Privacy Notice

Who is responsible

Paper Lantern, a FillFold solution, USA (the controller). Contact: hello@paperlanterncards.com. Our representatives in the European Union and the United Kingdom: to be confirmed.

If you received a card

• What we hold: your first name and email address, given to us by the person who sent you the card.
• Why: only to deliver their card to you. Never for marketing.
• How long: your email address is deleted as soon as the card’s email has left us (if it cannot be delivered, after 3 days of tries). Your name stays on the card itself, with the sender’s message, and the card can be opened for three months after delivery (a card scheduled for later: three months after the day it is delivered); then it is put away and deleted, with its opening date. The sender can delete it sooner. These periods are still to be confirmed by our solicitor.
• Opening the card: we only record whether the card was opened, and when, on our own server. No tracking pixel, no IP address kept, no device fingerprint.
• Never receive cards again: if you use this link, we keep a one-way scrambled fingerprint (a hash) of your address so that no one can send you a card again. Each card also keeps this fingerprint, so that the link works from the card page.
• Your right to object: you can object at any time, using that link or by writing to us.

If you send a card

• What we hold: your name and email, the card you chose, your message, the date it should arrive, and your purchases.
• Why: to deliver your card, take payment, send you confirmations, and meet our legal and tax obligations.
• How long: your email address is kept until your card leaves (or is cancelled), then deleted from it. Your card can be opened for three months after delivery, then it is put away and your message deleted; and you can delete it sooner with the link in your confirmation. The boxes you tick (age, right to cancel) are kept in a consent log for 3 years. Purchase and tax records are kept as long as the law requires. These periods are still to be confirmed by our solicitor.
• Replies: when we email your card, we give your email address as the reply address, so that a reply from the person reaches you.
• Marketing: only if you agree, with a one-click unsubscribe in every message.

If you order a card made for you

• What we hold: your email address, your description of the card, the changes you ask for, and the photos you send (animals, places or buildings only, never people). Everything is encrypted. We also note your time zone, as your browser gives it (for example “America/New_York”), only to show you due dates in your own time; it is deleted with your order.
• Why: to paint and deliver the card you ordered (the contract), to write to you about it, and to keep a record of what you agreed to.
• Photos: we remove their location and camera details (EXIF, GPS) as they arrive, keep them encrypted, and only the painter can see them. They are used with an AI image tool on a paid account whose terms say it does not use what we send to improve its products. We delete your photos as soon as your card is finished, or when your order is cancelled or refused. They are never published and never shown to the people you send your card to.
• How long: your description, your changes, your email address and the still picture are kept with your card for the 12 months during which you can send it, then deleted. The painting and its animation are kept a little longer (about three months more), so that the last cards you sent can still be opened, then deleted. A cancelled or refused order: its description and photos are deleted at once. These periods are still to be confirmed by our solicitor.
• Your account: if you sign in with the same email address, your orders appear in your account.

If you report a card

We keep your report (encrypted) and, if you give it, your email address, to acknowledge the report and tell you our decision. We forget your address once we have decided, and delete the report 12 months after the decision.

Who we share data with

Only the providers we need to run the service: our hosting provider, our network and email provider, our payment processor and, for cards made for you only, our AI image provider (paid service). Transfers outside the UK and the European Union and the safeguards used: to be confirmed.

Cookies and statistics

The card pages carry no adverts, no third-party scripts and no third-party trackers. Any audience measurement on the rest of the site will be without cookies (to be confirmed).

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability. Write to hello@paperlanterncards.com. You may also complain to your data protection authority (the ICO in the UK, the Data Protection Commission in Ireland) or, in the UK, to us first.