Privacy Policy

Effective Date: 25/06/2025
Last updated: 03/07/2025

1. Introduction

This Privacy Policy outlines how InstaIDPhoto (a brand of Start Worldwide Trading Limited, “we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you interact with our services via our website or any connected mobile or web-based systems (collectively the “Services”). Our Services are powered by Shopify.

Personal data refers to any information that identifies, relates to, describes, or can reasonably be linked to you or another person. It does not include anonymized or de-identified information.

We are committed to safeguarding your privacy and processing your data transparently and in compliance with applicable laws, including:

  • The UK General Data Protection Regulation (UK GDPR)
  • The EU General Data Protection Regulation (EU GDPR)
  • The California Consumer Privacy Act (CCPA)
  • The Saudi Personal Data Protection Law (PDPL)

2. Sources of Personal Data

We collect personal data from the following sources:

  • Directly from you: When you create an account, place an order, contact us, or interact with the Services.
  • Automatically from your device: When you use our Services, including through cookies and similar technologies.
  • From service providers and partners: Including Shopify, payment processors, analytics, and marketing partners.
  • From third parties: Such as other platforms or publicly available sources, where permitted by law.

3. What Data We Collect

We may collect the following categories of personal data:

a. Data You Provide

  • Uploaded photo (facial image)
  • Country and document type selected
  • Order details (photo quantity, format, retouch, expert review)
  • Name, email, phone (if provided at checkout or contact)
  • Address and payment-related details (for printed orders)
  • Communications, messages, or attachments shared during support or complaints

b. Data Collected Automatically

  • Device type, OS, browser type
  • IP address and session data
  • Technical identifiers (e.g., Firebase instance ID)
  • Usage data (e.g., photo upload success, errors)
  • Cookies and analytics identifiers

c. Data from Third Parties

  • Payment platforms (e.g., Shopify Payments, Stripe): billing name, partial card digits, billing address
  • Analytics services (e.g., Google Analytics, Facebook Pixel): behavioral and referral data

4. How We Use Your Personal Data

Depending on how you interact with us or the Services, we may use your personal data for the following purposes:

  • To provide, tailor, and improve the Services: Including order processing, delivery, customer account management, remembering preferences, and customizing your experience.
  • Marketing and Advertising: To send marketing, advertising, and promotional communications by email, SMS, or postal mail, and to show you online advertisements, including based on your activity.
  • Security and Fraud Prevention: To authenticate your account, secure transactions, investigate possible fraud or abuse, and protect our Services.
  • Communications: To respond to your inquiries and provide customer support or service updates.
  • Legal and Regulatory: To comply with law, respond to legal requests, enforce agreements, and protect our or others' rights.

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Performance of a contract: When you use our Services (UK GDPR Art. 6(1)(b)).
  • Your explicit consent: For storing your photo, sending marketing or service updates (UK GDPR Art. 6(1)(a)).
  • Our legitimate interests: To improve our services, ensure security, and handle customer support queries (UK GDPR Art. 6(1)(f)).
  • Compliance with legal obligations: Such as tax reporting or responding to data subject rights (UK GDPR Art. 6(1)(c)).

6. How We Disclose Personal Data

We do not sell your personal data. We may share your data with:

  • Service Providers:
    • Shopify: Our platform host and ecommerce provider.
    • Firebase (Google): Secure storage, database, hosting
    • Payment providers: For transaction processing
    • Analytics providers: (e.g., Google Analytics, Facebook Pixel)
  • Business and Marketing Partners: To provide marketing and advertising, in accordance with applicable law.
  • Public Authorities: Where required by law, governmental request, or to enforce our terms.
  • Corporate Transactions: In the event of a merger, acquisition, or sale.
  • At your direction or with your consent.
  • Third-Party Links: Our Services may include links to external websites or platforms, which have their own privacy policies. We are not responsible for those policies or practices.

7. Relationship with Shopify

Our Services are hosted by Shopify, which collects and processes your personal information to provide and improve our Services. Information you submit may be processed by Shopify and its service providers, possibly outside your jurisdiction. To learn more about Shopify’s privacy practices and to exercise your rights with respect to information processed by Shopify, please see Shopify’s Consumer Privacy Policy.

8. Where Your Data Is Stored & International Transfers

Your personal data is securely stored on Google Firebase servers and Shopify’s infrastructure, which may be located in the United States or other countries.

When we transfer your personal data outside the UK, EEA, or Saudi Arabia, we rely on:

  • Standard Contractual Clauses (SCCs)
  • Google’s Data Processing Terms
  • Shopify’s transfer mechanisms
  • Explicit consent (if applicable)
  • Other lawful safeguards

9. Data Retention

We retain your data no longer than necessary:

  • Photo data: Typically for 30 days unless needed for legal or support reasons.
  • Order and invoice data: Retained up to 6 years for legal compliance.
  • Consent logs: As long as you are a user + 3 years.
  • Other data: As required to provide Services, maintain your account, resolve disputes, comply with legal obligations, or enforce policies.

10. Security of Your Data

We use reasonable administrative, technical, and physical safeguards to protect your personal data. However, no security measures are perfect, and we cannot guarantee “perfect security.” We recommend not sending sensitive information over unsecure channels.

11. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

  • Right to access / know your personal data.
  • Right to delete your personal data.
  • Right to correct inaccurate data.
  • Right to data portability.
  • Right to object or restrict processing.
  • Right to withdraw consent (where applicable).
  • Right to manage communication preferences (opt out of marketing at any time).
  • Right to complain to your local data protection authority.
  • Non-discrimination for exercising your rights.

We may need to verify your identity before processing your request.
To exercise any rights regarding data processed by Shopify, visit the Shopify Privacy Portal.

12. Complaints and Appeals

If you have a complaint about how we process your personal data, please contact us using the details below. Depending on your location, you may also have the right to appeal our decision or lodge a complaint with your local data protection authority (e.g., UK ICO, EEA Supervisors).

13. Children’s Data

Our Services are not intended for individuals under the age of 16 (or under the age of majority in your jurisdiction). We do not knowingly collect data from minors. If you are a parent/guardian and believe your child has provided us data, please contact us for deletion.

14. Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Functionality (maintaining your selections)
  • Analytics (e.g., Google Analytics)
  • Marketing (e.g., Facebook Pixel)

You can manage your cookie preferences via the cookie banner or your browser settings.

15. Changes to This Policy

We may update this Privacy Policy from time to time, including for operational, legal, or regulatory reasons. Updates will be posted on our website with the revised date. Continued use of the Services constitutes your acceptance of the revised terms.

16. Contact Us

Should you have any questions, concerns, or requests about this Privacy Policy or our privacy practices, please contact:

Email: instaidphoto@swtrading.co.uk
Mail: Star Worldwide Trading Limited: 268 Lees Road, Oldham, ENG, OL4 1PA, GB

Legal Entity: Start Worldwide Trading Limited
UK Company House Registration No. 13530775

For the purpose of applicable data protection laws, Start Worldwide Trading Limited is the data controller of your personal information.