Privacy Policy

Last updated: [insert date]

This Privacy Policy explains how The Beauty Images ("Beauty Images", "we", "us") collects, uses and protects personal information when you visit our website and use our services. We are committed to handling your information responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about this policy, contact us at [insert contact email].

1. Who we are

Beauty Images is a rights-managed image licensing business based in the United Kingdom. For the purposes of data protection law, Beauty Images is the data controller responsible for your personal information. Our registered address is [insert company address].

2. Information we collect

We collect the following categories of information:

• Account information — when you create an account we collect your name, email address and an encrypted password.
• Order and licensing information — details of the images you license, the licence tier you select and your purchase history.
• Payment information — payments are handled by our payment provider, Stripe. We do not see or store your full card details; we receive only confirmation of payment and limited transaction data.
• Usage and technical information — when you visit the site we automatically collect technical data including your IP address, approximate location (country, region and city derived from your IP address), browser and device information, the pages you view and the site you arrived from.
• Communications — any messages you send to us.

3. How we use your information

We use your information to create and manage your account; process licence purchases and deliver image downloads; provide customer support; operate, maintain and improve the website; understand how the site is used; detect and prevent fraud, misuse and security incidents; and comply with our legal obligations.

4. Legal bases for processing

We process personal information on the following legal bases under the UK GDPR: performance of a contract, to provide the services and licences you request; legitimate interests, to operate, secure and improve our service and understand site usage, where this is not overridden by your rights; legal obligation, to comply with accounting, tax and other legal requirements; and consent, where we ask for it, which you may withdraw at any time.

5. Cookies and local storage

Our site uses your browser's local and session storage to remember your basket, your saved images and your recent search while you browse. We use a limited amount of analytics data to count visits. We do not use third-party advertising cookies. You can clear this data at any time through your browser settings.

6. Who we share your information with

We do not sell your personal information. We share information only with service providers who help us run the business, including Stripe (payment processing), Supabase (database and file hosting), Cloudflare (website hosting and content delivery) and an IP geolocation provider used to estimate the country of a visit. These providers process information on our behalf under appropriate agreements. We may also disclose information where required by law or to protect our rights.

7. International data transfers

Some of our service providers may process information outside the United Kingdom. Where this happens we take steps to ensure your information is protected by appropriate safeguards, such as the UK International Data Transfer Agreement or an equivalent mechanism.

8. Data retention

We keep account and transaction information for as long as your account is active and for as long afterwards as we are required to for legal, accounting and tax purposes. Technical and usage data is kept for a limited period for analytics and security. When information is no longer needed it is deleted or anonymised.

9. Your rights

Under the UK GDPR you have the right to access the personal information we hold about you; ask us to correct inaccurate information; ask us to delete your information; restrict or object to certain processing; request a copy of your information in a portable format; and withdraw consent where processing is based on consent. To exercise any of these rights, contact us at [insert contact email]. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk.

10. Security

We take reasonable technical and organisational measures to protect your information, including encryption of passwords and secure, access-controlled hosting. No system is completely secure, but we work to protect your information and to respond promptly to any incident.

11. Children

Our service is intended for business and professional users and is not directed at children under 18. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the date at the top of this page. Significant changes will be brought to your attention where appropriate.

13. Contact us

For any questions about this policy or your personal information, contact us at [insert contact email] or write to us at [insert company address].