Privacy Policy

Last updated: 24 August 2026

This is a starting draft, not legal advice, and hasn't been reviewed by a solicitor. Please have it checked before relying on it for real customers — especially the sections on data retention, your rights, and international transfers, which need to match exactly what your systems actually do.

Who we are

Heirloom & Co. ("we", "us", "our") is a sole trader business based in the Isle of Man, providing photograph restoration, enhancement and colourisation services. You can contact us at [email protected].

What information we collect

Your name and email address, when you submit a photograph or place an order.
The photographs you upload to us for restoration.
Payment information, handled directly by our payment provider (currently SumUp) — we do not see or store your full card details ourselves.
Basic technical information (such as browser type) collected automatically when you visit the site, for security and reliability purposes.

How we use your information

To carry out the restoration service you've requested.
To communicate with you about your order, including sending back your restored photographs.
To process payment for paid orders.
To improve our service and respond to support queries.

We do not sell, rent or share your photographs or personal information with third parties for marketing purposes.

Who we share information with

We use a small number of trusted service providers to run this business, who process data on our behalf:

Cloudflare — hosting the website and securely storing uploaded photographs.
SumUp — processing payments for paid orders.
Resend — sending order notification emails.

If we start using additional providers in future, we'll update this list.

How long we keep your information

We keep uploaded photographs for 90 days after your order, after which they are deleted, unless you ask us to delete them sooner. You can request deletion at any time by emailing us.

Your rights

You have the right to ask what personal information we hold about you, to ask us to correct or delete it, and to object to how we use it. To exercise any of these rights, email [email protected].

If you're not satisfied with how we've handled your information, you have the right to complain to the Isle of Man Information Commissioner at inforights.im.

Cookies

This site does not use tracking or advertising cookies. We don't currently use any analytics tools that track individual visitors.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page.

Contact

Questions about this policy can be sent to [email protected].