Privacy
Pawmark Portraits – Privacy Statement
· @Pat
This statement explains what personal information Pawmark Portraits collects when you use pawmarkportraits.com, why we collect it, who we share it with and the rights you have under the EU General Data Protection Regulation (GDPR).
Who we are
Pawmark Portraits is a trading name of Lockstone Limited, a company registered in Ireland (company number 773999), with its registered office at Unit 2, 2 Bridge Street, Athlone, Co. Westmeath, N37 F1W4. We are the data controller for the personal information described here.
If you have any questions about this statement or your information, email us at pawmarkportraits@gmail.com.
What we collect
- Photos you upload
Examples: Photos of your pet, which may also show people, your home or other details in the background
Where it comes from: You
- Portrait details
Examples: Your pet's name, dates and any short message you add
Where it comes from: You
- Order and contact details
Examples: Your name, email address, phone number and delivery address
Where it comes from: You, through checkout
- Payment details
Examples: Card or wallet details, handled by Stripe. We never see or store your full card number
Where it comes from: You, through Stripe
- Messages
Examples: Emails or messages you send us
Where it comes from: You
- Technical information
Examples: IP address, browser and device type, pages visited, preview counts used to limit misuse, and approximate country used to display local prices. Country lookup is performed locally without sending your IP address to a geolocation service.
Where it comes from: Your device, through our website and cookies
Please only upload photos you are entitled to use. If a photo includes other people, crop them out where you can.
How we use it and why
- Create AI-generated previews of your portrait from your photo
Legal basis under GDPR: Taking steps at your request before entering a contract
- Make, print, frame and deliver your order, and send order emails
Legal basis under GDPR: Performance of our contract with you
- Take payment and prevent fraud
Legal basis under GDPR: Performance of our contract; our legitimate interest in preventing fraud
- Answer your questions and handle complaints or refunds
Legal basis under GDPR: Performance of our contract; our legitimate interest in good customer service
- Keep accounting and tax records
Legal basis under GDPR: Legal obligation
- Limit previews, keep the site secure and fix problems
Legal basis under GDPR: Our legitimate interest in running a safe, working website
- Analytics and advertising cookies, including measuring our Facebook and Instagram ads
Legal basis under GDPR: Your consent, which you can withdraw at any time
- Send marketing emails, if you opt in
Legal basis under GDPR: Your consent, which you can withdraw at any time
We do not use your photos to train AI models, and we will not use your pet's portrait in our own advertising unless you give us permission.
Who we share it with
We never sell your information. We share it only with service providers who help us run Pawmark Portraits, under contracts that require them to protect it:
- Google (Gemini API)
What they do: Generates the stylised portrait from your photo
What they receive: Your photo and the style instructions
- Stripe
What they do: Processes payments
What they receive: Payment, name, email and billing details
- PrintShrimp
What they do: Prints, frames and ships your portrait
What they receive: The finished portrait and your name and delivery address
- Replit
What they do: Hosts our website and stores order data
What they receive: Everything you submit through the site
- Microsoft Clarity
What they do: Provides heatmaps and session recordings only after you accept optional cookies
What they receive: Technical information and site interactions, with private customer screens, pet photos and personal fields masked
- Google (Gmail)
What they do: Sends order confirmations and replies
What they receive: Your name, email and order details
- Meta (Facebook and Instagram)
What they do: Measures our adverts, only if you accept advertising cookies
What they receive: Technical information about your visit
We may also share information where the law requires it, for example with Revenue or An Garda Síochána, or to protect our legal rights.
Transfers outside the EU
Some of our providers, including Google, Stripe, Replit and Meta, may process your information in the United States or other countries outside the European Economic Area. Where they do, we rely on the safeguards GDPR allows, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. You can ask us for details of the safeguard used for any transfer.
How long we keep it
- Photos and previews where no order is placed
How long: Deleted automatically after 30 days
- Photos and portrait files for completed orders
How long: 12 months after delivery, so we can handle reprints or problems, then deleted
- Order, payment and invoice records
How long: 6 years after the end of the tax year, as Irish tax law requires
- Customer service messages
How long: 2 years after our last contact
- Marketing consent and email address
How long: Until you unsubscribe
You can ask us to delete your photos sooner at any time. We will do so unless we must keep something to complete your order or meet a legal obligation.
Cookies and advertising
We use a small number of cookies and similar technologies:
- Essential cookies keep the site working, such as remembering your portrait while you check out and letting Stripe process payment securely. These do not need your consent.
- Analytics and advertising cookies, including the Meta Pixel, help us see which adverts bring people to the site. We only set these if you click Accept on our cookie banner.
- Microsoft Clarity helps us understand how visitors use the site through heatmaps and session recordings. We load it only after you accept optional cookies, keep advertising storage disabled, and mask private customer content. You can reject these cookies without affecting ordering, or withdraw your choice through Cookie settings. We remember your choice for six months. See Microsoft’s privacy statement for details about Microsoft’s processing.
You can change your choice at any time through the cookie settings link at the bottom of every page, or by clearing this website’s cookies and stored site data in your browser.
Your rights
Under GDPR you have the right to:
- Access a copy of the information we hold about you
- Correct information that is wrong or incomplete
- Delete your information, including your uploaded photos
- Restrict or object to how we use your information, including for direct marketing
- Data portability: receive information you gave us in a common format
- Withdraw consent at any time, where we rely on it, without affecting anything done before
To use any of these rights, email pawmarkportraits@gmail.com. We will reply within one month and may ask you to confirm your identity first. There is no charge.
If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the Data Protection Commission in Ireland at dataprotection.ie, or to the data protection authority where you live.
Children, security and changes
Children. Our website is not intended for anyone under 18, and we do not knowingly collect information from children.
Security. We use encrypted connections (HTTPS), keep access to customer data limited to the people who need it, and store payment details only with Stripe. No system is completely secure, but we will tell you and the Data Protection Commission promptly if a breach puts your information at risk, as the law requires.
Changes. We may update this statement from time to time. The latest version will always be on this page, with the date it was last updated.