Privacy & your photo

Last updated 13 November 2026

Your photo is personal data, and often someone else's too. Here is exactly what happens to it.

What we collect

• The photo you upload, and the portrait drawn from it.
• If you order: your name, email, delivery address and the order details. Card details go to Stripe; we never see them.
• Basic technical data (IP address) used only to limit abuse of the upload form.

How your photo is used

• It is sent to OpenAI's image service to draw the portrait, under their API terms (they don't use API inputs to train their models). It isn't shown to anyone else, and the owner only looks at the finished portrait before it prints.
• The portrait is sent to our UK print partner, Prodigi, to make your print.
• We don't use face recognition and we don't build profiles.

How long we keep it

• If you don't order, your photo and portrait are deleted within 24 hours.
• If you order, your photo is deleted as soon as the portrait is final. The portrait is kept for 30 days after dispatch in case a reprint is needed, then deleted.
• Order records (not images) are kept for 6 years for tax and accounting.

Cookies

We set one essential session cookie so the site works. No analytics or advertising cookies.

Your rights

You can ask us what we hold, ask us to delete it, or complain to the ICO. Email [email protected].

Controller: Alex Bassett trading as Mememugs, 68-76 C/O Does Liverpool, The Tapestry, Liverpool, England, L3 8HL.