Privacy PolicyElyon Editing LtdLast updated: 9 June 2026
1. Introduction
1.1 This Privacy Policy explains how Elyon Editing Ltd ("Elyon", "we", "us", "our") collects, uses, shares and protects personal data when you visit our website, create an account, use our image editing and retouching services, or otherwise interact with us, including where we contact you as a prospective customer.
1.2 We are the data controller for the personal data described in this policy. We are a company registered in England and Wales (company number 16851693) with our registered office at 128 City Road, London, United Kingdom, EC1V 2NX.
1.3 We are registered with the Information Commissioner's Office (ICO), the UK's data protection regulator, under registration number [ICO REGISTRATION NUMBER].
1.4 If you have any questions about this policy or how we handle your personal data, contact us at privacy@elyonemail.com.
1.5 This policy applies to personal data for which we are the controller. Where we edit images on behalf of a business customer, that customer is the controller and we act as their processor; that relationship is governed by our Data Processing Agreement at https://www.elyonediting.com/data-processing-agreement, not this policy.
2. The personal data we collect
We may collect and process the following categories of personal data:
Account and identity data — your name, business name, job title, and login credentials.Contact data — email address, telephone number, and postal or business address.Prospect data — business contact details (such as name, business email, company name and website) of photography studios and other businesses we identify as potential customers.Transaction and billing data — details of orders, Credits, Plans, invoices, and records of payments. We do not store full payment card details ourselves; these are handled by our payment provider.Communications data — the content of emails, messages, support requests and other correspondence between us.Usage and technical data — IP address, browser type, device information, pages viewed, and similar information collected automatically when you use our website (see clause 6).Marketing data — your preferences in receiving marketing from us and your communication preferences.
We do not seek to collect special category data (such as health or biometric data) about you as a controller. Where images you submit for editing contain such data about other individuals, that is handled under the Data Processing Agreement referred to in clause 1.5.
3. How we collect your personal data
We collect personal data:
Directly from you — when you create an account, place an order, contact us, or correspond with us.Automatically — when you use our website, through cookies and similar technologies (see clause 6).From third parties and public sources — for prospect data, we may collect business contact details from publicly available sources, business directories, professional networks, and data providers, in order to identify and contact businesses that may benefit from our services.
4. How and why we use your personal data
We only use your personal data where the law allows us to. The lawful bases we rely on under the UK GDPR are: performance of a contract; our legitimate interests; your consent; and compliance with a legal obligation.
To provide the Services — managing your account, processing orders and revisions, and delivering edited images. Lawful basis: contract.To take payment and manage billing — processing Credits, Plans, invoices and payments. Lawful basis: contract; legal obligation (for tax and accounting records).To communicate with you — responding to enquiries, providing support, and sending service-related messages. Lawful basis: contract; legitimate interests (running our business effectively).For marketing to existing and prospective customers — sending information about our services to businesses we believe may be interested, and to existing customers about similar services. Lawful basis: legitimate interests (promoting our business to relevant businesses); consent where required. See clause 5.To improve and secure our website and services — analytics, troubleshooting, and protecting against fraud and misuse. Lawful basis: legitimate interests (keeping our services secure and improving them).To comply with legal obligations — including accounting, tax, and responding to lawful requests. Lawful basis: legal obligation.
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms, and you have the right to object (see clause 11).
5. Marketing communications
5.1 We carry out business-to-business outreach to photography studios and other businesses we believe may benefit from our services. Where the law permits, we rely on our legitimate interests to send such communications to business contacts.
5.2 Every marketing email we send will identify us as the sender and provide a simple way to opt out or unsubscribe.
5.3 You can ask us to stop sending you marketing communications at any time by using the unsubscribe link in any message or by emailing privacy@elyonemail.com. We will action your request promptly. You may still receive service-related (non-marketing) messages relating to any account or order you have with us.
5.4 We do not sell your personal data to third parties.
6. Cookies and similar technologies
6.1 Our website uses cookies and similar technologies to make the site work, to remember your preferences, and to understand how the site is used.
6.2 Non-essential cookies (such as analytics) are only set with your consent, which you can give or withdraw through our cookie banner or browser settings.
6.3 You can control cookies through your browser settings. Blocking some cookies may affect how the website functions.
7. Who we share your personal data with
Service providers and subcontractors who help us run our business and deliver the Services, including cloud hosting and storage providers, our customer relationship management (CRM) and email platform, and editing personnel and subcontractors (including those located outside the United Kingdom).Our payment provider, who processes payments on our behalf.Professional advisers, such as accountants and legal advisers, where necessary.Authorities and third parties where required by law, to enforce our terms, or to protect our rights, property or safety.
We require those who process personal data on our behalf to do so only on our instructions and to keep it secure.
8. International transfers
8.1 Some of our personnel and subcontractors who deliver the Services are located outside the United Kingdom, including in India. This means your personal data may be transferred to, stored in, or accessed from countries that are not covered by a UK adequacy decision.
8.2 Where we transfer personal data outside the UK to such countries, we put appropriate safeguards in place as required by UK data protection law, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate security measures.
8.3 You can request more information about these safeguards by emailing privacy@elyonemail.com.
9. How long we keep your personal data
9.1 We keep personal data only for as long as we need it for the purposes set out in this policy, including to provide the Services, to comply with legal, accounting and tax obligations, and to resolve disputes.
9.2 Account and transaction records are generally retained for the duration of your relationship with us and for a period afterwards as required by law (for example, financial records are typically kept for at least six years).
9.3 Prospect and marketing data is retained only for as long as it remains relevant for our outreach, or until you ask us to stop contacting you, after which we keep the minimum needed to honour your opt-out (for example, your email address on a suppression list).
10. How we protect your personal data
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. These include access controls, secure storage, and confidentiality obligations on our personnel and subcontractors. No method of transmission or storage is completely secure, but we work to protect your data and to respond appropriately to any data security incident.
11. Your rights
11.1 Under UK data protection law, you have the right to:Access the personal data we hold about you;Rectify inaccurate or incomplete data;Erase your data in certain circumstances;Restrict our processing of your data in certain circumstances;Object to processing based on our legitimate interests, and to direct marketing at any time;Data portability — receive certain data in a portable format; andWithdraw consent at any time where we rely on consent.
11.2 To exercise any of these rights, email privacy@elyonemail.com. We will respond within the time limits set by law (usually one month). We will not charge a fee unless your request is clearly unfounded or excessive.
11.3 We may need to verify your identity before acting on a request.
12. How to complain
12.1 If you have a concern about how we handle your personal data, please contact us first at privacy@elyonemail.com so we can try to resolve it. We will acknowledge your complaint and respond as required by law.
12.2 You also have the right to complain to the ICO:
Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 Website: https://www.ico.org.uk
13. Children
Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data about children through our website or marketing.
14. Changes to this policy
We may update this policy from time to time. We will post the updated version on our website and update the "Last updated" date above. Where changes are significant, we will take reasonable steps to bring them to your attention.
15. Contact us
Elyon Editing Ltd Company number: 16851693 Registered office: 128 City Road, London, United Kingdom, EC1V 2NX Email: privacy@elyonemail.com Website: https://www.elyonediting.com
This document is a template and does not constitute legal advice. It should be reviewed by a qualified solicitor before use, particularly the sections on international transfers, marketing, and lawful bases.