Skip to the content

What we do with your photographs

The readable version, and the one we are held to. It sets out what happens to a photograph you upload, which is the question a privacy notice is usually asked and rarely answers.

Two points before the detail. Nothing physical is ever posted — the print stays in your house and we work from a scan. And everything you upload has a deletion date you can bring forward to this minute.

What we hold

Very little, because there are no accounts on this site. No password exists to be stolen and no profile is assembled.

  • Your email address, which is where the mended photographs go.
  • The photographs you upload and the mends made from them.
  • The order: the pack, the sum paid, the tree you bought in, the damage you tapped and the times.
  • The two-letter country code that arrived with your request. Noted for the day a country breakdown means something; it alters nothing you see or pay.
  • On the free mend only: the address the request came from, and a fingerprint of the photograph. They exist to stop one person helping themselves to a hundred free mends.
  • Your answer to whether the mend came out right, and the reason chosen if you replied to the follow-up.

Our lawful bases

Doing the work and taking payment is performance of our contract with you. Keeping the free mend usable, and keeping our accounts, is our legitimate interest and the law's requirement respectively.

We do not rely on consent for any of it, which means there is no consent banner and nothing to withdraw. Deleting your photographs is a button rather than a request.

Who else handles it

We are a small business and hire our infrastructure. Each of these handles one part, on our instructions:

  • A storage provider keeps the files while the order is open.
  • The mending itself runs at a specialist provider, which receives the photograph for that single step. Some of them sit outside the UK.
  • Stripe collects payment; card details never touch our systems.
  • An email provider carries the handful of messages an order generates.
  • Our host runs the site and the database behind it.

How long it stays

Paid orders: thirty days from completion, after which the uploads and the mends go together.

Free mends: seven days, come back for them or not.

Whenever you like: the page your photographs appear on carries a button that clears our storage at once. It is irreversible, so save anything you want first.

The order record outlives that — your address, the sum, the date — because a business must be able to evidence what it sold. There is no photograph left in it.

What we will not do with it

Nothing about you is sold, rented or shared for anybody else's purposes. There is no advertising network here and no broker.

Your photographs never appear on this site. Everything shown as an example is published with the owner's written permission, and yours will not be among them unless you offer it.

Nothing is assembled out of what you send. It is mended, returned and deleted.

Cookies, and why there is no banner

There is nothing here to consent to. Reading these pages stores nothing on your equipment and reads nothing back off it, so the banner everybody expects would be asking your permission for something that does not happen.

PECR is the rule that matters, and it asks for consent before anything is placed on or taken from your device that is not strictly necessary for what you asked us to do. Since nothing is placed there at all, the question does not arise. Should it ever arise, you will be asked plainly and once, not worn down by a dialogue that reappears.

Visits are counted, and that count is taken from the request itself on our own domain. It leaves no marker behind, so nobody is recognised from one visit to the next and no profile accumulates.

Payment is taken on Stripe's pages, not on ours. Anything set during that step belongs to them and to their notice, and is beyond our reach either way.

The one cookie our software knows about is the staff sign-in that opens the order screen. It is set on our own browsers and never on yours.

Your rights under UK GDPR

Erasure you can exercise yourself, immediately, with the button on your own page. That is the one most people want and it needs no correspondence.

For access to what we hold, rectification, restriction, objection or portability, write in. A person replies, in ordinary English, generally within a day and always within a month.

You may also complain to the Information Commissioner's Office, and you need not raise it with us first — though we would rather you did, since we can usually put it right the same afternoon.

Children

This is sold to adults having family photographs mended. It is not intended for children and we do not knowingly accept their orders.

Changes to this notice

The date below moves whenever the wording does. A change that matters to you — another recipient, a longer retention period — reaches affected customers by email rather than by quiet editing.

If a sentence here is doing more hiding than explaining, tell us and we will rewrite it.

Write to us

MemoryMend is run by Max. Writing to hello@memorymend.app reaches that person, not a queue.

hello@memorymend.app

Last changed 2026-08-23