Privacy notice
Version 2026-10-draft · effective 2026-10-21
Draft for legal review. TODO(legal): replace every section with the reviewed text.
Who is responsible for your data
TODO(legal): The photographer or studio who shared the gallery with you decides how your information is used (the personal information controller under the Data Privacy Act of 2012). Ourfold hosts the gallery for them and processes your information only on their instructions (the personal information processor).
What we collect
TODO(legal): Your email address or mobile number, to send you sign-in codes; your name if the studio or you provide it; which galleries you can open; the photos you favourite, select or download; and when you agreed to this notice. We don't keep your IP address with any of these.
Why
TODO(legal): To let you see and download the photos the studio shared with you, to keep your favourites and selections, and to keep the gallery private to the people the studio and its client invited.
Where it's kept, and for how long
TODO(legal): On servers in Singapore (Cloudflare and Amazon Web Services), with a backup copy of each original photo. Until the studio deletes the gallery or you leave it; backups are erased on request within the backup's retention period.
Your rights
TODO(legal): You can leave any gallery at any time from the gallery page; this ends your access and deletes your favourites and consent record there. For anything else (access, correction, erasure, objection, a complaint), contact the studio that shared the gallery, or our Data Protection Officer. You may also complain to the National Privacy Commission.
Contact
TODO(legal): Data Protection Officer: dpo@ourfold.gallery (placeholder until the domain is set up).