Legal

Privacy Policy

Last updated: 21 May 2026

1. Overview

This Privacy Policy explains how Retouch handles personal data when you use our photo and video retouching marketplace. We are the data controller for the information described here. We have written this policy in plain language so you can understand exactly what we collect and why.

We collect the minimum data we need to run the service, we never sell your data, and we never use your uploaded or retouched files to train models or for marketing without your explicit consent.

2. Data we collect

We collect the following categories of data:

  • Account data — your email address, password (stored only as a secure hash), and optional first and last name.
  • Order content — the photos and videos you upload, the retouching options you choose, any brief or notes you write, and the retouched files we deliver back to you.
  • Payment data — the credit packs or subscriptions you buy and a transaction reference. Card numbers are handled directly by our payment provider, Stripe, and never reach our servers.
  • Communication data — messages you send to a retoucher about an order and any support requests.
  • Technical data — IP address, device and browser type, and basic usage and error logs needed to keep the service secure and working.

3. How we use your data

We use your data only for these purposes:

  • To create and manage your account and authenticate you.
  • To process your orders, assign them to a retoucher, and deliver the finished files.
  • To take payment, add credits to your balance, and handle refunds.
  • To provide customer support and respond to your messages.
  • To keep the service secure, prevent fraud and abuse, and fix problems.
  • To meet our legal and accounting obligations.

4. Legal bases for processing

Where data protection law applies, we rely on the following legal bases: performance of our contract with you (to deliver orders you place), your consent (for optional cookies and any marketing), our legitimate interests (to keep the service secure and improve it), and compliance with legal obligations (such as tax record-keeping).

5. Who can see your files and data

Your uploaded files are visible only to the retoucher assigned to your order and to staff who need access to provide support. We use trusted service providers to operate Retouch, and they may process data on our behalf under strict contractual safeguards:

  • Cloud hosting and file storage providers that store your account data and order files.
  • Stripe, which processes payments.
  • Email delivery providers used to send verification and notification emails.

6. How long we keep data

We keep account data for as long as your account is open. Uploaded and delivered order files are retained while the order is active and for a limited period afterwards so you can re-download results and request revisions, then they are deleted. Payment and invoice records are kept for as long as the law requires us to. When you close your account we delete or anonymise your personal data, except where we must keep certain records by law.

7. Security

We protect your data with encryption in transit, access controls, hashed passwords, and isolation of order files. No system is perfectly secure, but we work to keep the risk low and will notify you and the relevant authority if a breach affects your data and the law requires it.

8. International transfers

Your data may be processed in countries other than your own. Where we transfer personal data across borders we use appropriate safeguards, such as standard contractual clauses, so your data keeps an equivalent level of protection.

9. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to processing, withdraw consent, and receive a copy of your data in a portable format. You can exercise most of these rights from your account settings or by contacting us. You also have the right to complain to your local data protection authority.

10. Children's privacy

Retouch is not intended for children under 16, or under the age of digital consent in your country. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes and contact

We may update this Privacy Policy from time to time. If we make a material change we will give reasonable notice. For any privacy question, or to exercise your rights, contact us through the Contact page or by email at privacy@retouching.uk.