Chupii is committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, and protect your personal information.
Data Controller
Chupii is the data controller responsible for your personal data.
- [email protected]
- ◉ Phone
- +44 7495 843239
- ◉ Location
- Manchester, UK
What We Collect
When you use our services, we may collect:
- Photos — images captured during your photobooth session
- Contact information — email address, if you choose digital delivery
- Payment information — processed securely through Stripe; we do not store card details
Legal Basis for Processing
- Contract — processing is necessary to provide our photobooth services that you have requested
- Consent — where you have given consent for digital delivery of photos to your email address
- Legitimate interests — to respond to enquiries and improve our services
How We Use Your Information
- To provide photobooth services and deliver your photos
- To process payments securely via Stripe
- To send your digital photos via email, if requested
- To respond to enquiries about our services
Data Retention
- Digital photos are stored securely in cloud storage (Cloudflare R2)
- Photos are automatically deleted after 7 days
- Email addresses used for photo delivery are deleted after 7 days
- Payment records are retained as required by law — typically 6 years for tax purposes
- You can request immediate deletion by contacting us
Data Sharing
We do not sell your personal data. We share data only with:
- Stripe — payment processing (Stripe Privacy Policy ↗)
- Cloudflare — secure photo storage and delivery (Cloudflare Privacy Policy ↗)
These providers act as data processors on our behalf and are contractually required to protect your data.
International Transfers
Some of our service providers (Stripe, Cloudflare) may process data outside the UK. These transfers are protected by:
- Standard Contractual Clauses approved by the UK ICO
- Adequate safeguards as required by UK GDPR
Security
We implement appropriate technical and organisational measures to protect your personal information:
- Encrypted data transmission (HTTPS/TLS)
- Secure cloud storage with access controls
- Automatic deletion of photos after 7 days
- Regular review of security practices
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
To exercise any of these rights, contact us at [email protected]. We will respond within one month.
Right to Complain
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website — ico.org.uk ↗
- Phone — 0303 123 1113
We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.
Cookies
Our website does not use cookies or any tracking technologies.
Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect personal data from children under 13 without parental consent.
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Significant changes will be communicated where possible.