Privacy

Who we are

Tantallon Holdings Limited trading as Little Pocket Card Co., company number 16290897, registered at 83 Tantallon Road, Balham, London SW12 8DQ. We are the data controller for everything described here. Write to us at orders@littlepocketcardco.co.uk.

We are a small operation. There is no call centre and no third-party support desk — the person who replies to your email is the person who prints your card.

Your photograph

Your photograph is uploaded straight from your browser into private storage. It is never publicly accessible: there is no public link to it, and it cannot be reached without a short-lived signed request generated by our own servers.

We use it for exactly one thing — producing the card you ordered. We do not:

• use customer photographs in advertising, on social media, or on this site;
• sell, licence or share them with anyone outside the list below;
• use them to train artificial intelligence, ours or anyone else’s;
• run facial recognition, age estimation or any other biometric analysis on them.

A photograph of an identifiable person is personal data about that person, not only about you. That is why we ask, in our terms, that you only upload images you have the right to use.

What else we collect

• Your name, email address and delivery address, to make and post your card and to send your confirmation.
• Your order details — what was bought, for how much, the crop you chose and any message for the reverse.
• Payment. Handled entirely by Stripe. Your card number never reaches our servers and we never store it. We receive only confirmation that a payment succeeded, plus the amount.
• Campaign information from the link you clicked if you arrived from an advert — the tags the ad platform itself put in the web address. We record these against your order so we know which adverts are worth running. They are only kept in your browser between steps if you accepted measurement.
• Technical logs generated automatically when a page is served, kept briefly for security and fault-finding.

Who we share it with

Only the suppliers needed to run the shop. Each acts on our instructions under a written contract, and none of them may use your data for their own purposes.

• Supabase — database and private photo storage, hosted in the European Union.
• Vercel — website hosting.
• Stripe — payment processing. Stripe is a data controller in its own right for fraud prevention and has its own privacy policy.
• Resend — sending your order confirmation.
• Royal Mail — delivery. They receive your name and address, nothing else.
• Meta — advertising measurement, and only if you agreed to it on the bar when you arrived. If you declined, or have not answered, nothing is sent to Meta at all. Your photograph is never sent to Meta under any circumstances, whatever you chose.
• Our accountant and HMRC — order and payment records, as tax law requires. Your photograph is not part of those records.

We would also disclose information if the law required it, or to protect a child from harm.

Where your data is held

Your photograph and order records are stored in the European Union. Some of our suppliers are American companies that may process limited data (such as an email address or a payment record) outside the UK. Where that happens it is covered by the UK International Data Transfer Addendum or an adequacy decision, which are the safeguards UK GDPR requires.

How long we keep it

• Your original photograph — deleted automatically 30 days after your order is fulfilled.
• Print artwork — kept 180 days, so we can reprint if a card is lost or damaged in the post.
• Order and payment records — what was bought, for how much, and where it was sent: six years, which UK tax law requires. These do not include your photograph.
• Emails you send us — kept while they are useful for supporting you, then deleted.

Deletion is automatic and does not depend on anyone remembering to do it.

How we protect it

Photographs live in private storage buckets with no public access. Our database denies access by default and is reached only by our own server code. Administrative access to orders is password-protected and limited to us. We do not put photographs into any tool that is not on the list above.

Legal basis

• Performing our contract with you — your photograph, your message, your address, your payment. Without these we cannot make the card.
• Legal obligation — keeping order and VAT records.
• Consent — advertising and analytics measurement, which you can refuse or withdraw at any time without affecting your order.
• Legitimate interests — keeping the site secure and preventing fraud, balanced against your rights.

We do not make any decision about you by automated means, and we do not profile you.

Cookies and advertising measurement

The only thing we use without asking is what the site needs in order to work: a short-lived identifier that keeps track of the card you are making, so it is not lost between steps and so nobody else can reach it. It contains nothing about you and disappears when you close the tab.

Everything else is optional and is off until you say otherwise. When you arrive you are asked once whether we may measure which adverts bring people here. Accept and decline are the same size, and declining costs you nothing — the site behaves identically either way.

If you decline, or simply ignore the bar: the Meta pixel is never loaded. Not loaded and disabled — the script is never requested at all, no Meta cookie is created or read, and no event is sent to Meta from your browser or from our servers.

If you accept: Meta’s pixel loads and sets its own cookies (_fbp, and _fbc if you arrived from an advert). We record when you view a card, reach checkout and complete an order. Because browsers increasingly block that, we also send the completed-order event from our own servers, which is the same event rather than an extra one — it carries a one-way scrambled version of your email address so Meta can match it to your ad click, and never your email itself, your name, your address or your photograph.

You can change your mind at any time using Cookie settings in the footer of any page. We do not sell data to advertisers or data brokers, and we use no analytics product of any kind.

Children

Our cards are bought by adults, very often showing photographs of their own children. We do not knowingly collect information directly from children, and we do not market to them. Photographs are treated exactly as described above regardless of who appears in them, and a parent or guardian may ask us to delete an image of their child at any time — we will do it the same day.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to our using it, or ask for it in a portable form. Where we rely on consent you can withdraw it at any time.

Email orders@littlepocketcardco.co.uk and we will respond within one month. There is no charge. Note that we may need to keep the order record itself for tax purposes even after deleting a photograph.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you told us first, but it is your right either way.

Changes to this notice

If we change how we handle your information we will update this page and change the date below.

Last updated September 2026. Questions about this notice: orders@littlepocketcardco.co.uk · littlepocketcardco.co.uk