Privacy Policy

Last updated: 14 October 2026

This Privacy Policy explains how STOREY PARADISE LTD, operating Framewell AI, handles personal information in connection with framewellai.com. We are the business responsible for the purposes described here. Company number: 15545381. Address: 20 Wenlock Road, London, England, N1 7GU, United Kingdom. Privacy contact: support@framewellai.com.

Current website status. Payments and photo-processing orders are not open. Selecting a photo in the package planner creates a local browser preview; it does not transmit the image or the email field to us. An enquiry emailed to support is received and handled as correspondence. Future photo processing is described separately below.

1. Information we receive now

Website access information: our hosting infrastructure may receive your IP address, browser and device information, request time, requested page and security or error information needed to deliver and protect the website.
Correspondence: if you email us, we receive your email address, name if supplied, message, attachments you choose to send and the associated correspondence. Please do not send photographs or sensitive documents to request processing while orders are closed.
Local photo selection: the planner holds selected files in browser memory so you can review the package. It does not upload them or save them to a customer account. Refreshing or closing the page clears that selection.

2. Why we use information

We use access and security information to serve pages, diagnose faults and prevent abuse. We use correspondence to answer your enquiry, provide requested information and resolve complaints. We do not use an enquiry as permission to subscribe you to marketing messages.

Where UK data-protection law applies, our grounds are taking steps at your request before entering a contract, performing a contract when an order is accepted, complying with a legal obligation, and our legitimate interests in operating a secure website, replying to ordinary correspondence and managing disputes. If consent is required for an optional activity, we will request it separately; you may withdraw it without affecting lawful earlier processing.

3. Service providers and recipients

The website is hosted using Hostinger infrastructure. Hosting, email delivery and security service providers may process access information and correspondence to provide those services. Staff handling an enquiry receive the information necessary to answer it. Professional advisers or public authorities may receive information where required for a legal duty or to establish, exercise or defend a claim.

We do not sell personal information. We do not use uploaded-photo previews for advertising, profiling or model training. Fonts and the site’s own image assets are served from the website rather than loaded directly from a font provider.

4. Cookies and similar technology

WordPress and WooCommerce may use essential login, security or account-session cookies when you use account functions. The public informational pages do not intentionally enable advertising, marketing widgets or order-attribution tracking. Local photo previews use temporary browser memory rather than an advertising identifier. See Cookies & Website Technology. If optional analytics or marketing tools are added, this notice and any required consent controls must be updated before those tools are enabled.

5. Retention

Local photo selections are not retained by us. We aim to delete routine enquiries within 12 months after the matter is closed, unless the correspondence is needed for an ongoing request, complaint or legal claim. Hosting or security logs are kept for the operational period needed by the provider or to investigate a specific incident; the relevant criteria are security, fault diagnosis and prevention of abuse rather than use for advertising.

When paid orders open, accounting and transaction records may be retained for six years from the end of the financial year to which they relate, or longer where a legal duty or unresolved claim requires it. Photograph files are not treated as accounting records and have a separate retention period.

6. Before photo-processing orders open

Paid processing is not currently enabled and no AI provider receives files through the planner. Before accepting live uploads, we will identify the processing provider and any relevant transfer arrangements in this policy. We will select a provider whose terms support the advertised privacy commitments and configure the service accordingly. Provider disclosure is a condition of enabling live uploads, rather than something that happens after you submit a photo.

For a live order, the intended data includes the source image, selected treatment, brief, delivery email, order status and finished files. AI processing and a final check by an operator are necessary to provide the service. AI may reconstruct details; it is not used here to make legal or similarly significant decisions about a person. Do not upload sensitive health information, identity documents, explicit content or other information unnecessary for photo processing.

The planned image-file retention limit is 30 days from each file’s upload or creation. Source files and finished files can therefore expire on different dates. Copies needed to address a complaint or legal obligation may be retained separately for that purpose. Download your results promptly. Any provider-side retention or backup period will be disclosed before processing is enabled. Requests for earlier deletion may prevent us from completing an order or investigating a complaint.

We will not use customer photographs in public samples, advertisements or a portfolio without separate permission. We will not enable a photo provider that uses submitted photos for model training contrary to the commitments disclosed to customers.

7. Security and international processing

We use HTTPS and access controls for website administration. The prepared upload workflow encrypts stored photo files and restricts access to authorized staff and the relevant order recipient when it is enabled. No internet transmission or storage system can be guaranteed risk-free. Do not share your order access link or password.

We operate from the United Kingdom, and infrastructure or correspondence providers may process information in other countries. Where data-protection law requires a safeguard for a restricted international transfer, we must ensure an applicable adequacy arrangement or contractual safeguard is in place. Contact us for information about a relevant provider or safeguard. AI-provider transfers will be assessed and disclosed before live uploads begin.

8. Your rights

Depending on the law that applies and the reason for processing, you may request access, correction, deletion, restriction, objection or a portable copy of information. You may withdraw consent to an activity that relies on it. These rights have conditions and exceptions, including legal record-keeping and the handling of claims. Email support@framewellai.com; we may ask for proportionate information to verify that a request is yours. We will respond within the timeframe required by applicable law.

You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or another competent data-protection authority. You do not have to contact us first to exercise a right to complain.

9. Children and updates

The purchasing service is intended for adults. Please do not create an account or send order enquiries if you are under 18 without an adult acting for you. An adult submitting a family photograph must have the authority or permission required for that use.

We will update this policy when the website, providers or processing change. The date above identifies the latest version. Material changes to the treatment of customer photographs will be communicated before the affected processing takes place.