Privacy Policy

Last updated: 22 September 2026

  1. Who We Are

    HDRcreme is operated by Sharpify LTD, a company registered in England and Wales under company number 09391984. Our registered office is at 84 Pynfolds Jamaica Road, SE16 4NU, London, United Kingdom.

    We are the data controller for personal data collected through hdrcreme.com (the "Site"). If you have any questions about this policy or your data, please contact us at [email protected].

  2. What Data We Collect

    We collect the following categories of personal data:

    • Account information — your email address, username, and encrypted password when you register.
    • Profile information — any optional details you add to your profile (e.g. biography, location, avatar).
    • Login data — IP address, browser/device information, login timestamps, and login count, collected automatically when you sign in.
    • Photos and EXIF data — images you upload, along with any embedded EXIF metadata (which may include camera model, lens, exposure settings, and GPS location). EXIF data is displayed publicly alongside your photos.
    • Social activity — follows, likes, favourites, and comments you make on the Site.
    • Messages — private messages you send to other users via the Site's messaging system.
    • Payment information — if you subscribe to a premium membership, your payment is processed by Stripe. We store only your subscription status and Stripe customer ID; we never see or store your full card details.
    • OAuth data — if you choose to connect your Facebook or Twitter/X account, we receive and store the access token and basic profile information provided by those platforms.

  3. How We Use Your Data

    We use your data for the following purposes:

    • Providing the service — to create and manage your account, display your photos, enable social features, and process subscription payments. (Legal basis: performance of a contract.)
    • Security and fraud prevention — to detect and prevent spam, abuse, and unauthorised access, including spam-checking of uploaded content. (Legal basis: legitimate interests.)
    • Site analytics — we use Google Analytics to understand how visitors use the Site and to improve it. Google Analytics collects anonymised usage data including pages visited, session duration, and device type. (Legal basis: legitimate interests.)
    • Marketing emails — with your consent, we may send you newsletters and promotional communications about the Site. You can unsubscribe at any time via the link in any such email. (Legal basis: consent.)
    • Legal compliance — to comply with applicable laws and respond to lawful requests from authorities. (Legal basis: legal obligation.)

  4. Cookies

    We use only technically necessary cookies — these are essential for the Site to function (e.g. keeping you logged in, maintaining your session). We do not use advertising, tracking, or third-party analytics cookies beyond Google Analytics.

    Google Analytics uses cookies to distinguish users. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

  5. Who We Share Your Data With

    We do not sell your personal data. We share it only with the following third-party service providers, who process it on our behalf:

    • Amazon Web Services (AWS S3) — stores uploaded photos and files.
    • Stripe — processes subscription payments. Stripe's privacy policy is available at stripe.com/gb/privacy.
    • Google Analytics — analyses Site usage. Google's privacy policy is available at policies.google.com/privacy.
    • Facebook / Meta and Twitter / X — only if you choose to connect these accounts via OAuth.

    We may also disclose your data if required by law, court order, or to protect the rights or safety of Sharpify LTD or others.

  6. Public Content

    Photos you upload, your username, profile information, and EXIF metadata are visible to all visitors of the Site. Private messages are visible only to the participants of that conversation. Please be mindful of what personal information you include in public-facing content, particularly GPS coordinates embedded in EXIF data.

  7. Data Retention

    We retain your personal data for as long as your account is active. If you delete your account, your personal data is removed immediately. Some residual data may remain in backups for a short period and will be purged in the normal backup cycle.

  8. Your Rights Under UK GDPR

    As a UK resident, you have the following rights regarding your personal data:

    • Right of access — to request a copy of the data we hold about you.
    • Right to rectification — to ask us to correct inaccurate data.
    • Right to erasure — to ask us to delete your data (see also: account deletion above).
    • Right to restriction — to ask us to limit how we use your data.
    • Right to data portability — to receive your data in a structured, machine-readable format.
    • Right to object — to object to processing based on legitimate interests or for direct marketing.
    • Right to withdraw consent — where processing is based on consent (e.g. marketing emails), you may withdraw it at any time without affecting the lawfulness of prior processing.

    To exercise any of these rights, email us at [email protected]. We will respond within one month.

    You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.

  9. Data Security

    We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Passwords are stored in encrypted form and are never visible to us. Payment card data is handled entirely by Stripe and is never transmitted to or stored on our servers.

  10. Children's Privacy

    The Site is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

  11. Changes to This Policy

    We may update this Privacy Policy from time to time. The date at the top of this page will reflect when it was last revised. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.

  12. Contact Us

    For any questions or requests relating to this Privacy Policy or your personal data, please contact us at [email protected].