Privacy Policy

• Account and contact details: name, email, phone number, password credentials, account roles, and communication preferences.
• Address and transaction details: billing and shipping addresses, items purchased, sold, traded, or consigned, valuations, payouts, returns, and correspondence.
• Payment details: Stripe processes card information. We receive transaction status and references but do not store full card numbers.
• Technical and security data: session identifiers, IP address, user agent, authentication activity, security logs, and minimised CSP violation reports.
• Optional advertising measurement: with separate consent, ad-click identifiers, browser and device information (including IP address and user agent), page information, and purchase order reference, value and currency shared with Google Ads. Our purchase event does not include your name, email address, postal address or card details.
• Optional analytics: with consent, redacted committed search terms and selections, product interactions, and sell-quote IP-derived country and region. Google Analytics 4 measures visits, acquisition sources, browser/device and approximate location information, browser/session identifiers, product and basket interactions, checkout steps, and completed purchases and refunds. Ecommerce measurements may include product identifiers and names, quantities, order reference, values, discounts, tax, delivery charges and currency. Lead measurements record completion and journey information, not the contents of contact or quote forms. We do not send names, email addresses, phone numbers, postal addresses, account credentials or payment-card details in these analytics events.
• Consent evidence: choices, timestamps, policy and notice versions, a decision reference, and a keyed session pseudonym. We do not store IP address or user agent solely to prove consent.
• Newsletter preferences: email address, subscription status, signup source, consent and confirmation timestamps, and the notice and policy versions presented.
• Privacy-rights records: request type, identity-verification state, decisions, deadlines, and an audit history.

• To provide accounts, carts, checkout, orders, trade-ins, consignments, payouts, shipping, returns, and support, generally to perform a contract or take requested pre-contract steps.
• To meet tax, accounting, consumer-law, and other legal obligations.
• To secure the service, prevent fraud, diagnose faults, and administer the business where necessary or in our legitimate interests.
• To remember requested interface and session functionality.
• With analytics consent, to understand acquisition, searches, products, baskets, checkout, purchases, refunds and quote journeys so we can improve the service. Where consented transaction measurements are delivered from our servers, the same choice and data-minimisation rules apply; server-side delivery is not a way to bypass a refusal.
• With separate advertising measurement consent, to measure which Google advertisements lead to purchases. Personalised advertising remains disabled in our Google tag configuration.
• With separate marketing consent, to send requested deals, product updates, and photography gear news. A confirmation step is required before subscription.
• To record and enforce privacy choices, handle privacy-rights requests, and demonstrate compliance.

Cookie consent does not constitute consent to receive marketing email. Newsletter and other direct-marketing choices are managed separately.

We share only what is necessary with providers supporting the relevant service, including Stripe, eBay, shipping and logistics providers, hosting, email, workflow, security and support providers, and declared analytics providers when permitted by your choice. With analytics consent we share the described analytics measurements with Google Analytics 4; with separate advertising measurement consent we share advertising measurements with Google Ads. We do not enable Google signals, user-provided contact-data collection or personalised advertising for this implementation. See Google's Privacy Policy and how Google uses information from partner sites.

Some providers may process data outside the UK or EEA. Where required, we use an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism. We do not sell personal data.

• Google Analytics event-level retention is configured to 2 months and user-data retention to 14 months. New user activity can restart the user-data retention period. These settings do not govern most aggregated standard reports, which may remain available longer. Analytics cookies can last up to 2 years and may have their expiry refreshed by activity; cookie lifetime is separate from report retention.
• Google Ads first-party measurement cookies normally last up to 90 days. Google handles data it receives under its own published policies; cookie expiry does not mean all measurement records have been deleted.
• Committed-search analytics is retained for up to 90 days.
• Optional sell-quote analytics is retained for up to 60 days.
• Unconfirmed newsletter requests are retained for up to 30 days.
• Consent evidence, completed privacy-rights cases, and privacy audit records are retained for up to six years unless a legal hold applies.
• Temporary privacy export files expire after seven days.
• CSP violation reports are retained for up to 30 days.
• Transaction and accounting records are retained for applicable statutory periods.

Information may be deleted earlier when no longer needed, or retained longer where required by law or for a live legal claim. Backups age out under the approved backup schedule; completed erasure decisions must be reapplied after a restoration.

Depending on the processing and applicable law, you may have rights to access, correction, erasure, restriction, objection, portability, and withdrawal of consent. Withdrawal does not make earlier lawful processing unlawful. Contact support@shutterxchange.com to exercise a right. We verify identity before disclosing or erasing data.

Account closure is reversible and is not the same as erasure. For a verified erasure request, we delete optional analytics, remove unnecessary account data, and detach identity from minimal consent evidence retained for accountability. Records required for tax, legal claims, fraud prevention, or transaction integrity may be retained with access restricted.

You may complain to the UK Information Commissioner's Office. If EEA law applies, you may also contact your local supervisory authority.

Necessary technologies support security, accounts, carts, checkout, quote continuity, and privacy choices. Analytics and advertising measurement are separate optional choices, disabled until you consent to each. The analytics and advertising integrations wait for the corresponding opt-in before collection. We pass the relevant choices to Google using Consent Mode and keep personalised advertising disabled. You can reject either without losing core store functionality and change your choices at any time through Cookie settings. See our Cookie Policy for the current approved inventory.

We do not use the optional analytics described here to make decisions producing legal or similarly significant effects about you.

We publish controlled policy revisions with a version, effective date, content hash, author, approver, and change reason. Where a change materially affects consent purposes, providers, or categories, optional processing remains disabled until a new choice is made.