GAO Group Ltd ("we", "us") is the data controller for personal data processed through typeart.co.uk, which is a trading name of GAO Group Ltd. Contact: hello@typeart.co.uk · 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE.

What we collect

• Your photograph and words — the artwork you upload or type to compose your portrait.
• Order details — name, email, delivery address, optional phone number, what you bought and paid.
• Technical data — IP address and browser data in server logs, used only to run and secure the site.

We never see your card details; payment is processed entirely by Stripe.

Why we process it (lawful bases)

• Contract (UK GDPR Art. 6(1)(b)) — to render your proofs, make and deliver your order, and email you about it.
• Legal obligation (Art. 6(1)(c)) — retaining financial records for tax and accounting.
• Legitimate interests (Art. 6(1)(f)) — site security, fraud prevention, and improving the service.
• Consent (Art. 6(1)(a)) — marketing emails, only if you tick the box; withdrawable at any time by replying "unsubscribe".

Who we share it with

• Stripe — payment processing.
• Resend — sending transactional email.
• Parcels2Go and the delivering courier — name, address and contact details to deliver your parcel.
• Instapods — our hosting provider, where the site's servers run.

We never sell personal data. Where processors handle data outside the UK we rely on adequacy regulations or appropriate safeguards.

How long we keep it

• Photographs, words and engraving files: automatically deleted 90 days after dispatch of the related order.
• Unpaid design drafts: deleted 7 days after creation.
• Order and financial records: retained for 7 years as required for UK tax purposes.
• We will erase artwork sooner on request — email us.

Your rights

You have the right to access your data, have it corrected or erased, restrict or object to processing, and data portability. Email hello@typeart.co.uk and we will respond within one month. You can complain to the ICO at ico.org.uk or on 0303 123 1113.

Security

Your uploads are stored privately and served only through authenticated links to you and to production staff. Connections are encrypted in transit. No method is perfectly secure; if a breach risks your rights we will tell you and the ICO as the law requires.