Privacy policy

Last updated 27 September 2026

This policy explains what we do with your information when you order from us, when we ship you a collection box and return your photos, and when we deliver your scans through your private gallery on gallery.photoscans.ie.

Who we are

Photo Scans Ireland is a trading name of The Giotii Company Limited, registered in Ireland, company number 689064, registered office Callan, Drumkeen, Co. Donegal, F93 T867, Ireland. We are responsible for your information (the "controller"). For anything about your data, email team@photoscans.ie.

What we collect and why

  • Your order details: name, email, phone number, billing and delivery address, and what you ordered. We use these to take your order, send you the collection box and a return label, bring your originals home, and email you about your order. Legal basis: performing our contract with you.
  • Payment: card payments are handled by Shopify and its payment providers. We see that you paid and the last four digits of the card, never the full card number. Legal basis: performing our contract with you.
  • Your scanned photos: to deliver them to you. We never publish them or share them with anyone. Your photos may show other people, such as family and friends; we handle them with the same care and only to deliver your order. Legal basis: performing our contract with you.
  • A record of gallery visits and downloads: date and time, IP address, approximate town and country, and browser and device type. We use it to keep your gallery secure, spot someone else using your link, confirm your photos were delivered, and help if a download fails. Legal basis: our legitimate interest in protecting your photos and supporting you.
  • Emails we send you, and whether they were delivered or bounced, so we know you actually received your gallery link and code. Legal basis: performing our contract with you.
  • Messages you send us, so we can answer them. Legal basis: our legitimate interest in helping you.
  • Visits to our shop: Shopify records basic information about your device and how you use the shop, such as pages viewed and items added to your cart, so the shop and checkout work and so we can see how the shop is used. Legal basis: our legitimate interest in running the shop.
  • Accounting records: we keep records of each sale because tax law requires it. Legal basis: legal obligation.

We don't send marketing emails, we don't use advertising or tracking pixels, and we don't sell your information to anyone.

Cookies

The shop uses cookies that Shopify needs to run your cart and checkout, and to record basic shop statistics. You can manage these through the cookie banner on the shop. When you enter your code, your gallery sets one cookie so you stay signed in to it; it's strictly necessary, holds no personal details, and expires when the gallery closes. The gallery uses no other cookies and no analytics.

Who else handles it

We use a small number of service providers, each under a contract that limits them to working for us:

  • Shopify runs our shop and checkout and processes payments.
  • UPS carries your collection box and your originals, so it gets your name, address and phone number.
  • Cloudflare hosts your gallery. Your photos are stored in the EU.
  • Resend sends our emails from its EU region.
  • Migadu and Gorgias run our email inbox, where your messages to us arrive.

For some features, such as Shop Pay, Shopify uses your information for its own purposes. Shopify's privacy policy covers that, and you can exercise your rights over it with Shopify directly.

Some of these companies are based outside the EU, so your information may be accessed from outside the EU. Where that happens, it's protected by the EU–US Data Privacy Framework, the European Commission's standard contractual clauses or an adequacy decision. We may also share information where the law requires it, for example with Revenue or the Gardaí.

How long we keep it

  • Your photos: your gallery closes 31 days after we send it. We keep the photos for a short time after that in case you ask us to reopen it, then delete them, normally about two months after delivery. You can ask us to delete them sooner at any time.
  • The visit and download record and the record of emails sent are deleted along with your photos.
  • Order, payment and shipping details are kept for six years, as Irish tax law requires.
  • Messages you send us are kept alongside your order records.

Please save your photos somewhere safe as soon as you download them: once they're deleted, we can't recover them.

Your rights

You can ask to see the information we hold about you, have it corrected or deleted, ask us to restrict or stop using it, object to uses based on our legitimate interests (such as the gallery visit record), or receive a copy to take elsewhere. Email team@photoscans.ie and we'll reply within one month. We may need to confirm who you are first.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Data Protection Commission at dataprotection.ie.

Children

Our services are for adults. Photos of children that you send us to scan are handled in the same way as all your photos: only to deliver your order.

Changes

If we change how we use your information, we'll update this page and the date at the top.