Privacy Notice (UK) — myaicards

Controller: MYAICARDS LTD (trading as myaicards), 3 Castle Street, Wingrave, Aylesbury, England, HP22 4PT.

Contact: [email protected] for privacy queries and rights requests.

Scope: This notice applies to our website/app and services for individuals in the UK.

Children: Our services are not intended for under‑13s. Accounts may be created from 13+ with parental consent; purchases are for 18+ only.

We collect and process the following categories of personal data:

Identity & contact — email; name (optional); delivery/recipient details; phone for delivery updates.

Account — login credentials (passwords stored securely); verification status.

Content & personalisation — prompts you enter, images you upload, text placed on a card, and associated choices (e.g., fonts/layout).

Orders & transactions — products ordered, prices, taxes, order status, fulfilment and tracking updates.

Payment (limited) — we do not store card numbers. Payments are handled by our provider (Stripe); we receive payment status and identifiers to reconcile orders and issue refunds.

Usage & technical — basic device, IP address, and interaction data generated as you use the site/app; cookies and similar technologies are explained in our Cookie Policy.

We may create aggregated statistics (which are not personal data) to understand service performance.

Directly from you — when you register, generate images, personalise a card, check out, or contact support.

Automatically — via the site/app (e.g., security logging, service analytics subject to your cookie choices).

From partners — payment outcome from Stripe and delivery/tracking updates from fulfilment partners/carriers.

Please avoid including sensitive personal data in prompts, uploads or card messages.

We share data only as needed to run myaicards:

Payments: Stripe — processes your card details; we receive payment status/identifiers.

AI provider: OpenAI — we send prompts/uploads to generate images you request.

Printing & delivery: Fulfilment partners and carriers — to produce and deliver your card (recipient name/address and, where relevant, contact for delivery updates).

Cloud/IT & support services: Hosting, storage, operational support, and secure email/SMS communications.

Advisers/authorities: Where required for legal claims, audits, or lawful requests.

We do not sell personal data.

When you choose to generate an image, we send your prompt (and any uploads you include) to our AI provider to create the image. You can edit, regenerate or decide not to use an output before ordering.

Some service providers process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards (e.g., standard contractual clauses with the UK Addendum or adequacy regulations). You can request more information about these safeguards.

We keep personal data only for as long as needed for the purposes above and to meet legal/accounting requirements. In general:

Account & order records — kept for the life of your account and for statutory retention periods (e.g., tax).

Content used to fulfil an order — kept for a reasonable period to support reprints, customer service and dispute resolution.

Analytics/marketing data — kept in line with your choices and the purposes stated.

We apply retention rules and securely delete or anonymise data when no longer needed.

We use a combination of technical and organisational measures to keep personal data secure and limit access to people who need it for their work. We also maintain procedures for handling suspected incidents and will notify you and regulators where legally required.

Marketing: We send marketing only if you opt in (or as permitted for similar products after a purchase). You can unsubscribe at any time via the link in our emails or your account settings.

Cookies: See our Cookie Policy for how we use cookies and how to change your choices. Core functions run with strictly necessary cookies; analytics runs only if you consent.

You can access your data, correct inaccuracies, erase data (in certain cases), restrict or object to processing, port data you provided (where applicable), and withdraw consent for marketing/analytics at any time. You can complain to the Information Commissioner's Office (ICO). We may need to verify your identity and the scope of your request; we aim to respond within one month.

We will update this notice when our processing changes materially and indicate the effective date above. We may also notify you in‑product or by email where appropriate.

Questions or rights requests: [email protected]

Postal: MYAICARDS LTD, 3 Castle Street, Wingrave, Aylesbury, England, HP22 4PT.