Privacy Policy

Last updated: 31 March 2026

Picaza ("we", "us", or "our") is committed to protecting your privacy and ensuring your personal data is handled in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR). This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or sign up for our mailing list.

1. Data Controller

Picaza is the data controller responsible for your personal data. If you have any questions about how we handle your data, you can contact us at info@picaza.co.

2. Information We Collect

When you sign up for early access or our mailing list, we collect:

• Name – so we can personalise our communications with you.
• Email address – so we can send you updates, launch news, and relevant offers.

We also collect limited technical data through cookies and analytics (see Section 8 below).

We do not collect any special category (sensitive) personal data.

3. Lawful Basis for Processing

Under the UK GDPR and EU GDPR, we rely on the following lawful bases to process your personal data:

• Consent (Article 6(1)(a)) – When you voluntarily sign up for our mailing list, you give us consent to process your name and email address to send you communications. You may withdraw your consent at any time (see Section 7).
• Legitimate interests (Article 6(1)(f)) – We may process limited technical data (e.g. anonymised analytics) to understand how visitors use our website and improve our services, where this does not override your rights and freedoms.

4. How We Use Your Information

We use the information you provide to:

• Send you updates about our launch and service.
• Send you relevant offers and promotions related to Picaza.
• Improve and optimise our website and services.

5. Data Sharing and International Transfers

We do not sell, trade, or rent your personal information to third parties.

We may share your data with trusted service providers who assist us in operating our website and mailing list (e.g. email delivery services, analytics providers). These providers act as data processors and are contractually required to process your data only on our instructions and in compliance with data protection law.

Some of our service providers (such as Google Analytics) may transfer data outside the UK and the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO) or the European Commission, or adequacy decisions, to protect your data.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

• Mailing list data – We retain your name and email address for as long as you remain subscribed. If you unsubscribe, we will delete your data within 30 days unless we are required by law to retain it longer.
• Analytics data – Anonymised analytics data is retained in accordance with our analytics provider's retention policies.

7. Your Rights

Under the UK GDPR, EU GDPR, and the Data Protection Act 2018, you have the following rights:

• Right of access – You can request a copy of the personal data we hold about you.
• Right to rectification – You can ask us to correct any inaccurate or incomplete data.
• Right to erasure – You can request that we delete your personal data where there is no compelling reason for us to continue processing it.
• Right to restrict processing – You can ask us to limit how we use your data in certain circumstances.
• Right to data portability – You can request that we provide your data in a structured, commonly used, and machine-readable format.
• Right to object – You can object to our processing of your data where we rely on legitimate interests as our lawful basis.
• Right to withdraw consent – Where we rely on your consent to process data, you may withdraw it at any time by unsubscribing from our mailing list using the link in any email we send, or by contacting us directly.

To exercise any of these rights, please contact us at info@picaza.co. We will respond to your request within one month, as required by law.

8. Cookies and Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies to collect anonymised usage data such as pages visited, time on site, and referring source. No personally identifiable information is shared with Google Analytics.

By using our website, you can manage your cookie preferences through your browser settings. You may disable cookies at any time, although this may affect your experience on our site.

For more information on how Google processes your data, please see Google's Privacy Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. Where changes are significant, we will make reasonable efforts to notify you (e.g. via email if you are on our mailing list).

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the relevant supervisory authority:

• UK – Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint
• EU – Your local Data Protection Authority (DPA). A list of EU DPAs can be found on the European Data Protection Board website.

We would appreciate the opportunity to address your concerns before you approach a supervisory authority, so please contact us first at info@picaza.co.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at info@picaza.co.