Privacy policy

Who looks after your data

Nowhere Else Creations and OddJoy are two separate businesses. Each one is responsible (the "data controller") for the details you give it:

• Nowhere Else Creations (handmade personalised gifts) — Michelle Gallivan, 45 Bedford Road, Southport, Merseyside PR8 4HU ·
• OddJoy (a curator of pins, stickers and patches, and a creator of magnets, badges and key rings from your own images and artwork) — Mike Gallivan, 45 Bedford Road, Southport, Merseyside PR8 4HU · · phone or WhatsApp 07789 640320

We do not sell your information, and we never use it for anything other than what is described here.

1. Information we collect to make your order

• Contact details: your name, email address, phone number and, for posted orders, your delivery address.
• Customer media: the personal photos, drawings and words you upload to design your magnets, key rings, badges and gifts, and pictures taken at our photo booth.
• Your order: what you bought, when, how it was paid (we never see your card details) and whether it was collected or posted.
• If you create an account: your saved details, your orders and the pictures you choose to keep in "My images".
• If you contact us: your message and any photo you send with it.

2. How we store and process your photos

Your images are personal to you, and we treat them with strict confidentiality.

Storage: photos are securely uploaded, filed and stored on our own website, which is built, hosted and looked after for us by Blueprint Business Solutions Ltd on Krystal servers in the UK.

Access: only the people involved in printing and quality-checking your products (us) can see your images.

Deletion: uploaded order photos are deleted automatically within 30–60 days after your order has been marked as shipped or collected. On our website this is currently set to 30 days. This short window lets us handle any returns, defects or re-prints. You can ask us to delete them sooner using the form below.

"My images": pictures you save to your own account stay there until you delete them (up to 20).

AI tools: if you choose an AI style at the photo booth or an AI tool in the photo editor, that one picture is sent through our website to OpenAI to make the result. We don't ask OpenAI to keep it, and we keep only the result for your order.

Stall screen: your booth picture is only shown on the screen at our stall if you tick the box to say so, and only on the day.

3. Third-party services we use

We only share data with trusted services we need to run our business and deliver your order:

4. UK legal basis and how long we keep things

Under the UK GDPR we use your information because we need it to make and deliver your order (contract); to answer your messages and keep our business running (legitimate interests); and, for things like showing your booth picture on the stall screen or sending you news, only because you said yes (consent, which you can withdraw at any time).

• Order photos: deleted 30 days after your order is finished (see above).
• Transaction records: we are legally required by UK tax law (HMRC) to keep transaction data (invoices and accounting records) for 6 years.
• Messages and enquiries: kept for as long as we need to help you, then deleted.
• Your account: kept until you ask us to close it.

5. Cookies and your browser

The site needs only these to work:

• your basket and the item you're designing are kept in your own browser (local storage);
• a sign-in cookie keeps you signed in, and a small cookie lets you see the orders you placed as a guest. If you sign in with Google, Apple or Microsoft, a short-lived cookie (10 minutes) makes sure the sign-in comes back to the same browser.

Visit counts without cookies. To see which pages are useful, our own server counts page views and a few shop steps (added to basket, checkout, order placed). It uses no cookies and keeps nothing about you: a visitor is counted with a code made from that day's random number, your internet address and your browser, which can't be traced back to you and changes every day. Your internet address itself isn't stored.

Google Analytics — only if you say yes. If we switch it on you'll be asked first. With your yes, Google Analytics sets cookies (named _ga) to measure visits; with your no, nothing is sent to Google Analytics. No advertising cookies either way. You can change your answer with “Cookie settings” at the bottom of any page.

Our pages load their fonts from Google Fonts, which sees your device's internet address to send them.

6. Your rights (UK GDPR)

You have the right to access the personal data we hold about you, to have it corrected, to have it (including your photos) permanently deleted sooner than our 30–60 day window, to have a copy to take elsewhere (portability), and to object to or restrict how we use it. We are required by law to respond within one month (30 days).

For any questions about your data, or to use your rights, email the shop you dealt with (above) or use the form below. If you feel your data has been mishandled, you have the right to complain to the UK's data regulator, the Information Commissioner's Office (ICO), on 0303 123 1113 — though we'd appreciate the chance to put things right first.