Privacy Policy

Last updated: 5 November 2026

Brighton Postcard Club respects your privacy. This policy explains what personal information we collect, why we use it, who we share it with and the choices you have. It applies to our website, postcard subscriptions, gift orders and enquiries.

1. Who is responsible for your information?

The data controller is PHOTOJACY, trading as Brighton Postcard Club.

Email: Jacy Wilkes

2. Information we collect

Depending on how you use our services, we may collect:

Your name, email address, billing information and delivery address.
Gift recipients' names and postal addresses, and any gift message you provide.
Your subscription plan, orders, payment status, delivery history and customer-service correspondence.
Marketing preferences and, if you opt in, your email address for news and offers.
Information supplied by participating artists, such as names, contact details, artwork titles, biographies, social links and payment details.
Basic technical information needed to run and secure the website. Any optional analytics or advertising cookies are described in our cookie information below.

Payments are processed by SumUp. We do not intend to store full payment-card details ourselves; the provider may process those details under its own privacy notice.

3. Why we use information and our lawful bases

To take orders, manage subscriptions and deliver postcards: performance of a contract with the purchaser.
To send a purchased gift to its recipient: our legitimate interests in fulfilling the purchaser's order, balanced against the recipient's privacy.
To answer enquiries and provide customer support: contract or legitimate interests, depending on the enquiry.
To maintain accounting, tax and other required records: legal obligation.
To manage artist participation, permissions, royalty statements and payments: contract and, where applicable, legal obligation.
To protect the website and prevent fraud: legitimate interests in keeping our services secure.
To send optional promotional emails: your consent where required. You can unsubscribe at any time.
To use non-essential analytics or marketing cookies: your consent where required.

4. Gift recipients

If someone buys you a gift subscription, we may receive your name and delivery address from the purchaser. We use these details to send your postcards and deal with delivery issues. We do not add gift recipients to marketing lists simply because they receive a gift. Where required, we will provide privacy information to gift recipients within the applicable legal timeframe.

5. Who we share information with

We share only the information necessary with trusted service providers who help us operate, such as:

SumUp for payment processing.
GoDaddy for website hosting and order management.
Postal and delivery services, including Royal Mail, to deliver orders.
Professional advisers or public authorities where legally necessary.

We do not sell your personal information to advertisers. Featured artists do not routinely receive subscribers' personal information; we may share necessary details only where a specific service requires it and there is a lawful basis.

6. How long we keep information

We retain personal information only for as long as needed for the purposes described above. For example, we keep order and financial records for the period required by UK tax and accounting rules, generally up to six years after the relevant accounting period, where applicable. Enquiries are deleted when no longer needed, and marketing contact details are kept until you unsubscribe or we no longer need them, subject to a limited suppression record where necessary to respect your choice.

7. Cookies and website analytics

Our website may use essential cookies or similar technologies needed for core functions, such as checkout or security.

We will ask for consent before setting non-essential cookies where required. You can also control cookies through your browser settings.

8. International transfers

Some service providers may process information outside the UK. If this happens, we will ensure an appropriate UK data-protection transfer mechanism or other lawful safeguard applies.

9. Keeping information secure

We use reasonable technical and organisational measures to protect personal information, restrict access and work with reputable service providers. No internet-based service can guarantee absolute security.

10. Your privacy rights

Under UK data-protection law, you may have rights to access, correct or erase your information; restrict or object to certain uses; and receive certain information in a portable format. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing. Some rights have exceptions, including where we must retain records by law.

To exercise your rights, contact us at Jacy. You can also complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

11. Children's information

Our subscriptions are intended to be purchased by adults. If a purchaser supplies a child's name or address as a gift recipient, we use that information only as needed to fulfil the gift and do not use it to market directly to the child.

12. Changes to this policy

We may update this policy as our services change. We will publish the updated version on this page and revise the date above. If a change materially affects how we use your information, we will take any further steps required by law.