Privacy Policy – Trail-Tales

Last updated: 27/07/2025

1. Who we are

Trail-Tales is operated by Alexandru Handabura, UK sole trader.
Trading address: 103 St Mary Grace’s Court, London E1 8NB, United Kingdom
E-mail: info@trail-tales.com

2. What data we collect

  • Identity and contact data – name, e-mail address, billing address, phone number (optional).
  • Payment data – transaction ID and last four digits of your card (handled securely by Stripe; we never see or store full card details).
  • Purchase details – order number, event name/date, image IDs, amount paid.
  • Selfie search data – the face photo you upload and a numeric facial “embedding” derived from it.
  • Usage data – IP address, browser type, device information, pages visited and cookies.
  • Marketing preferences – your newsletter opt-in status.

3. Why we use your data and our legal bases

  • Performing our contract – processing orders, delivering downloads, providing invoices and support.
  • Legitimate interests – preventing fraud, securing our website and understanding how visitors use it.
  • Legal obligations – keeping tax and accounting records.
  • Consent – sending you marketing e-mails; you may withdraw consent at any time.

4. Retention periods

  • Order records and invoices: kept for six years to meet UK tax law.
  • Facial embeddings: deleted after 30 days or immediately on request.
  • Download links: active for 30 days; images removed from the server after 60 days.
  • Newsletter list: kept until you unsubscribe or after two years of inactivity.
  • Server logs: kept for 90 days, then anonymised.

5. Sharing your data

We never sell or rent your personal data. We share it only with:

  • Stripe Payments UK Ltd – card processing.

Each third-party processes data under a written agreement and must protect it to GDPR standards.

6. International transfers

Some providers host data in countries outside the UK/EEA (for example, the United States). Where this happens we rely on:

  • the UK–EU adequacy decision (for UK-to-EEA transfers);
  • Standard Contractual Clauses approved by the UK ICO or the European Commission; or
  • participation in the UK extension to the EU–US Data Privacy Framework.

7. Cookies

Essential cookies keep your cart working and secure. Analytics and marketing cookies load only after you give consent via our cookie banner. You can change your choices at any time or block cookies in your browser settings.

8. Your rights

You may:

  • ask for a copy of the personal data we hold about you;
  • request correction of inaccurate data;
  • request erasure when legal grounds allow;
  • ask us to restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw consent for marketing at any time.

To exercise any right, e-mail [info@trail-tales.com].
UK residents may complain to the Information Commissioner’s Office (ICO).
EU/EEA residents may complain to their local data-protection authority or our EU representative.

9. Security measures

We serve all pages over HTTPS, store files with server-side encryption, protect the admin dashboard with two-factor authentication and keep regular encrypted backups. We review our security controls at least annually.

10. Minors

This service is aimed at adults. If you are under 18, please ask a parent or guardian to purchase on your behalf.

11. Changes to this policy

We may update this notice from time to time. Material changes will be announced on our website or by e-mail at least seven days before they take effect. The “Last updated” date will change accordingly.

12. Contact

Questions about this policy or your data?
E-mail [info@trail-tales.com] or write to the address above; we’ll reply within two working days.