Privacy Policy

1. Introduction

Jigsaw You ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our website at jigsawyou.co.uk and our custom jigsaw puzzle service.

We are based in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We collect the following personal data when you place an order:

• Contact Information: Name, email address, phone number
• Shipping Address: Street address, city, postcode, country
• Payment Information: Processed securely by Stripe (we do not store card details)
• Photos: Images you upload to create your custom puzzle
• Order Details: Product type, puzzle size, order history

3. How We Use Your Data

We use your personal data for the following purposes:

• Order Fulfillment: To process, print, and deliver your custom puzzle
• Payment Processing: To securely process your payment via Stripe
• Communication: To send order confirmations, shipping updates, and respond to enquiries
• Legal Compliance: To comply with legal obligations and protect our rights

4. Legal Basis for Processing

Under UK GDPR, we process your data based on:

• Contract: Processing is necessary to fulfill your order
• Legal Obligation: Processing is required by law (e.g., tax records)
• Legitimate Interest: To improve our services and prevent fraud

5. Third-Party Services

We share your data with trusted third parties to provide our service:

• Stripe: Payment processing (USA, EU-US Data Privacy Framework)
• Prodigi: Print fulfillment and shipping (UK-based)
• Amazon Web Services: Secure image storage (EU region)
• Replicate: AI image processing (USA)
• Vercel: Website hosting (Global CDN)

All third parties are contractually obligated to protect your data and only use it for the purposes we specify.

6. Data Retention

• Uploaded Photos: Automatically deleted within 24 hours of order completion
• Order Records: Retained for 7 years for tax and legal purposes
• Email Communications: Retained for 2 years

7. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal obligations)
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interest

To exercise these rights, contact us at hello@jigsawyou.co.uk

8. Cookies

We use essential cookies to enable core website functionality. We do not use tracking or advertising cookies. For more information, see our cookie banner when you first visit the site.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), secure cloud storage, and access controls.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk