Privacy Policy.

OpenPaparazzi Ltd – Privacy Notice
Last Updated: 23 December 2025 | Effective Date: 23 December 2025

OpenPaparazzi Ltd, Company Number: 14930404, 31, 2 Victory Parade, SE18 6FL is the controller and responsible for your personal data. We respect your privacy and are committed to protecting your personal data.

This privacy notice explains how we collect, use, and protect your personal data when you interact with our Platform, including our mobile apps, website, social media channels, and during marketing campaigns. It outlines your rights under the UK General Data Protection Regulation (UK GDPR) and related legislation.

(1) Contact Details

If you have any questions about this privacy notice or your personal data, please contact our privacy team at:

Email: support@openpaparazzi.co.uk
Postal Address: 31, 2 Victory Parade, SE18 6FL

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). We would, however, appreciate the opportunity to address your concerns before you contact the ICO.

(2) Third-Party Links

Our Platform may include links to third-party websites, plug-ins, and cookies. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read their privacy policies.

(3) The Data We Collect About You

We collect, use, store, and transfer different kinds of personal data:

  • Identity Data – includes full name, username, or similar identifier.

  • Contact Data – includes company name, email address, telephone number, and location.

  • Technical Data – includes IP address, browser type and version, time zone setting, browser plug-in types, operating system, and device platform.

  • Profile Data – includes preferences, feedback, and survey responses.

  • Usage Data – includes information about how you use our Platform.

  • Marketing and Communications Data – includes your preferences in receiving marketing from us and your communication preferences.

We also collect aggregated data (e.g., statistical or demographic) that does not reveal your identity.

We collect data:

  • Directly from you, when you fill out forms or communicate via the Platform.

  • Automatically, through cookies and analytics.

(4) Subprocessors

We share your personal data with the following subprocessors to operate our services:

  • Firebase (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Push notifications

  • Google Maps & Places API (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Location-based features

  • Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) – Payment processing (iOS & Android)

  • PayPal (S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) – Payment processing (iOS & Android)

  • Twilio Inc. (101 Spear Street, Suite 500, San Francisco, CA 94105, USA) – Messaging and communication

  • Zoho Corporation Pvt. Ltd. (Estancia IT Park, Plot No. 140, 151, GST Road, Vallancherry Village, Chengalpattu, Tamil Nadu 603202, India) – Transactional and support emails

  • ManyChat (ManyChat, Inc., 535 Mission St, San Francisco, CA 94105, USA) — Marketing automation and messaging (e.g., chat)

  • Typeform (Typeform S.L., Carrer de Bac de Roda 163, 08018 Barcelona, Spain) — Surveys and form collection

  • Mailchimp (The Rocket Science Group, LLC, an Intuit company, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA) — Email marketing and newsletter distribution

  • Squarespace (Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA) — Website hosting and content management

  • Meta Platforms (Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA) — Advertising and analytics (Facebook & Instagram Ads)

  • Zapier (Zapier, Inc., 548 Market St #62411, San Francisco, CA 94104, USA) — Workflow automation and integrations

  • Cookiebot (Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark) — Cookie consent management


Where your data is transferred outside the UK, we ensure appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs)

  • The UK International Data Transfer Agreement (IDTA)

  • Adequacy decisions by the UK Government

(5) How We Use Your Personal Data

We use your personal data for the following lawful purposes:

  • To respond to enquiries via the Platform, website, or social media

  • To enable features like messaging and booking through the app

  • To share your user profile so that services can be exchanged

  • To support session logistics, e.g., sharing your name/location with a service provider

  • To deliver content, services, or products you sign up for

  • To send promotional updates (where you’ve opted in)

  • To analyse audience behaviour and improve the Platform

  • To personalise offers and user experience

  • To run advertising and retargeting campaigns

  • To conduct market research

  • To request feedback or survey responses

  • To train staff and maintain service quality

  • To comply with legal obligations

Legal Basis for Processing:

  • Consent – e.g., for marketing or sharing data with another user

  • Contract – when necessary to deliver services

  • Legal obligation – to comply with laws and regulations

  • Legitimate interest – to manage our business and improve services where your rights do not override these interests

If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis.

(6) Messaging Between Users

If you message another user via our Platform, your name will be visible to them. For DSLR photoshoots by Paparazzi Pro users, your email address may be shared with them to deliver images. By using these features, you consent to sharing necessary contact information. You can withdraw your consent at any time by contacting us.

(7) GPS Access and Location Data

Our app may request GPS access, particularly when a Paparazzi is navigating to a Celebrity for a photoshoot session. GPS tracking does not continue when the app is closed unless required for an active session. You can disable GPS access at any time in your device settings.

(8) Cookies and Analytics

We use cookies and similar technologies to:

  • Understand how users interact with our Platform

  • Enhance functionality and user experience

  • Support advertising and analytics

View our Cookie Policy and manage your consent here.

(9) Disclosures of Your Personal Data

We may share your personal data:

  • With subprocessors listed above

  • With professional advisors (legal, accounting, insurance)

  • With users you engage with on the Platform

  • In the event of a merger or acquisition (with appropriate notice)

(10) Data Retention

We retain your data only as long as necessary for the purposes it was collected, or to comply with legal, tax, and regulatory obligations. 

  • Unused or unpurchased photos must be manually deleted by users

  • Deleted accounts: All personal information is removed. No data or images are retained.

(11) Data Security

While we do not currently use encryption, we protect access to user data via secure authentication using JWT tokens. This ensures data can only be accessed with a valid token. Access is limited to staff and contractors with a business need and confidentiality obligations. We maintain breach detection and respons in e protocols.

(12) Your Data Protection Rights

Under the UK GDPR, you have the following rights:

  • Access – request a copy of your data

  • Correction – fix inaccurate or incomplete data

  • Erasure – request deletion where we no longer need your data

  • Objection – to direct marketing or processing based on legitimate interests

  • Restriction – suspend processing under certain conditions

  • Portability – transfer your data to another service

  • Withdraw consent – where processing is based on consent

We may need to verify your identity before processing requests. We aim to respond within three business days.

(13) Updates to This Privacy Notice

This version was last updated on 23 December 2025. We may revise it periodically and notify you of significant changes via the app, website, or email.