1. Introduction & Scope
PixPassport (“we”, “us”, or “our”), accessible at https://pixpassport.uk, provides an online passport and biometric photo formatting platform.
We are committed to safeguarding the privacy and personal data of our website visitors and service users. This Privacy Policy explains what personal information we collect, how we process it, the legal bases for processing under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, and your statutory rights.
2. Information We Collect
We adhere strictly to the principle of data minimisation. We only collect or process data strictly required to deliver our photo creation and customer support services:
- User-Uploaded Photographs: Image files (JPEG, PNG, WebP) uploaded to format, crop, and verify passport dimensions.
- Customer Support Data: Information provided voluntarily when contacting us (your name, email address, subject, result ID, and message content).
- Technical & Log Data: Standard server logs containing anonymised IP addresses, browser types, device categories, operating systems, and timestamp data for system security and anti-fraud monitoring.
3. Purpose and Legal Basis for Processing
Under UK GDPR Article 6, we process your personal data under the following legal bases:
4. Cookies and Local Storage
PixPassport does not use invasive advertising cookies or cross-site tracking networks. We utilize standard, strictly necessary browser storage mechanisms:
- Session & Local Storage (
sessionStorage/localStorage): Used solely to preserve your active photo processing result ID across browser navigation so you can view and download your generated photo. - You can clear locally stored session artifacts at any time by clearing your browser cache or closing your browser window.
5. Payment Processing
When purchasing a digital passport photo package (£7.99), payment transactions are handled through certified third-party payment processors. We never collect, store, or view full payment card numbers or banking secrets.
6. Data Retention and Automated Deletion
Uploaded photographs and generated passport images are retained only for the ephemeral duration needed to generate your output files and complete your download.
Customer support correspondence is retained for up to 12 months solely for auditing, resolving refund requests, and customer service continuity, after which it is securely deleted.
7. Third-Party Service Providers & Data Transfers
We do not sell, rent, or trade your personal information. We may engage vetted technical infrastructure service providers (cloud hosting, DNS routing, secure CDN delivery) to host and serve our platform.
Where technical providers operate outside the United Kingdom or European Economic Area (EEA), transfers are governed by UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses (SCCs) to guarantee equivalent data protection.
8. Children’s Privacy
PixPassport allows parents and legal guardians to format passport photos for infants, toddlers, and children under 16 for official travel documents. We do not knowingly create user accounts or profile children. Any child photograph is processed strictly at the direction and consent of the parent or legal guardian.
9. Your Statutory Privacy Rights
Under UK data protection law, you have specific rights regarding your personal information:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where retention is no longer necessary.
- Right to Restrict Processing: Request suspension of processing under certain circumstances.
- Right to Data Portability: Request transfer of your data in a structured, commonly used format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Complain: You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.
10. Contact & Privacy Requests
To exercise any of your statutory privacy rights, request data deletion, or ask questions about this policy, please contact our privacy team: