PICTOIREL

Privacy Policy

Last updated: 22^nd May 2026

 

This Privacy Policy explains how we collect, use, store, disclose, protect and delete personal information when you visit our website, place an order, upload photographs, communicate with us, or otherwise use Pictoirel’s products and services.

Because Pictoirel creates personalised photobooks using customer-uploaded images, the photographs you upload may contain personal data relating to you and other people appearing in the images. We therefore treat customer-uploaded photographs and generated book files as confidential order content and apply additional handling restrictions to them.

This Policy is intended to align with applicable UAE privacy and consumer protection requirements, including the UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data, the UAE Consumer Protection Law and its executive regulations, and applicable electronic transaction requirements, to the extent they apply to our services.

1. Who we are

Pictoirel is an online personalised photobook brand operated by AymSecure Consulting under its licensed e-commerce activity. Pictoirel is not a separate legal entity unless and until a separate legal structure is created and published on the website.

Legal operator: AymSecure Consulting.

Licence jurisdiction: Ajman NuVentures Centre Free Zone, United Arab Emirates.

Trade licence number: 262484124888

Website: pictoirel.com

2. Scope of this Policy

This Policy applies to personal information collected through our website, checkout process, image upload process, book preview tool, customer support channels, order processing workflow, marketing channels, delivery process and related services.

This Policy applies to customers, website visitors, recipients of our communications, and individuals whose images or information are uploaded by a customer as part of a photobook order.

3. What personal information we collect

We may collect the following categories of personal information depending on how you use our services:

·        Identity and contact details: name, email address, phone number, billing address, shipping address and customer support details.

·        Order details: selected product, book size, quantity, order number, delivery details, payment confirmation, fulfilment status and customer support history.

·        Uploaded content: photographs, image files, captions, titles, dates, names, messages, book preview data, generated book files and print-ready PDF files created for your order.

·        Website and technical data: IP address, device information, browser type, pages visited, interactions with the website, cookie identifiers and similar usage data.

·        Payment data: payment processing is normally handled by our payment service provider. We do not intend to store full payment card details on our own systems. We may receive transaction confirmations, payment status, billing details and limited payment references necessary to process the order.

·        Communications: messages, complaints, refund/reprint requests, photos of damaged items, emails, support tickets and any information you voluntarily provide to us.

4. Customer responsibility for uploaded photographs

You are responsible for ensuring that you have the right to upload and use the photographs and other content submitted to Pictoirel.

By uploading photographs, you confirm that you either own the images or have permission from the relevant rights holders and individuals appearing in the images to use them for the purpose of creating your photobook.

If the photographs include children, family members, friends, guests, private events, sensitive personal information or any person who may reasonably expect privacy, you are responsible for ensuring that the upload and use of those photographs is appropriate and authorised.

You must not upload unlawful, abusive, exploitative, defamatory, infringing, obscene, discriminatory or otherwise prohibited content. We may refuse, cancel or pause an order if we reasonably believe uploaded content creates legal, safety, privacy, intellectual property or operational risk.

5. How we use personal information

We use personal information only for legitimate and necessary business purposes connected to Pictoirel’s services, including:

Creating your customer account, processing your order and managing checkout.

Allowing you to upload photographs and preview your photobook before ordering or production.

Automatically generating the book layout and print-ready PDF for overview, review and printing.

Communicating with you about your order, delivery, support requests, damaged books, incorrect orders, refunds or reprints.

Sending the necessary print-ready file and order instructions to our printing partner for production.

Arranging packaging, fulfilment, delivery and proof of delivery through logistics or fulfilment partners.

Improving our website, customer experience, fraud prevention, security, analytics and internal operations.

Complying with legal, tax, accounting, consumer protection, regulatory, dispute resolution or enforcement obligations.

Sending marketing communications where permitted by law and where you have not opted out.

6. Legal basis for processing

Where applicable, we process personal information on one or more of the following bases:

·        Contract necessity: to provide the personalised photobook product and related services you request.

·        Consent: where you upload photographs, subscribe to marketing, accept cookies where required, or otherwise provide permission for a specific use.

·        Legal obligation: where we must retain or process information for accounting, tax, consumer protection, regulatory or dispute purposes.

·        Legitimate business interests: to operate and secure our website, prevent fraud, handle complaints, improve services and protect our legal rights, provided those interests are not overridden by your rights under applicable law.

7. Photograph and print-file retention/deletion

Customer-uploaded photographs and generated photobook files are used only for creating, reviewing, printing and fulfilling the relevant order.

Once the order has been fulfilled and the customer has received the book, we will delete the customer-uploaded photographs and generated production files from our active systems within a reasonable operational period, unless we need to retain them temporarily for an active support request, reprint, delivery issue, dispute, fraud concern, legal obligation or regulatory requirement.

As a practical control, our intended standard retention period for uploaded photographs and generated print files is until delivery is confirmed and the support/reprint window has reasonably passed, after which such files will be deleted or permanently removed from active production storage. We aim to complete this deletion no later than 30 calendar days after confirmed delivery, unless a specific issue remains open or longer retention is legally required.

We may retain non-photo order records, invoices, transaction references, delivery records, customer correspondence and limited support records for longer periods where needed for accounting, tax, consumer protection, legal, regulatory, fraud prevention or dispute resolution purposes.

Backups and system logs may retain copies for a limited technical backup cycle before automatic deletion or overwriting. During that period, access remains restricted and the data is not used for new purposes.

·        We do not use customer-uploaded photographs for public marketing, social media, portfolio posts, training datasets, AI model training or sample books unless you separately give us clear permission.

8. Disclosure to service providers

We may share limited personal information with trusted third parties only where necessary to operate Pictoirel and fulfil orders. These may include:

·        Website hosting, e-commerce platform, upload tool, cloud storage and technical service providers.

·        Payment processors and fraud prevention providers.

·        Printing partners who receive the print-ready PDF and order instructions required to produce the book.

·        Packaging, fulfilment, courier and delivery partners.

·        Customer support, analytics, email, SMS, advertising and marketing technology providers.

·        Professional advisers, accountants, auditors, insurers, regulators, courts or authorities where legally required or necessary to protect our rights.

We require service providers to handle personal information and customer content only for the purposes we instruct and to apply appropriate confidentiality, security and deletion controls. Where appropriate, we will request printing and fulfilment partners to delete or return production files after completion of the relevant order.

9. International storage and transfers

Some of our technology providers, cloud platforms, payment processors, e-commerce tools, analytics providers, support tools or marketing systems may process or store personal information outside the UAE.

Where we transfer or allow access to personal information outside the UAE, we will take reasonable steps to ensure that the transfer is supported by appropriate contractual, technical and organisational safeguards, and that the recipient protects the information in line with applicable UAE data protection requirements.

10. Security measures

We take reasonable technical and organisational measures to protect personal information and customer-uploaded photographs from unauthorised access, loss, misuse, disclosure, alteration or destruction. These measures may include access restrictions, password protection, encryption where appropriate, secure cloud storage, role-based access, limited staff/vendor access, order-based file handling and deletion procedures.

No website, transmission method, cloud system or storage method can be guaranteed as completely secure. You should avoid uploading content that you are not comfortable submitting for the purpose of producing a personalised photobook.

11. Cookies, analytics and online advertising

Our website may use cookies, pixels, tags and similar technologies to operate the website, remember preferences, support checkout, analyse website performance, measure advertisements and improve customer experience.

You may be able to control cookies through your browser settings or cookie banner, where available. Blocking certain cookies may affect website functionality, upload tools, checkout or preview features.

Advertising partners may receive limited online identifiers or usage data to help us measure or show advertisements. We do not give advertising partners access to your uploaded photographs for their own marketing use.

12. Marketing communications

We may send service-related communications about your order even if you opt out of marketing.

We may send promotional emails, SMS, WhatsApp or other marketing communications where permitted by law and in line with your preferences. You may unsubscribe or opt out using the method provided in the communication or by contacting us.

13. Your rights

Subject to applicable law and verification of your identity, you may have rights to request access to your personal information, correction of inaccurate information, deletion of certain information, restriction or stopping of certain processing, withdrawal of consent where processing is based on consent, information about processing activities, and portability where applicable.

These rights are not absolute. We may refuse, limit or delay a request where permitted by law, including where information is required for order fulfilment, accounting, tax, legal claims, fraud prevention, regulatory compliance, dispute resolution or the rights of others.

To exercise your rights, contact us at [Insert Support Email] with your name, order number if applicable, and details of your request. We may ask for information to verify your identity before responding.

14. Children and minors

Our website and services are intended for use by adults or by users who have permission from a parent or guardian. We do not knowingly collect personal information directly from children for account creation or ordering without appropriate consent.

Customers may upload family photographs or photographs containing children for the purpose of creating a photobook. The customer is responsible for ensuring that they have the appropriate authority, parental permission or family consent to upload and use such photographs.

15. User reviews, testimonials and social media

If you submit a review, testimonial, social media tag, comment or other public content, that content may be visible to others depending on the platform and your privacy settings.

We will not publish your private photobook pages or uploaded photographs for marketing without your separate permission. If you voluntarily tag us or publicly share your own images or book photos, we may interact with that content in accordance with the relevant platform rules, but we will seek permission before using private customer book content as official Pictoirel marketing material.

16. Incorrect delivery or privacy incident handling

Because photobooks may contain private photographs, we treat incorrect delivery or unauthorised disclosure as a serious issue. If you receive an order that does not belong to you, you must not copy, publish, share, scan, upload, distribute or otherwise use the contents. Please contact us immediately so we can arrange recovery, disposal or other appropriate steps.

If we become aware of a data incident that may affect the confidentiality, privacy or security of personal information, we will assess the incident and take appropriate steps in accordance with applicable law, which may include containment, investigation, customer communication, vendor coordination and regulatory notification where legally required.

17. Data minimisation and risk control commitments

To reduce privacy risk, Pictoirel follows these operating principles:

·        We collect only the information needed to provide the website, process orders, generate books, print, deliver, support customers and meet legal obligations.

·        We limit access to uploaded photographs and print files to personnel and vendors who need access for order fulfilment or support.

·        We do not sell uploaded photographs or use them for unrelated purposes.

·        We delete uploaded photographs and generated production files after fulfilment and receipt confirmation, subject to the limited exceptions stated in this Policy.

·        We aim to use vendors that can support appropriate confidentiality, security and deletion expectations.

·        We maintain internal records and procedures to support handling, deletion and customer request management.

18. Third-party websites and platforms

Our website may link to third-party websites, social media pages, payment platforms, courier tracking pages or other external services. Their privacy practices are governed by their own policies. We are not responsible for third-party websites that we do not control.

19. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our services, operations, technology, legal requirements or risk controls. The updated version will be posted on our website with a revised “Last updated” date. Your continued use of the website or services after an update means you accept the updated Policy, to the extent permitted by law.

Operational Retention Summary