Privacy policy

SantasPostcard.com is run by SantasPostcard, based in the United Kingdom. We are the data controller for the personal information you give us. You can contact us by email at hello@santaspostcard.com.

• The photo you upload of your room or your pets.
• Your child's name (or names) and the message you choose for Santa's note.
• The recipient's name and postal address.
• Your email address, so we can send your order confirmation. Joining our mailing list is optional and requires your explicit consent; an unticked box does not subscribe you.
• Payment details, which are handled by our payment provider. We never see or store your full card number.

We use your details only to make your personalised card, print it, post it and send your payment confirmation. Our legal basis is that we need this information to carry out our contract with you.

We never sell your details or use your photo for advertising.

When you sign up on our home page or tick the optional box on the order page, we store your email address, the date and time you joined, where you signed up and the exact wording you agreed to. Our legal basis is your consent.

The mailing list is stored securely by us and is accessible only to the shop owner. It is separate from orders, so deleting old orders and photos does not remove subscriptions. It never includes your child's name or any photos. We do not sell the list or connect it to an email marketing service; no marketing emails are currently sent.

We'll only email about Santa's Postcard. You can unsubscribe anytime by emailing hello@santaspostcard.com, or ask us to delete your subscription permanently. We keep your subscription until you unsubscribe or ask for deletion; unsubscribed entries are excluded from our mailing exports unless explicitly included to manage suppression.

Your photo is used only to make your card. Every image is checked by a real person before printing.

Photos are kept in private storage. The shop owner views them through secure links that expire after a few minutes. Prodigi receives time-limited links to the print files so it can print your card. Anyone holding such a link can use it until it expires; please do not share private links.

We share only what is needed with the companies that help us run the shop. Our printing partner, Prodigi, prints and posts cards from the UK and receives the delivery name and address and the card's print files. OpenAI receives your uploaded photo and editing instructions to create the Santa image. Stripe handles payment, Lovable provides private hosting and transactional email, and we also use the postal carrier Prodigi uses. They may only use your information to provide their service to us.

• Your uploaded photo, generated Santa images and private print files are deleted automatically 30 days after your card is sent to print.
• If an order hasn't been paid for within 7 days, the whole order and its photos are deleted automatically.
• If you start an order but don't finish it, any photo you uploaded is removed by the daily cleanup once they are over a day old.
• Other order records (names, address, email, what was ordered and the price) remain stored for accounting and customer support; deletion of those records is managed by the shop owner, not the photo cleanup.

Our service providers may process information outside the UK. Their own retention periods can differ from our private-storage deletion schedule. Contact us for details about the safeguards and provider retention that apply to your order.

Under UK data protection law you can ask to see the information we hold about you, ask us to correct or delete it, or object to how we use it. Contact us by email at hello@santaspostcard.com and we will reply within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ico.org.uk).

We only use the cookies and browser storage needed for the site to work. We don't use advertising or tracking cookies.