Privacy policy
Last updated: September 2026
Who we are
Off Your Phone is a small UK business that turns your favourite photos into personalised keepsakes. You can contact us at hello@offyourphone.co.uk.
What we collect and why
| Data | Why we need it | Lawful basis |
|---|---|---|
| Name, email, phone (optional), delivery address | To fulfil your order, answer questions, and send dispatch updates | Contract performance |
| Images you upload (photos, logos, or other graphics) | To create and print your personalised product | Contract performance |
| Payment details | To take payment securely — handled entirely by Stripe; we never see or store your full card number | Contract performance |
| Account email and password | To let you sign in and manage your projects across devices (optional — you can use the site without an account) | Consent |
| Session identifier | To keep your work linked to your browser while you design your product — this is a functional cookie, not tracking | Legitimate interest |
| Random checkout reference and status | To detect broken or abandoned checkout journeys and connect verified Stripe updates to the correct attempt. If Stripe supplies contact details after a failed attempt, we use them only to provide checkout support. | Steps requested before entering a contract and legitimate interest in operating a reliable checkout |
| Contact form messages | To reply to your enquiry | Legitimate interest |
We do not use analytics, advertising cookies, or tracking pixels on this site.
Who we share data with
We only share your data where it is necessary to provide our service:
- Stripe — processes your payment securely. Stripe's own privacy policy applies to payment data they handle. See stripe.com/gb/privacy.
- Hosting and email providers — our website, order records and private production files are hosted on our VPS. Hostinger provides our business email service, including contact enquiries and order emails.
- Royal Mail or courier — receives your name and delivery address to ship your order.
We do not sell or share your data with anyone else.
International transfers
Your data is processed in the UK. Stripe may process payment data in countries outside the UK under their own safeguards — see their privacy policy linked above. We do not otherwise transfer your data internationally.
How long we keep your data
- Order records and production files — kept for 6 years from the order date for accounting, tax, and warranty purposes, then deleted.
- Uploaded images — kept for the duration of your project. Deleting a project removes the saved composition; it does not automatically erase its original uploads. Contact us to request deletion of uploaded images. Completed order images are retained with the order record as above.
- Account details — kept until you ask us to delete your account.
- Contact form messages — kept until the enquiry is resolved, then deleted within 12 months.
- Incomplete checkout attempts — kept for 30 days to diagnose payment problems, then deleted. Successful orders follow the order-record period above.
Your rights
Under UK data protection law, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data (where we have no legal obligation to keep it)
- Object to processing based on legitimate interest
- Withdraw consent at any time (for example, by deleting your account)
- Complain to the Information Commissioner's Office if you are unhappy with how we handle your data
To exercise any of these rights, email hello@offyourphone.co.uk.
Changes to this policy
If we make material changes, we will update this page and change the date at the top. We won't reduce your rights without telling you.