Last Updated: 11 November 2025
At Picture This, your privacy and data protection are our top priorities. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with Lebanon’s Law No. 81/2018 and the EU General Data Protection Regulation (GDPR).
1. Data Controller
Picture This
(“we,” “us,” “our”)
2. Data We Collect
We collect and process:
a. Personal Information
- Name
- Email address
- Phone number
- Delivery address
b. Uploaded Content
- Photos and images you upload for printing
- File names and technical metadata (size, format, resolution)
c. Technical Data
- Device and browser information
- IP address and general location
- Cookies and analytics data
3. Purpose and Legal Basis for Processing
Purpose | Legal Basis |
To process and fulfill your order | Contract (Art. 6(1)(b) GDPR) |
To manage your account and customer support | Legitimate interest (Art. 6(1)(f) GDPR) |
To send order updates | Contract (Art. 6(1)(b) GDPR) |
To comply with legal and tax obligations | Legal obligation (Art. 6(1)(c) GDPR) |
To store cookies and improve our website | Consent (Art. 6(1)(a) GDPR) |
4. Image Retention and Deletion
- Photos are stored securely and deleted within 1 week or less after order completion.
- No photo is ever used for marketing purposes.
5. Data Storage & Security
All data is stored on encrypted servers within Lebanon or the European Economic Area (EEA).
We use:
- End-to-end encryption during upload and storage;
- Secure HTTPS connections;
- Access restrictions limited to authorized staff.
Despite these measures, no method of electronic storage is completely secure.
6. Sharing of Data
We only share your data with:
- Delivery and logistics partners
- Cloud hosting providers (for encrypted storage)
All partners are contractually bound to comply with Lebanese data protection laws and the GDPR.
We do not sell, rent, or trade your personal data.
7. International Transfers
If we transfer your data outside Lebanon or the EEA, we ensure:
- The recipient country has an adequacy decision; or
- We use EU Standard Contractual Clauses (SCCs) approved by the European Commission.
8. Data Retention
Type of Data | Retention Period |
Uploaded photos | 1 week or less after order completion |
Order & billing data | 7 years (for accounting/legal reasons) |
Account data | Until account deletion |
Support emails | 2 years |
9. Your Rights
You have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request deletion of your data (“right to be forgotten”)
- Restrict processing under certain conditions
- Withdraw consent at any time
- Data portability (receive your data in structured format)
- Object to processing based on legitimate interests
10. Cookies
We use cookies to:
- Enable core website functionality;
- Analyze site traffic;
- Remember user preferences.
You may manage or disable cookies in your browser or via our cookie consent banner.
11. Children’s Privacy
Our Service is not intended for minors under 18. We do not knowingly collect data from children. If we discover that a minor has provided data, we will delete it immediately.
12. Policy Updates
We may update this Privacy Policy occasionally and without notice to reflect changes in law or operations. The latest version will always be available on our website.