← Back to LinkedStrips

Privacy Notice

Last updated: 25 September 2026

This Privacy Notice explains how LinkedStrips uses personal information when you use the service, appear in photographs made available through the service, receive access to a Strip, make a purchase, contact us or otherwise interact with LinkedStrips.

1. Who is responsible for your information?

LinkedStrips is operated in the United Kingdom and is the controller for the personal information described in this notice where LinkedStrips determines how and why that information is used.

For privacy questions, requests or complaints, contact: [email protected].

2. Who this notice covers

This notice may apply to:

• photographers who create a LinkedStrips account;
• people appearing in photographs uploaded to LinkedStrips;
• people who receive or use a LinkedStrips Link or QR card;
• visitors viewing a Strip or photograph;
• customers purchasing Full Resolution photographs;
• customers purchasing physical prints;
• print recipients;
• people submitting a photograph or Strip report.

3. Information we use

Depending on how you interact with LinkedStrips, we may use:

• photographer account information such as name, nickname, email address and country;
• authentication and account-security information;
• photographs and associated image files uploaded by photographers;
• Strip, session, card and photograph identifiers and operational information;
• an email address supplied to receive a one-off notification that a Strip is ready;
• information about Full Resolution purchases and physical print orders;
• print recipient name, delivery address and email address where required to fulfil an order;
• payment and transaction references received from payment providers;
• limited download and security information, which may include IP address and user-agent information where needed for security or transaction evidence;
• reports about photographs or Strips, including any text voluntarily entered into a report;
• information about photographer account moderation, suspension, blocking or closure where applicable.

4. Where the information comes from

We receive personal information directly from people using LinkedStrips, including photographers, customers and people submitting reports or notification requests.

We also receive information from photographers when they upload photographs. This means that if you appear in a photograph, the photograph may have been provided to LinkedStrips by the photographer rather than directly by you.

Payment, payout and transaction information may also be received from Stripe, and print-order or shipment information may be received from our print fulfilment provider.

5. Why we use personal information

We use personal information where necessary to:

• create and operate photographer accounts;
• create, publish, display and manage Strips;
• process photographs and make them available to intended viewers;
• provide Full Resolution digital purchases;
• produce and deliver physical print orders;
• process payments and photographer proceeds;
• send requested transactional notifications;
• operate authentication and account-security controls;
• prevent abuse and protect the service and its users;
• investigate reports and moderate content or accounts;
• maintain necessary transaction and accounting records;
• comply with applicable legal obligations;
• measure limited service usage through aggregate statistics.

6. Our lawful bases

The lawful basis depends on why the information is being used. LinkedStrips may rely on the following bases under UK data protection law.

Contract

We use information where necessary to provide services that a person has requested or to perform a contract with that person. Examples include operating a photographer account and processing a customer's Full Resolution or print purchase.

A photographer's contract with LinkedStrips is not, by itself, treated as the lawful basis for all processing of personal information relating to other people who may appear in that photographer's photographs.

Legal obligation

We may retain or use information where necessary to comply with applicable legal, accounting or tax obligations.

Legitimate interests

We may rely on legitimate interests where the processing is necessary and those interests are not overridden by the rights and interests of the person concerned.

The legitimate interests we may pursue include:

• operating and protecting the LinkedStrips service;
• enabling appropriate access to photographs and Strips;
• providing limited service analytics without identifying gallery visitors;
• preventing fraud, abuse and unauthorised access;
• investigating reports and protecting photographed people, customers, photographers and the platform;
• maintaining necessary evidence of completed transactions;
• enforcing proportionate account restrictions where necessary to protect the service or other people, including retaining a minimal identifier where necessary to prevent a person subject to a permanent ban from simply creating a replacement account.

Consent

Where we specifically ask for consent for a particular use, we rely on that consent for that purpose. Where processing is based on consent, you can withdraw it at any time. Withdrawal does not make earlier processing unlawful.

Some choices or confirmations within LinkedStrips are part of a transaction or contract rather than consent under data protection law. We do not treat every checkbox or user request as data-protection consent.

7. Photographs and people appearing in them

Photographs may contain personal information where a person is identifiable.

LinkedStrips provides the technical service used by photographers to upload, manage and make photographs available. Photographers are responsible for ensuring that their photography and their use of LinkedStrips are lawful in the circumstances in which they operate.

LinkedStrips may also have its own responsibilities when it determines how personal information is processed through the platform, including for platform security, moderation, retention and the operation of customer purchases.

LinkedStrips does not use ordinary photographs for facial recognition or biometric identification.

8. Strip access and analytics

A LinkedStrips Link or QR card can act as a bearer credential. Anyone who receives the relevant access information may be able to open the associated Strip, so recipients should take appropriate care when sharing it.

LinkedStrips records limited Strip-view and free-download events so photographers can receive basic aggregate statistics. These analytics events do not intentionally store the gallery visitor's email address, IP address or user-agent.

Before a Strip is permanently deleted, the detailed events may be converted into photographer-level aggregate totals. The detailed Strip events are then removed with the Strip.

9. Strip-ready email notifications

If you ask LinkedStrips to notify you when a Strip is ready, the email address you provide is used for that transactional notification.

It is not added to a marketing mailing list and does not create a customer account.

Notification information follows the lifecycle of the Strip and is deleted when the Strip is permanently purged.

10. Purchases and payments

LinkedStrips uses Stripe for payment processing and photographer payout functionality.

