Small Goodbyes

Privacy

What we collect

  • Order details — name, email, delivery address. Collected by Stripe at checkout and shared with our print partner (Gelato) solely to produce and deliver your order. Order records have no automatic deletion date.
  • Uploaded photos and artwork — used to create your preview and purchased artwork. Saved previews are available for 30 days from creation. Unpurchased uploads and their masters are deleted once their previews have expired. For an order made from an AI preview, your upload and the approved artwork are deleted 90 days after the upload, once the order is settled. Artwork required by an outstanding order is retained, and the print file made for each order is kept for fulfilment and reprints; for a photo printed as it is, your upload is that print file.
  • Saved artwork access — we store your verified email to recover your previews and apply the three-per-day allowance on this website. Codes are sent through Resend and expire after ten minutes. The verified email has no automatic deletion date. Verification does not subscribe you to marketing.
  • Essential cookies and abuse protection — a visitor cookie associates uploads with your browser; a secure session cookie remembers email verification for up to 30 days. Hashed network identifiers and generation attempts protect daily limits. Signing out ends that browser's verified session.
  • Privacy-friendly analytics — we count page views and a short list of actions (a preview being generated, adding to basket, starting checkout, completing an order, joining the mailing list, following a link from a guide to a product) on our own servers. We record the event name, the page path, the name of the website that linked you here (never the page you came from), the campaign label on a link you followed (for example one of our social posts), whether the visit came from one of our own testing tools or a known search-engine crawler (worked out from what your browser says it is, which we do not keep) and, for an order, its reference and total. We do not record your IP address, your device or browser, or anything that identifies you, and we do not track you across other sites. These records are deleted after 180 days, with one exception we keep deliberately: the note of which artwork you approved for printing, which is held against the order reference with no automatic deletion date, as our record of what you approved if an order is ever disputed. No advertising trackers.
  • Google Analytics, only if you allow it — with your permission we use Google Analytics, provided by Google, to understand how people use this site: pages visited, the same short list of actions as above, session statistics, browser and device information and approximate location. It sets _ga cookies that last up to two years. Nothing is sent to Google until you choose "Accept analytics", and nothing at all if you choose "Reject analytics". You can change your mind at any time with the Cookie settings link at the foot of every page; withdrawing removes those cookies. We use it for analytics only, not advertising.

The mailing list

If you sign up for our free size & framing guide we store your email address (nothing else) to send you the guide and the occasional new drop or guide — that's consent, and you can withdraw it any time with the one-click unsubscribe link in every email, or by emailing us. Emails are sent through Resend. We keep your address until you unsubscribe; unsubscribed addresses are deleted 30 days after you unsubscribe. If an email to you bounces or is reported as spam, we keep a note of the address so we stop sending marketing to it; that note has no automatic deletion date. We never sell or share the list.

AI processing

Photos you upload for a restyled artwork are processed by an AI image model via OpenRouter (Google Gemini image models) to create your artwork. Your photo is sent for processing and is not used by us to train any model.

Payments

Payments are handled entirely by Stripe. We never see or store your card details.

Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data at any time: orders@smallgoodbyes.com. We respond within one month. The data controller is Craig Fearn (trading as Small Goodbyes), 124 City Road, London, EC1V 2NX, registered with the Information Commissioner's Office.