Privacy Policy

Last updated: 16 April 2026

Picaza Ltd ("we", "us", or "our") is committed to protecting your privacy and ensuring your personal data is handled in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or sign up for our mailing list.

1. Data Controller

Picaza Ltd is the data controller responsible for your personal data.

Company name: Picaza Ltd
Company number: 16949662 (registered in England and Wales)
Email: info@picaza.co

2. Information We Collect

When you sign up for early access or our mailing list, we collect:

Name – so we can personalise our communications with you.
Email address – so we can send you updates, launch news, and relevant offers.

We also collect limited technical data through analytics tools. Cookie-based analytics are only used after you have given consent; cookieless, privacy-friendly analytics operate under our legitimate interests without placing any information on your device (see Section 8 below).

We do not collect any special category (sensitive) personal data.

3. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

Consent (Article 6(1)(a)) – When you voluntarily sign up for our mailing list, you give us consent to process your name and email address to send you communications. You may withdraw your consent at any time (see Section 7).
Legitimate interests (Article 6(1)(f)) – We may process limited technical data (e.g. anonymised analytics) to understand how visitors use our website and improve our services, where this does not override your rights and freedoms.

4. How We Use Your Information

We use the information you provide to:

Send you updates about our launch and service.
Send you relevant offers and promotions related to Picaza.
Improve and optimise our website and services.

5. Data Sharing and International Transfers

We do not sell, trade, or rent your personal information to third parties.

We may share your data with trusted service providers who assist us in operating our website and mailing list (e.g. email delivery services, analytics providers). These providers act as data processors and are contractually required to process your data only on our instructions and in compliance with data protection law.

Some of our service providers (such as Vercel, which hosts our website and provides privacy-friendly analytics, and Google Analytics) may transfer data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision recognised by the UK Government, to protect your data.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

Mailing list data – We retain your name and email address for as long as you remain subscribed. If you unsubscribe, we will delete your data within 30 days unless we are required by law to retain it longer.
Analytics data – Analytics data collected via Google Analytics is retained for a maximum of 14 months, after which it is automatically deleted by Google.

7. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

Right of access – You can request a copy of the personal data we hold about you.
Right to rectification – You can ask us to correct any inaccurate or incomplete data.
Right to erasure – You can request that we delete your personal data where there is no compelling reason for us to continue processing it.
Right to restrict processing – You can ask us to limit how we use your data in certain circumstances.
Right to data portability – You can request that we provide your data in a structured, commonly used, and machine-readable format.
Right to object – You can object to our processing of your data where we rely on legitimate interests as our lawful basis.
Right to withdraw consent – Where we rely on your consent to process data, you may withdraw it at any time by unsubscribing from our mailing list using the link in any email we send, or by contacting us directly.

To exercise any of these rights, please contact us at info@picaza.co. We will respond to your request within one month, as required by law.

8. Cookies and Analytics

We use two analytics tools to understand how visitors use our website:

Vercel Web Analytics (used without cookies, no consent required). Our website is hosted on Vercel, which provides an aggregated, privacy-friendly analytics service. It does not use cookies, localStorage, or any similar technology, and it does not track visitors across websites. Visitor counts are derived from a short-lived daily hash of IP address and user-agent that is automatically discarded after 24 hours. Because no information is stored on or read from your device, the Privacy and Electronic Communications Regulations (PECR) do not require consent for this tool, and we rely on our legitimate interests (Article 6(1)(f) UK GDPR) for the minimal associated processing.

Google Analytics 4 (used only with your consent). GA4 uses cookies to collect usage data such as pages visited, time on site, referring source, device type, and a truncated IP address. We have enabled IP anonymisation so that your IP address is shortened before any storage or processing takes place. Under PECR, these analytics cookies are only set after you have given your consent via the cookie banner shown on your first visit. Strictly necessary technologies required for the website to function (for example, remembering your cookie choice) are used without consent, as permitted by law.

You can change or withdraw your consent at any time by , or by clearing cookies and site data in your browser.

For more information on how these providers process your data, please see Google's Privacy Policy and Vercel's Privacy Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. Where changes are significant, we will make reasonable efforts to notify you (e.g. via email if you are on our mailing list).

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint directly with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You do not need to contact us first before making a complaint to the ICO.

Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address your concerns first, so please feel free to contact us at info@picaza.co.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at info@picaza.co.