LinkedStrips receives the transaction information necessary to operate purchases, calculate photographer proceeds, reconcile payments and maintain required records. Sensitive payment and payout information may be collected directly by Stripe rather than by LinkedStrips.

Full Resolution photographs

A paid Full Resolution photograph is available for download for 30 days from the payment time.

Operational customer information associated with the purchase is minimised after 180 days. This includes removal of customer contact and network information that is no longer needed.

A narrower transaction record may be retained for longer where necessary for accounting, tax, transaction evidence or related legal obligations.

Physical prints

If you order a physical print, we use the recipient and delivery information required to produce and deliver the order.

Operational print-fulfilment personal information is minimised 180 days after fulfilment is completed. This includes removal of recipient contact and delivery information and obsolete tracking information.

A narrower commercial record may be retained for longer where required for accounting, tax, transaction evidence or related legal obligations.

11. Reports and moderation

People with access to a Strip may report a photograph or Strip to LinkedStrips.

Reports may contain personal information, particularly if the person submitting the report includes personal information in free text.

Reports are used to investigate the relevant content and enforce appropriate safety, legal and platform rules. Detailed reports are not kept as a permanent complaint archive merely because a report once existed.

12. Account and service security

LinkedStrips processes limited authentication and security information to protect accounts and the service.

Login and password-reset attempt history and associated rate-limit information are normally retained for no more than 24 hours.

Password-reset links are short-lived. Persistent login credentials may remain valid for up to 90 days unless they expire or are revoked earlier.

13. How long we keep information

We do not use one retention period for all personal information. Retention depends on the purpose for which the information is needed.

Key retention periods include:

• ordinary Strip content normally expires after about 30 days and is permanently purged according to the Strip lifecycle, normally about 45 days after publication unless the Strip has been validly extended;
• a paid Full Resolution asset remains available for 30 days from payment;
• Full Resolution operational customer information is minimised after 180 days;
• print fulfilment personal information is minimised 180 days after fulfilment completion;
• most short-lived authentication/security event data is retained for no more than 24 hours;
• necessary commercial and tax records may be retained for longer in accordance with applicable record-keeping requirements.

Data may occasionally need to be retained longer where a documented legal or tax requirement applies. We do not use those longer requirements as a reason to retain unrelated customer personal information.

14. Who we share information with

We use carefully selected service providers where necessary to operate LinkedStrips. Depending on the activity, these include:

• Hetzner — production hosting and infrastructure;
• Stripe — payments, Stripe Connect and photographer payouts;
• Resend — transactional email delivery;
• Prodigi — physical print production and fulfilment;
• Cloudflare — authoritative DNS for the LinkedStrips service. LinkedStrips does not currently route normal application web traffic through Cloudflare's reverse proxy;
• GitHub — source-code backup and technical development infrastructure. Operational customer data is not intentionally stored in the source repository.

We may also disclose information where required by law or where necessary to establish, exercise or defend legal rights.

15. International processing

LinkedStrips deliberately hosts its primary production infrastructure in the European Economic Area. Some service providers may nevertheless process information in the United States or other countries as part of payment, email, fulfilment or supporting services.

Where personal information is transferred internationally, LinkedStrips uses the transfer mechanisms and safeguards applicable to the relevant provider and transfer, such as UK adequacy arrangements or appropriate contractual safeguards.

You can contact us if you would like more information about the safeguards relevant to a particular international transfer.

16. Your data protection rights

Depending on the circumstances and the lawful basis involved, you may have rights including:

• the right to access your personal information;
• the right to have inaccurate information corrected;
• the right to request erasure in applicable circumstances;
• the right to request restriction of processing;
• the right to object to certain processing;
• the right to data portability where applicable;
• the right to withdraw consent where processing is based on consent.

These rights are not all absolute and the rights available can depend on why the information is being processed.

17. Your right to object

Where LinkedStrips relies on legitimate interests, you have the right to object to the processing of your personal information in applicable circumstances.

If you object, we will consider the circumstances, the reason for the processing and your rights and interests. You can contact us at [email protected].

18. Requests concerning photographs

If you believe that you appear in a photograph available through LinkedStrips and you have a privacy concern, you can contact us or use the reporting mechanism available on the relevant Strip where applicable.

We may need enough information to identify the relevant photograph or Strip and to verify the request before taking action.

19. Complaints

If you have concerns about how LinkedStrips has used your personal information, please contact us first at [email protected] so that we can investigate.

You also have the right to complain to the UK Information Commissioner's Office (ICO). Information about making a complaint is available at ico.org.uk.

20. Children

LinkedStrips is an adult service. You must be at least 18 years old to create or use a LinkedStrips photographer account.

LinkedStrips Links, QR cards and other customer access credentials must be provided to an adult. Children are not intended to use LinkedStrips independently as online-service users.

Photographs may nevertheless include children. Photographers must take particular care to ensure that their photography and use of those images is appropriate and lawful in the circumstances, including obtaining any rights, permissions, consents or other lawful basis that may be required.

A child appearing in a photograph is not, merely because of that photograph, treated as a LinkedStrips service user. This does not affect the child's data-protection rights in relation to personal information about them.

21. Changes to this Privacy Notice

We may update this notice when the LinkedStrips service, our processing activities or applicable requirements change.

We will update the date at the top of this page and bring material changes to people's attention where appropriate.

22. Contact

For privacy questions, requests or complaints: [email protected].