What we do with your data

Your photographs

The photograph you upload is stored so we can prepare your piece after you pay. We prepare it after payment rather than while you are still designing, because most people try several versions and only one of them gets made.

• If you order: kept until 45 days after your order ships, in case it arrives damaged and needs remaking. Then deleted.
• If you do not order: deleted within 72 hours.

Your photographs are never used for marketing, never shown to anyone else, and never used to train anything. They are stored under an unguessable key and are not reachable from a web address.

Order data

Name, email, phone and delivery address, kept for six years because HMRC requires it of business records. Your card details are handled entirely by Stripe and never reach our servers.

Who else sees anything

• Stripe — payment processing.
• Brevo — sending your order emails.
• Parcel2Go and the courier — your name and delivery address, to deliver the parcel.
• Google Cloud — hosting, in European regions.

We do not sell data to anyone, for any purpose.

Cookies and storage

This site sets no cookies at all. There is no analytics, no advertising pixel, no session tracking and no third-party script watching what you do here.

One thing is stored in your browser: your basket, kept in local storage so it survives closing the tab. It stays on your device and is sent nowhere until you check out. Under the Privacy and Electronic Communications Regulations that counts as strictly necessary for a service you asked for, so it needs no consent — but you should still be told, which is what this section is for. Clearing your browser data empties your basket.

Paying takes you to Stripe, who set their own cookies on their own pages to process the payment and prevent fraud. That happens on Stripe’s domain under their policy, not ours.

Who we are, and the lawful basis

The data controller is GAO Group Ltd, of 3rd Floor, 86-90 Paul Street, London EC2A 4NE. Reach us at hello@singulosity.co.uk.

• Your order and address — processed to perform the contract between us. We could not make or post your piece without it.
• Your photograph — also to perform the contract. It exists to be made into the thing you bought.
• Marketing email — only ever on your consent, given by ticking a box at checkout that is never pre-ticked. You can withdraw it at any time, from any email, and withdrawing is as easy as giving it was.
• Records of orders — kept to meet our legal obligations, principally tax and accounting.

How long we keep things

• Photographs: deleted 45 days after your order is made. A preview you never ordered goes within three days.
• Order records: six years after the end of the financial year they fall in, which is what HMRC requires of us.
• Marketing consent: until you withdraw it.

Where your data goes

We use a small number of processors, each doing one job: Google Cloud (hosting and storage, in the United Kingdom and the EU), Stripe (payment), Brevo (email), and a courier to deliver your parcel. None of them is permitted to use your data for anything but the job we give them, and none of them is sold anything.

Your rights

Under UK GDPR you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email us and we will do it within one month. If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk.

Complaints

If we have got something wrong, tell us first — we would rather fix it. If you are still unhappy you have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk or on 0303 123 1113. You do not have to come to us first.