Privacy notice
Effective from 26 September 2026
This notice explains what personal data Pet Portrait Maker (www.mypetpics.art) collects when you use the site or buy from us, why we use it, who we share it with, how long we keep it and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
Pet Portrait Maker is run by Hampton.io Ltd, a private limited company registered in England and Wales (company number 15728356), whose registered office is at 139 Old Station Road, Hampton in Arden, Solihull, West Midlands, B92 0HE, United Kingdom. We are the controller of the personal data described in this notice.
For anything about your data, email support@hampton.io or write to us at the address above.
What we collect
- Photos you upload. The photo of your pet that you choose to turn into a portrait. Photos can show more than your pet, such as people or the inside of your home, so please only upload photos you're happy for us to process.
- Portraits we create. The artwork generated from your photo, watermarked previews, framed-print mockups and the style and options you choose, including any text you add.
- Your email address, when you check out, to send your order confirmation, download links and delivery updates.
- Delivery details. Your name, delivery address and phone number, which you enter on Stripe's payment page when you order a framed print.
- Payment information. Stripe takes your payment. We never see or store your full card details. Stripe tells us whether your payment succeeded, the amount and currency, and what we need to handle refunds and disputes.
- Messages you send us, and our replies.
- Technical information. Your IP address, browser and device type and the pages you request, which our hosting provider needs to run the site and keep it secure. We also estimate your country from your browser's time zone and language, and from your IP address, to show prices in your currency.
- Usage information. Which pages you visit and what you click, collected by PostHog, and anonymous visit counts collected by Vercel Analytics (see Cookies).
- Information on your device. Your cart and recent portraits are saved in your browser's local storage so they are still there when you come back.
We don't ask for sensitive (“special category”) data, we don't use your photos to identify anyone, and we don't sell your personal data.
How we use it and our lawful bases
| What we do | Data | Lawful basis (UK GDPR) |
|---|---|---|
| Create your portraits and show you previews | Photos, portraits, your choices | Contract: you ask us to create portraits before deciding to buy (Article 6(1)(b)) |
| Take payment, deliver downloads, print and deliver framed prints, and send order and delivery emails | Email address, delivery details, order and payment details, portraits | Contract (Article 6(1)(b)) |
| Answer questions and handle refunds, complaints and chargebacks | Email address, messages, order details | Contract, and our legitimate interest in resolving disputes and defending legal claims (Article 6(1)(f)) |
| Keep accounting and tax records | Order and payment details | Legal obligation (Article 6(1)(c)) |
| Keep the site secure, prevent fraud and abuse, and fix errors | Technical information, order details | Legitimate interest in running a secure, reliable service (Article 6(1)(f)) |
| Count visits and see how the site is used, without storing anything on your device | Usage and technical information | Legitimate interest in improving the site (Article 6(1)(f)) |
| Analytics cookies and session recordings (PostHog) | Usage and technical information, recordings of how you use our pages | Your consent (Article 6(1)(a) and PECR regulation 6) |
| Measure our adverts (Meta Pixel) | Pages viewed, checkout and purchase events, cookie identifiers, IP address, browser details | Your consent (Article 6(1)(a) and PECR regulation 6) |
Where we rely on legitimate interests, we have weighed them against your rights, and you can object (see Your rights). Where we rely on consent, you can withdraw it at any time with Cookie settings.
We don't send marketing emails. We don't make decisions about you based only on automated processing: the AI creates artwork from your photo, it doesn't make decisions about you.
Your photos, portraits and share links
Uploaded photos, previews and portraits are stored at long, random web addresses so they can be shown to you, in your emails and on your portrait's share page (www.mypetpics.art/share/…). The share page shows your portrait and the photo it was made from. Anyone who has one of these links can see the images, so only share them with people you're happy to show. We don't list or publish them anywhere else, and we won't use your photos or portraits in our advertising without asking you first.
To create a portrait we send your photo, your style choices and any text you add to Google's Gemini API, which returns the artwork. Under Google's terms for the paid Gemini API, Google doesn't use this content to improve its products; it may keep it for a limited time to detect abuse and meet legal requirements.
To have your photos and portraits deleted, email us the share link or your order reference.
International transfers
Some providers process data outside the UK, including in the USA. When they do, the transfer is protected by UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework for certified US providers), or by the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Email us for details.
How long we keep it
| Data | How long |
|---|---|
| Uploaded photos and portraits | Kept while your portraits and share links are in use, so you can come back to them, re-download a purchase or reprint it. Email us and we will delete them sooner. |
| Order records (email, delivery details, what you bought and paid) | Six years from the end of the financial year of the purchase, because UK company and tax law requires us to keep these records. |
| Download links | Links stop working 30 days after purchase, or straight away if the order is refunded in full. |
| Emails with us | As long as we need to deal with your request, and up to two years afterwards in case you contact us again. |
| Analytics | Pseudonymous usage events are kept in PostHog (EU) and used for up to 1 year; session recordings, made only if you accept analytics cookies, are kept for 30 days. PostHog may keep archived events for longer under its own retention policy, so ask us and we will delete your analytics data. Vercel Analytics keeps only aggregated visit counts. |
| Server and error logs | Hosting and error logs are kept for up to 30 days. |
| Your cookie choice | 6 months, then we ask again. |
Your rights
You have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted, unless we must keep it (for example, order records for tax);
- restrict how we use your data, or object to our use of it based on legitimate interests;
- receive data you gave us in a portable format;
- withdraw consent at any time, without affecting what we did before.
To use any of these rights, email support@hampton.io. We may ask you to confirm who you are, for example by writing from the email address you ordered with. We reply within one month, and there is usually no charge.
Complaints
If you're unhappy with how we handle your data, please contact us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Children
Our site isn't aimed at children, and you must be 18 or over to buy from us.
Changes to this notice
If we change this notice we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell you before it applies. See also our Terms.