Privacy policy
What data we collect, why, who sees it, and how to remove it.
Who we are
MySlavko is operated by Andromia Ltd, a company registered in England and Wales. We are the data controller for personal data you submit through this website.
Contact for data questions: info@myslavko.com
What we collect
- Photos you upload for puzzle production, plus any metadata (EXIF) embedded in them. We strip GPS location from EXIF before storage.
- Order details — name, delivery address, billing address, email, optionally phone.
- Payment information — handled directly by Shopify Payments / your card provider. We do not see or store your full card number.
- Behavioural data — anonymous page-view, click and funnel-step events to improve the configurator. See "Analytics" below.
- Communications — emails you send us and our replies.
Why we collect it (lawful basis)
- Contract — to print and deliver the puzzle you ordered (photos, order details, payment, delivery).
- Legitimate interest — anonymous analytics + fraud prevention + customer support.
- Consent — marketing emails, marketing-cookie targeting, optional personalisation. You can withdraw consent at any time without affecting any order in progress.
Who we share data with
- Shopify — order management, checkout, payments.
- UK print partner — your photo, finished puzzle artwork, name + delivery address only.
- Royal Mail and EU carriers — name + delivery address for fulfilment.
- Klaviyo — email + consent state for transactional and (with consent) marketing email.
- Cloudflare — site delivery + DDoS protection (processes connection metadata).
- Meta and Google — with your consent, hashed contact data via our server-side conversion API for advertising measurement.
We never sell your personal data.
How long we keep it
- Photos — 90 days after order completion, then deleted. We keep a low-resolution archive copy for 12 months in case of reprint requests; you can ask us to delete sooner.
- Order records — 7 years (UK tax retention obligation under the Companies Act).
- Marketing data — until you unsubscribe, then deleted within 30 days.
International transfers
Some of our service providers (Shopify, Klaviyo, Meta, Google, Cloudflare) are based in the United States or transfer data there. These transfers rely on the EU-US Data Privacy Framework and UK extension, or on Standard Contractual Clauses, depending on the provider.
Your rights
Under the UK GDPR and Data Protection Act 2018 you have the right to access, correct, delete, restrict, port, or object to our processing of your personal data. To exercise any of these, email info@myslavko.com. We'll respond within one calendar month.
Complaints
If you're unhappy with how we handle your data you can complain to the UK Information Commissioner's Office: ico.org.uk/make-a-complaint. We'd appreciate the chance to address it first.
Cookies
We use a small number of cookies: essential session + cart cookies (no consent needed), and optional analytics + advertising cookies (consent required, managed through the cookie banner).