Privacy Policy
How we handle the photograph you upload, your order details, analytics, and how to ask us to erase your data.
Last updated August 2026 (draft)
Draft for review — not yet final legal advice
This text describes how Piecemeal (piecemealpuzzles.com, trading as Puzzlvent) works today. It is not a substitute for advice from a qualified lawyer, and some commercial details (company number, registered address, exact retention windows) still need your formal confirmation. It is published so customers can read how we handle photos and orders while that review happens.
Your photograph
When you upload a photo we store three versions: the original (print master), a smaller play asset for the browser puzzle, and a print asset prepared for manufacturing. We strip EXIF metadata on upload, including GPS where present.
We do not sell, license, publish, or use your photograph to train machine-learning models. If you place a print order, the print asset is sent only to our print and fulfilment partner so they can make and post the puzzle. Nobody else receives your images for marketing or advertising.
Retention: the software does not yet auto-delete unused uploads on a fixed schedule. Your photo remains until you ask us to erase it (or staff process an erasure request). We will introduce a defined retention period as the product matures; until then, contact us if you want a photo removed.
Other data we collect
Orders: email, delivery name and postal address, line items, amounts, dates, and payment references. Card numbers never touch our servers — payment is handled by Stripe.
Customer record: email, optional display name, marketing opt-in status, and order-derived totals.
Analytics: first-party events (pages and funnel stages) and a session identifier in your browser so we can tell visits apart. Events may link to an account if you have one. We may store first-touch attribution (referrer or campaign).
Play and co-op rooms: puzzle progress; in shared rooms, the display name you choose. Rooms expire automatically.
Support: messages or notes about your order.
Why we hold it, and who sees it
Photographs, orders and addresses: contract — we cannot make or ship a puzzle without them. Accounting records after fulfilment: legal obligation (we typically keep tax/accounting records for several years). Marketing email: consent only. Analytics: legitimate interests in understanding the product, subject to cookie preferences where required.
Processors we use: Stripe (payment), our print/fulfilment partner (name, address, print asset for ordered jobs), cloud object storage for images, and an email provider for messages you requested. We do not sell personal data or share it for third-party advertising.
Marketing: only if you opt in. Abandoned-cart and unfinished-play reminders send at most one of each per basket or puzzle, and every message includes an unsubscribe link that works without logging in.
Your rights and how to contact us
You can ask for a copy of your data, correction, deletion, restriction, objection, or portability. Email privacy@piecemealpuzzles.com (or support@piecemealpuzzles.com).
What erasure does in our systems: all three image versions are deleted from storage; identity fields are stripped from orders; order totals/dates/items may remain as anonymised accounting records; account notes, support tickets and marketing messages linked to you are removed; aggregate statistics keep counts without identifying you.
You may complain to your data protection authority (in the UK, the ICO). Children: this service is not directed at children under 16.
Security: uploads are type- and size-checked; secrets live in environment configuration; staff tools require a staff account.