analytics 4, which records anonymised page views, referrers and approximate location. You can decline this at any time via the cookie banner or the “Cookie preferences” link in the footer.
• Marketing consent — if you tick the marketing opt-in on the registration form, we store that consent (and the timestamp) so we can email you about new match galleries. You can withdraw consent at any time by emailing us.

• To deliver the digital downloads you have purchased.
• To keep records of orders for accounting, tax and dispute purposes (HMRC requires us to retain transaction records for up to six years).
• To understand how the site is used so we can improve it (analytics only, with your consent).
• To send you marketing emails — only if you have opted in.

We use a small number of trusted third-party processors to run the site. They process data on our behalf under their own privacy policies:

• Stripe — payment processing. stripe.com/gb/privacy
• Amazon Web Services (S3, eu-west / us-east) — hosting of original photo files and watermarked previews.
• Hostinger — server hosting (UK/EU region).
• Google Analytics 4 — opt-in usage analytics.
• Email/SMTP provider — used to deliver order confirmation emails and download links.

We do not sell your personal data, and we never share it with advertisers.

• Download links — secure, time-limited links (typically valid for 7 days from purchase).
• Order records — retained indefinitely for accounting and to honour future re-download requests, but you can request deletion (see below) once HMRC retention requirements have elapsed.
• Account data — kept until you ask us to delete it.
• Analytics data — retained by Google for up to 14 months and stored in aggregate.

Under UK GDPR you have the right to:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct or delete that data.
• Withdraw your consent for marketing or analytics at any time.
• Object to processing, or ask us to restrict it, in certain circumstances.
• Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email stephen@mold.me.uk and we will respond within one calendar month.

We use a single first-party cookie (sm_consent) to remember your cookie choice. We only load Google Analytics if you have granted consent. You can review or change your choice at any time via the “Cookie preferences” link in the footer.

If you have any questions about this policy, please email stephen@mold.me.uk.

See also our Terms & Conditions and the Licensing & Disclaimer page.