Last updated: 15 September 2026
1. Who we are
Photofolio.co.uk is operated by Photofolio Ltd (“Photofolio”, “we”, “us”). We are the data controller for the personal data described in this policy. You can contact us about privacy at support@photofolio.co.uk.
2. What we collect
Account details. When you create an account we store your name, email address and, if you provide it, a company name for your invoices. Your password is stored only as a secure hash.
Orders and downloads. We keep a record of the credits, subscriptions and images you buy, the licence granted for each image and when the file was downloaded. We need this to deliver your files and to prove your licence later.
Payments. Card and PayPal payments are processed by PayPal. We never see or store your full card number; we receive a transaction reference and payment status only.
Contributors. If you sell your work through Photofolio we also hold the details you give us to pay you (such as your PayPal address or bank details), your submitted images and their metadata, and any model or property releases you upload.
Technical data. Like most websites we log IP addresses, browser type and the pages you visit, and we use cookies as described below.
3. Why we use it
We use your data to run your account and deliver what you buy (performance of a contract); to keep licence and tax records (legal obligation); to keep the site secure, prevent fraud and improve the service (our legitimate interests); and, only if you opt in, to send you news and offers by email (consent, which you can withdraw at any time using the link in every email).
4. Who we share it with
We share data only with the suppliers we need to run the service: our hosting provider (UK data centre), PayPal for payments, Google for reCAPTCHA spam protection and anonymised site analytics, and our email delivery provider for order and account emails. Where a licence needs to be verified, we may confirm to the image’s photographer or agency that a licence exists, without sharing your contact details. We do not sell personal data.
5. Cookies
We use strictly necessary cookies to keep you signed in and remember your basket, and analytics cookies to understand how the site is used. Google reCAPTCHA sets its own cookies to tell people from bots. You can block cookies in your browser settings, though the site may not work fully without the necessary ones.
6. How long we keep it
Order, licence and invoice records are kept for seven years to meet UK tax rules and to evidence your licence. Account details are kept while your account is open and deleted within 90 days of you closing it, except where we must retain records by law. Server logs are kept for up to 30 days.
7. Your rights
Under UK GDPR you can ask us for a copy of your data, ask us to correct or delete it, object to or restrict certain processing, and ask for your data in a portable format. Email support@photofolio.co.uk and we will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.
8. International transfers
Your data is stored in the UK. Some of our suppliers (PayPal, Google) may process data outside the UK; where they do, transfers are covered by the UK’s adequacy regulations or standard contractual clauses.
9. Changes
We will post any changes to this policy on this page and update the date at the top. Significant changes will also be emailed to account holders.