Privacy Policy

2.1 Personally identifiable information

When you register an account or use our services, we may collect the following personal data:

• Name and contact information (email address, phone number)
• Account credentials (username, password)
• Payment information (credit card details, transaction records)
• Address information (used for shipping)

2.2 Usage data

We automatically collect data about how you use our services:

• IP address and device information
• Browser type and version
• Visit times and page-view records
• Usage patterns and preference settings

2.3 Photos and media

Photos and other media content uploaded to SnapAlbum by you or your guests are collected and stored to provide our core service functions.

4.1 We never sell your personal data

We will never sell, trade, or transfer your personally identifiable information to third parties.

4.2 Service providers

We may share necessary information with trusted third-party service providers, including:

• Payment processors
• Shipping and logistics companies
• Cloud storage providers
• Customer support platforms

4.3 Legal requirements

We may disclose your personal data when required by law or when necessary to protect our rights, property, or safety.

6.1 Right of access

You have the right to request a copy of the personal data we hold about you.

6.2 Right to rectification

You have the right to ask us to correct any inaccurate or incomplete personal data.

6.3 Right to erasure

In certain circumstances, you have the right to ask us to delete your personal data.

6.4 Opt-out

You may opt out of marketing communications at any time, or ask us to restrict the processing of your personal data.

8.1 Cross-border transfers

Your personal data may be transferred to countries or regions outside Hong Kong for processing and storage.

8.2 Safeguards

We ensure that any international data transfers comply with applicable data-protection laws and are accompanied by appropriate safeguards.

10.1 Who this section applies to

This section applies to you if you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland. It supplements the rest of this Privacy Policy and prevails in case of conflict.

10.2 Data controller

Snapfind Technology Limited is the data controller for the personal data processed through SnapAlbum. You can reach us at info@snapalbum.io for any data-protection enquiry.

10.3 Legal bases for processing

We only process your personal data when we have a lawful basis to do so under Article 6 of the GDPR:

• Performance of a contract — to create your account, run your event, process your orders, and ship physical QR cards
• Legitimate interests — to secure the service, prevent fraud and abuse, analyse aggregated usage to improve features, and respond to support requests
• Consent — for optional marketing emails and non-essential cookies (you can withdraw consent at any time without affecting the lawfulness of prior processing)
• Legal obligation — to keep tax and accounting records, respond to lawful requests from authorities, and meet other statutory duties

10.4 Your data-subject rights

Subject to the conditions set out in the GDPR, you have the right to:

• Access — obtain confirmation of, and a copy of, the personal data we hold about you
• Rectification — have inaccurate or incomplete personal data corrected
• Erasure ("right to be forgotten") — have your personal data deleted in defined circumstances
• Restriction — ask us to limit how we process your personal data
• Portability — receive certain personal data in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible
• Object — object to processing carried out on the basis of legitimate interests, including profiling, and to direct marketing at any time
• Withdraw consent — at any time where processing is based on consent
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (we do not currently carry out such automated decision-making)

10.5 How to exercise your rights

To exercise any of these rights, email info@snapalbum.io from the address associated with your account. We may need to verify your identity before acting on your request and will respond within one month, extendable by a further two months for complex requests as permitted by law.

10.6 Right to lodge a complaint

If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with your local supervisory authority — for example, your national data protection authority in the EEA, the Information Commissioner's Office (ICO) in the UK, or the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland.

10.7 International data transfers

Our infrastructure is hosted in the Asia-Pacific region. When personal data is transferred outside the EEA, the UK, or Switzerland to a country that has not received an adequacy decision, we rely on appropriate safeguards under Article 46 of the GDPR — primarily the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable). A copy of the safeguards in place is available on request.

10.8 Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including the storage window of your event plan, the resolution of any dispute, and our legal, accounting, or reporting obligations. After that period, data is deleted or irreversibly anonymised.