Privacy policy

The short version

We only collect what we need to digitise your media and return it safely. We never sell your information, and we never share your photographs, videos or documents with anyone outside our small in-house team. You can ask us for a copy of your data, correct it, or delete it at any time — use our data request form.

1. Who we are

Umberdosh Restoration is the "data controller" for the personal data described in this policy. You can contact us at sales@marms.uk or by post at 5 Thistledown, Doddington, PE15 0NU.

2. What personal data we collect

• Identity & contact: name, email, phone, postal address.
• Order data: the items you send us, your quote, package choice, delivery options, and messages you send us about your order.
• Family media: the photographs, slides, negatives, videos, audio and documents you send us to digitise.
• Archive-order context: the research goal or family details you share to help us catalogue your collection.
• Payment metadata: confirmation from Stripe. We never see or store your full card number.
• Account data: if you create an account, your email and an encrypted password token.
• Technical & cookies: essential cookies to keep your quote and session, plus (with consent) privacy-friendly analytics.

3. How we use it — and our lawful basis

4. Your family media

Your originals stay with us only for as long as we need to digitise them, then come home by tracked post. Digital scans are stored on encrypted UK-based storage and shared with you via a private, expiring download link. A working copy is kept for 90 days after delivery so we can re-send if needed, then permanently deleted. We never use your images, video or audio to train AI, and nothing is uploaded to a public AI service — any enhancement is done on tooling we control.

5. Who we share data with

• Stripe — to process payments.
• Royal Mail / tracked courier — to return your originals.
• Our email provider — to send order updates and delivery links.
• Our hosting provider — to run this website and store your account data securely.

Each of these processors handles data on our behalf under a written data processing agreement. We never share your images, video or audio with third parties for training, marketing, or any other purpose.

6. International transfers

Some of our processors (for example Stripe) are based outside the UK. Where data leaves the UK we rely on adequacy decisions or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, so your data is protected to UK GDPR standards.

7. How long we keep data

• Order and tax records: 6 years (HMRC requirement).
• Working copies of your scans: 90 days after delivery, then permanently deleted.
• Account data: until you ask us to close the account.
• Support and enquiry emails: up to 2 years.
• Analytics events (if consented): up to 14 months, aggregated.

8. Cookies

We use a small number of essential cookies to keep your quote and order in your browser between pages, and to keep you signed in. With your consent we also use privacy-friendly analytics cookies to understand which pages help most. We don't use third-party advertising cookies.

You can change your choices at any time: open cookie settings.

9. Your UK GDPR rights

You have the right to:

• Ask for a copy of the data we hold about you (access).
• Ask us to correct data that's wrong (rectification).
• Ask us to delete your data (erasure).
• Ask us to restrict or object to how we use your data.
• Ask for your data in a portable format (portability).
• Withdraw consent for analytics at any time via cookie settings.
• Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, use our data request form or email sales@marms.uk. We'll respond within 30 days. We may need to verify your identity first.

10. Children

Our service is aimed at adults ordering on behalf of themselves or their family. We don't knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we'll delete it.

11. Security

Your account data is stored on encrypted UK / EU infrastructure with row-level access control. Your originals are kept in a locked studio and only handled by our in-house team. Digital scans are stored encrypted at rest and shared via private, expiring download links.

12. Changes to this policy

If we make a material change to how we handle your data, we'll update this page and, where required, email you before the change takes effect.

13. Contact

Privacy questions or requests: email sales@marms.uk or use our data request form.