Privacy Policy
At Your Memory Vault, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our photo and video sharing platform.
1. Information We Collect
1.1 Information You Provide
When you create an account or use our services, we collect:
- Account Information: Name, email address, password
- Payment Information: Billing details (processed securely through Stripe)
- Event Information: Event names, dates, and descriptions for your vaults
- Communications: Messages you send to our support team
1.2 Content You Upload
We store the photos and videos you and your guests upload, including:
- Original image and video files
- Metadata (file size, type, upload date)
- EXIF data that may include location, camera information, and timestamps
1.3 Automatically Collected Information
When you use our services, we automatically collect:
- Device Information: Browser type, operating system, device type
- Usage Data: Pages visited, features used, time spent on platform
- IP Address: For security and approximate location
- Cookies: To maintain your session and preferences
2. How We Use Your Information
2.1 To Provide Our Services
- Create and manage your account
- Store and display your photos and videos
- Process payments and send receipts
- Generate unique vault links and QR codes
- Enable photo uploads from your guests
2.2 To Improve Our Services
- Analyze usage patterns to enhance user experience
- Fix bugs and technical issues
- Develop new features
- Optimize performance and loading times
2.3 To Communicate With You
- Send confirmation emails for purchases
- Notify you about account activity
- Respond to your support requests
- Send important service updates (you cannot opt out of these)
- Send marketing emails (you can opt out anytime)
2.4 For Security and Legal Compliance
- Detect and prevent fraud
- Protect against abuse and spam
- Enforce our Terms of Service
- Comply with legal obligations
3. How We Share Your Information
3.1 With Your Consent
We only share your information when you explicitly authorize us to do so, such as when you share a vault link with guests.
3.2 Service Providers
We work with trusted third-party service providers:
- Stripe: Payment processing (see their privacy policy)
- AWS/Cloud Storage: Secure file storage and hosting
- Email Service: Transactional and marketing emails
These providers only access information needed to perform their services and are contractually obligated to protect your data.
3.3 Legal Requirements
We may disclose your information if required by law or if we believe in good faith that such disclosure is necessary to:
- Comply with legal obligations or court orders
- Protect our rights or property
- Prevent fraud or abuse
- Protect the safety of our users or the public
3.4 Business Transfers
If we are acquired by or merged with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
4. Data Security
4.1 How We Protect Your Data
- Encryption: All data transmitted to and from our servers uses HTTPS/TLS encryption
- Secure Storage: Files stored on secure cloud infrastructure with encryption at rest
- Access Controls: Limited employee access on a need-to-know basis
- Password Security: Passwords are hashed and salted (we never see your actual password)
- Regular Backups: Automated backups to prevent data loss
- Security Monitoring: Continuous monitoring for suspicious activity
4.2 Vault Privacy
- Each vault has a unique, hard-to-guess URL
- Optional password protection for additional security
- You control who has access to your vault links
- Private mode ensures guests only see their own uploads
5. Your Rights and Choices
5.1 Access and Update
You have the right to:
- Access all your personal information
- Update or correct your account details
- Download copies of your photos and videos
5.2 Delete Your Data
You can:
- Delete individual photos or videos from your vaults
- Delete entire vaults
- Request account deletion (contact support)
Note: Deleted data is removed from our active systems within 90 days. Backups may retain data longer but are not accessible.
5.3 Marketing Communications
- Unsubscribe from marketing emails using the link in any email
- You'll still receive important service-related emails
5.4 Cookies
You can control cookies through your browser settings. However, disabling cookies may affect some functionality.
6. Data Retention
6.1 Active Accounts
We retain your data as long as your account is active and for legitimate business purposes.
6.2 Deleted Accounts
- Account data removed from active systems within 90 days
- Backups may retain data for up to 1 year for disaster recovery
- Payment records retained for 7 years for legal compliance
6.3 Inactive Accounts
If your account is inactive for 3+ years, we may contact you before deleting your data.
7. Children's Privacy
Our service is not intended for children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.
8. International Users
Your Memory Vault is operated from the United Kingdom. If you're accessing our service from outside the UK:
- Your information will be transferred to and stored in the UK
- We comply with applicable data protection laws
- We use appropriate safeguards for international transfers
9. Third-Party Links
Our service may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do:
- We'll update the "Last Updated" date at the top
- We'll notify you by email for material changes
- Continued use after changes means you accept the new policy
11. Your EU/UK Data Protection Rights
If you're in the EU or UK, you have additional rights under GDPR:
- Right to Access: Request a copy of your data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restriction: Limit how we use your data
- Right to Portability: Receive your data in a machine-readable format
- Right to Object: Object to certain data processing
- Right to Withdraw Consent: Withdraw consent for data processing
To exercise these rights, contact us at privacy@yourmemoryvault.co.uk
12. Contact Us
If you have questions about this Privacy Policy or our data practices:
- Email: privacy@yourmemoryvault.co.uk
- General Support: support@yourmemoryvault.co.uk
- Website: yourmemoryvault.co.uk