Privacy Policy

1. Scope and who is responsible

This policy applies to the Little Frames Studio website, customer accounts, orders, support, previews, final digital files and reviews. Little Frames Studio decides why and how customer information is used for these services.

The service is operated from India and may be offered to customers in other countries. Local mandatory privacy rights continue to apply where the law gives them to you.

2. Adults, children and authority to upload

The service is intended for adults aged 18 or older. A child must not create an account or submit information directly. When you upload a child's photograph, you confirm that you are the parent, legal guardian or another adult authorised to provide the image and request the edit.

Baby name and date of birth are optional customisation details. Please provide only what is needed for the requested design. Do not upload medical records, identity documents, school records or unrelated family information.

3. Information we collect

• Account and contact data, such as name, phone number, country code, language and, when introduced, verified email address.
• Order data, including selected theme, package, instructions, optional baby name or date of birth, uploaded source photos, previews and final files.
• Payment data, such as amount, status, transaction reference and any payment proof you submit. Card numbers and security codes are handled by the payment provider, not stored by us.
• Support and review data, including messages, revision requests, ratings and photos voluntarily submitted with a review.
• Security data, including session identifiers, device identifier, IP address, timestamps, rate-limit records and technical error logs.

4. Why we use information

We use information to verify accounts, assess whether a photo is usable, produce the requested edit, provide a protected preview, collect and reconcile payment, deliver final files, answer support requests, prevent abuse and meet accounting or legal obligations.

Depending on the location and activity, processing may be necessary to perform the customer contract, comply with law, protect legitimate security and service interests, or act on consent. Portfolio, advertising and promotional use requires separate, specific permission and is not a condition of ordering.

5. Service providers and disclosure

We may share only the information needed with hosting, database, communication, payment and photo-editing service providers acting for the order. We may also disclose information when required by law, to protect a person, or to investigate fraud or a security incident.

We do not sell personal information. We do not give customer photos to data brokers or use them for unrelated advertising. Providers must be selected and configured for appropriate confidentiality, security, retention and deletion.

6. Photo editing and AI-assisted tools

An order may use design software or AI-assisted editing under human review. We do not use customer order photos to build or train a Little Frames Studio model. We do not authorise a provider to use an order photo for its independent advertising or model training.

Provider terms and account settings can differ. A tool must not receive customer photos unless its applicable business terms and settings have been reviewed for the intended use. See the Photo and AI Policy for quality and transparency commitments.

7. Retention and deletion

Protected preview links expire after 24 hours and the protected preview copies are scheduled for deletion. Link expiry does not itself delete the original upload, final file, transaction record, third-party working copy or backup.

Source photos, working files and final files are kept only while reasonably needed for editing, delivery, support, dispute handling and recovery. Accounting, fraud-prevention and transaction records may be retained longer when required. We will publish a fixed source/final-file schedule before international launch and will not describe deletion as automatic unless it has been technically verified.

You may request deletion through the verified support channel shown on the website. We may ask you to verify account or order ownership. We will explain any record that must be retained and will remove unnecessary child images as a priority. Backup deletion can follow the normal secure rotation cycle.

8. International processing

The service is operated and hosted for an Indian business. Information from international customers may therefore be processed in India and in countries where approved service providers operate. We assess applicable transfer requirements and use contractual and technical safeguards appropriate to the service.

9. Your choices and privacy rights

• Ask for access to or correction of account and order information.
• Request deletion of information that is no longer required.
• Withdraw optional portfolio or marketing permission without affecting the completed order.
• Object to or request restriction of processing where applicable.
• Ask for an explanation of providers, retention or an automated decision that materially affects you.
• Complain to the appropriate privacy authority where your law provides that right.

10. Cookies, storage and security

The site currently uses essential session cookies and local device or language preferences. It does not intentionally set advertising cookies. If non-essential analytics or advertising technology is introduced, this policy and any required consent controls will be updated before activation.

Security measures include HTTPS, restricted server sessions, rate limits, validated image uploads, private media access checks, expiring preview links, security headers and limited administrative access. No internet service can promise absolute security; see the Security page for reporting instructions.

11. Contact and policy changes

For a privacy request, use the account-protected Help and Support inbox displayed on this website and include only the order ID needed to locate the request. Do not send identity documents unless support explains why verification is necessary.

Material policy changes will be dated and displayed on this page. A change does not remove rights already provided by law or permission choices already recorded.