Privacy Policy

Spaghetti (“we”, “us”, “our”) is a gallery delivery service for photographers, operated from the United Kingdom. You can contact us at hello@spaghettigalleries.uk.

For data submitted by photographers’ clients (gallery viewers), the photographer is the data controller and Spaghetti acts as a data processor.

• Account data: name, email address, hashed password, authentication provider identifiers.
• Billing data: subscription plan, billing status, and customer identifiers from our payment processor (Stripe). We do not store full card numbers.
• Content: photos, gallery names, captions, cover images, and any metadata you upload.
• Gallery viewer data: visitor identifiers used to remember favorites and downloads, and (where applicable) the email or password entered to access a protected gallery.
• Usage and device data: IP address, browser, operating system, pages viewed, timestamps, and approximate location derived from IP.

• To provide the service: hosting galleries, processing uploads, sharing links, and recording favorites.
• To handle billing, prevent fraud, and comply with tax obligations.
• To secure the service, debug issues, and improve features.
• To send essential service emails. Marketing emails are only sent with your consent and you can opt out at any time.

We rely on (a) contract to deliver the service you signed up for, (b) legitimate interests for security, fraud prevention, and product improvement, (c) legal obligation for tax and accounting records, and (d) consent for optional marketing communications.

We do not sell your personal data. We share it only with vendors who help us run the service:

• Hosting, database, and storage infrastructure providers.
• Stripe for payment processing.
• Email delivery providers for transactional messages.
• Analytics and error monitoring providers, where used.

We may also disclose data when required by law or to protect our rights.

Some providers process data outside the UK / EEA. Where they do, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or the UK Addendum.

Account, gallery, and billing records are kept while your account is active and for a reasonable period afterwards to meet legal and accounting requirements. You can request deletion at any time; some records may be retained where law requires.

Subject to local law, you may request access, correction, deletion, restriction, portability, or object to processing. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.

To exercise any right, email hello@spaghettigalleries.uk.

We use strictly necessary cookies and local storage to keep you signed in and to remember gallery favorites. Optional analytics cookies are only set with your consent where required.

We use encryption in transit, access controls, and isolated per-user storage. No service is perfectly secure, but we work hard to protect your data and notify you of incidents where required by law.

Spaghetti is not directed at children under 16 and we do not knowingly collect data from them.

We may update this policy. Material changes will be communicated by email or an in-app notice.