Privacy & Data Protection

Pixel on Pixels is the data controller for Regency Vignettes. We operate from the United Kingdom and process personal data under the UK General Data Protection Regulation and the Data Protection Act 2018. Correspondence on this subject may be directed through our Enquiries page.

We process personal data only where a lawful basis exists: the performance of a contract (to complete a commission and dispatch a parcel); legitimate interests (to secure the shop, prevent fraud, and improve the service); consent (where you elect to keep a reminder or a review); and legal obligation (to keep records required by tax and consumer law).

Admission to a patron account is arranged through NextAuth, using Google as the identity provider. When you sign in, Google supplies your name, electronic post (email address), and profile likeness. We do not receive your Google password. These particulars are used solely to recognise you, to protect your archive, and to associate commissions and orders with your person.

All pecuniary transactions are conducted by Stripe, our payment processor. Card numbers, security codes, and full payment credentials are collected and processed by Stripe; they are not stored in our database. Stripe may provide us with a checkout session identifier, payment status, the amount settled, and the billing and delivery names and addresses necessary to fulfil the order. Stripe acts as an independent controller or processor according to its own terms, and may transfer data outside the United Kingdom under appropriate safeguards.

Patron records are stored in MongoDB. The archive may include:

• Account particulars: name, email, profile image, role, loyalty points, and referral code.
• Orders: items commissioned, quantities, Stripe session identifiers, Prodigi order references, and fulfilment status.
• Commissions: recipient names, occasions, generated verses, and associated artwork references, kept in the patron's private archive.
• Optional keepsakes: wishlists, occasion reminders, and reviews you choose to submit.

We retain these records for so long as your account remains open, and thereafter for such period as tax, accounting, or dispute resolution reasonably requires.

When you invite our Composer to draft a sentiment, the prompt you supply — including the occasion, chosen temper, any further particulars, and the name of the intended recipient — is transmitted securely to OpenAI for the sole purpose of generating that verse.

The resulting composition, together with the prompt particulars, is stored as a Commission within your private archive in MongoDB, so that you may revisit, refine, or attach it to a parcel. Such materials are not published, not shared with other patrons, and are not used by Pixel on Pixels to train public models.

OpenAI is engaged as a processor for this generation. We do not grant permission for Composer prompts or recipient names to be used in the training of public models, and we employ the application programming interface on terms that do not authorise such training.

To print and send a parcel we must share with Prodigi, our print-on-demand press, the delivery name and address, the artwork, and any personalised inscription required for the press. Prodigi processes this information only to manufacture and dispatch the goods.

Under UK GDPR you may request access to your personal data; rectification of inaccuracies; erasure where the law permits; restriction of processing; portability of data you have provided; and objection to processing based on legitimate interests. You may also lodge a complaint with the Information Commissioner's Office at ico.org.uk. These rights are not absolute, and we may retain such records as the law still requires.

The shop uses essential session cookies so that NextAuth may keep you signed in and so that your parcel may be assembled. These cookies are necessary to the service and are not employed for advertising. The full protocol, including PECR categories and your choices, is set out in our Cookie Protocol.

Should this declaration be amended, the revised text shall appear upon this page with an updated effective date. Continued use of the shop after such publication constitutes notice of the change.