We never assume permission to publish a customer photograph.
Privacy at Rememoir
Your photographs are personal.
We treat them that way.
When you send us a photograph, we want you to feel comfortable about what happens to it. This page explains what we keep, why we need it, who may help us provide the service and when we normally delete it.
We use your photograph to review and provide the service you ask for.
Working photographs are normally deleted within the periods explained below.
01
Who we are
Rememoir is a trading name of Allison Tech LTD, registered in Scotland. Company Number: SC639030.
Allison Tech LTD decides how and why personal information collected through Rememoir is used and is the data controller for that information.
For privacy or data protection requests, use our Contact page and tell us that your message concerns privacy.
02
What we collect
What we need depends on how you use Rememoir. We may collect:
- your name and email address;
- your mobile number, if you choose to provide it;
- contact messages and correspondence;
- photographs you upload;
- information you give us about the people or story in a photograph;
- your Rememoir reference, requested service, recommendation and order details;
- order, payment and transaction information if you proceed;
- technical and security information reasonably needed to operate and protect the website, such as server logs and IP information.
You can ask a general question without uploading a photograph. Providing a mobile number is optional.
03
How we handle your photographs
Photographs sent through Get Started are stored privately outside the public area of the Rememoir website and are not given a normal public web address.
We first use your photograph to look at your request and consider what may work well. Sending it to us does not commit you to buy anything, and it does not mean we have started producing a finished Rememoir.
If you decide to go ahead, we use the photograph as needed to provide the restoration, movement, video or other service you have chosen.
Your photograph is private by default. We do not assume permission to use it in advertising, examples, social media, portfolios or a public gallery. If we would like to feature your finished work, we will ask you separately.
We do not use customer photographs for facial recognition or to uniquely identify the people shown in them.
04
Why we need personal information
We use personal information to do the things you would reasonably expect when dealing with Rememoir. This includes replying to questions, reviewing photographs, preparing recommendations and offers, creating and delivering purchased services, keeping you updated about your request, processing and recording payments, protecting the website and keeping appropriate business records.
We may also need information to deal with a complaint, payment dispute, suspected misuse or a legal or regulatory requirement.
We do not use Rememoir submissions to make solely automated decisions about you that produce legal or similarly significant effects.
05
The legal reasons we use information
UK data protection law requires us to have a lawful reason for using personal information. The reasons that may apply to Rememoir are:
Where you ask us to look at a photograph, prepare an offer, take steps before an order, or provide something you have purchased. In legal terms, this is contract or steps before entering a contract.
Where it is reasonably necessary to reply to enquiries, administer requests, keep the service secure, prevent misuse and operate the business in ways people would reasonably expect. This is our legitimate interests, provided your rights do not override them.
Where we need to use or keep information to meet legal, tax, accounting or regulatory obligations.
For optional uses where we specifically ask you first, such as featuring customer work publicly. Where we rely on consent, you can withdraw it for future use.
06
Services we sometimes use
Rememoir does not do absolutely everything alone. Like most online businesses, we use carefully selected services to help us run the website, communicate with customers, process payments and create finished work.
These may include providers that help with hosting, email, payments, storage, photo restoration, image processing, movement, video or sound. Where specialist processing is needed to create the work you have asked for, your photograph may need to be processed by one of these services.
We aim to provide a service only with the information reasonably needed for its role, and we consider privacy and security when choosing the services we use.
When you choose to pay for a Rememoir, your payment is processed through Stripe. Rememoir does not need to receive or store your full card number.
07
Processing outside the UK
Some technology providers may process or store information outside the United Kingdom. Where personal information is transferred internationally, we will consider the destination and the safeguards required by applicable UK law, which may include recognised adequacy arrangements or appropriate contractual safeguards.
If the services we use change in a way that materially affects how personal information is handled, we will update this policy where appropriate.
08
How long we keep things
We do not want customer photographs sitting in our working systems indefinitely. Our normal approach is:
If you do not proceed, we normally delete the uploaded photograph and associated working request information within 30 days.
Working photographs and generated files are normally removed from our working system within 30 days after completion unless we agree otherwise or have a specific legitimate reason to retain them.
Invoices, transaction records and relevant correspondence may be kept longer for accounting, tax, legal, fraud-prevention or dispute-resolution purposes.
We may delete information sooner when it is no longer needed, or retain it longer where required by law or necessary for an ongoing dispute or other legitimate reason.
09
Keeping things safe
We use technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse or disclosure.
Customer uploads are server-validated, renamed rather than stored under the customer-supplied filename, kept outside the public website, and accessed through a protected administration system.
No internet-connected service can promise that nothing could ever go wrong. What we can promise is that we take the privacy and protection of customer photographs seriously and build Rememoir with that in mind.
10
Your choices and data protection rights
Depending on the circumstances and lawful basis, you may have rights to access, correct or erase personal information; restrict its use; object to certain processing; receive certain information in a portable format; and withdraw consent where we rely on consent.
Where we rely on legitimate interests, you have the right to object. We will consider your objection and whether compelling legitimate grounds require the processing to continue.
To make a request, use our Contact page. We may need to confirm your identity before acting on some requests.
11
Other people in photographs
Family photographs often contain more than one person. If someone shown in a photograph is living and identifiable, the image may contain their personal information even though another person sent it to us.
You should only submit a photograph where you are entitled to provide it for the service requested. Our Terms & Conditions will also require customers to confirm this.
We use information about other people shown in a customer-supplied photograph only as reasonably necessary to assess and provide the requested service, and not for facial recognition.
If you believe Rememoir holds a photograph or other personal information relating to you and you have a privacy concern, please contact us.
UK data protection law applies to identifiable living people. Information relating only to someone who has died is not personal data under the UK GDPR, although we still treat family photographs with care and respect.
12
Cookies and the website
Rememoir may use cookies or similar technology where needed for core website functions, security and administration. Where non-essential cookies or tracking require consent, we will ask before using them.
Our separate Cookie Policy explains this in more detail.
13
Questions or concerns
If anything on this page is unclear, you would like to exercise a data protection right, or you are concerned about how Rememoir has handled personal information, please get in touch. We would always like the opportunity to help.
If your question relates to an existing Rememoir, including your reference number will help us find it more quickly.
If you remain unhappy with how we handle a data protection concern, you have the right to complain to the UK Information Commissioner's Office (ICO).
Information Commissioner's Office ↗14
If this policy changes
We will review this Privacy Policy as Rememoir develops and as the services we use change.
If we materially change how we use personal information, we will update this page and, where required, bring the change to affected customers' attention before the new use begins.
Our approach
Clear about what we do.
Careful with what you share.
We want privacy at Rememoir to be understandable rather than hidden behind legal language.