This Privacy Notice explains how we use and protect personal information when you receive a private photo gallery, view photographs, buy photographs or keepsakes, download digital images, contact us, or otherwise use our service.
We know that many of the photographs we handle include children. We treat family photographs accordingly and design the service so that galleries are private, access is limited, and photographs are kept only for as long as they are needed.
Mantle Atlas Limited, trading as Mantle, is responsible for the personal information described in this notice where we operate your private gallery, online shop, order fulfilment and related customer support.
Our details are:
For data-protection questions or requests, contact hello@mantle.ie.
The venue or event operator where your photographs were taken may separately process information about your booking, visit and photography session. Where that happens, the operator is responsible for that processing under its own privacy notice.
This notice explains what Mantle does with information it receives or collects for the private gallery, online shop and fulfilment service.
We may process information about:
Our online shop is intended to be used by adults. We do not ask children to create an account, make a purchase or contact us as customers.
A child whose photograph appears in a gallery still has data-protection rights. A parent or guardian may contact us about a child's photograph. Depending on the circumstances, we may need to verify identity or authority and take account of the child's own rights.
Depending on how you use the service, we may process:
Payment card details are processed by our payment provider. Mantle does not need to receive or store your full payment-card number.
If you contact us, we may keep:
When you use the service, we may process information such as:
Some information comes directly from you, for example when you:
We may also receive information from the venue or event operator where your photographs were taken. This may include photographs from your session and information needed to connect those photographs with the correct family or gallery.
We may receive payment status and transaction information from our payment provider and delivery information from fulfilment and delivery providers.
We use photographs and associated session information to create the gallery, make sure the correct photographs are shown to the correct family, provide access to the gallery and operate the service.
For adult customer information used to provide a service requested by that customer, processing may be necessary to perform our contract with the customer.
Where photographs contain other people, including children, we rely on our legitimate interests in providing the private family-photography service requested in connection with the event.
Those interests are balanced against the privacy rights of the people shown in the photographs. Safeguards include private galleries, restricted access, limited retention and controls on how photographs may be used.
When you order a personalised keepsake or print, we use the photograph and design choices you select to produce that item.
For customer and order information, this processing is necessary to perform our contract with you.
Where the chosen photograph contains another person, including a child, we process the photograph on the basis of our legitimate interests in producing the personalised item requested by the customer.
We use the relevant photographs and order information to prepare and provide digital downloads you buy.
This processing is necessary to perform our contract with you and, where photographs contain other people, is also supported by the legitimate interests described above.
We use customer, payment-status and delivery information to:
This is necessary to perform our contract with you.
We use information supplied in customer enquiries and complaints to investigate and respond to them.
Depending on the issue, this is necessary to perform our contract with you, to comply with our legal obligations, or for our legitimate interests in operating and supporting the service.
We process technical information and security logs to prevent unauthorised access, fraud, misuse and technical problems.
We do this because we have a legitimate interest in protecting customers, photographs, our systems and our business.
We retain and use information where necessary to comply with obligations relating to matters such as accounting, taxation, consumer rights, legal claims and regulatory requests.
The legal basis is compliance with our legal obligations.
We may use automated tools to help assess technical aspects of photographs, such as image quality, composition, subject positioning and technical expression or interaction signals, so that photographs can be organised, ranked or checked more efficiently.
These tools are used only for photo selection and quality control.
We do not use them to determine a person's psychological state, personality, mental health, satisfaction with the event or other emotional or psychological characteristics.
We do not use this processing to make decisions that produce legal or similarly significant effects on anyone.
If we offer optional marketing messages, we will send them only where we have the appropriate permission to do so.
You can withdraw marketing consent at any time.
Choosing not to receive marketing does not affect your gallery, your order or your ability to buy from us.
We do not use photographs from your gallery to train AI models or image-selection models merely because you used the service or bought a product.
If we ever ask to use photographs for that separate purpose, we will ask for a separate, optional consent.
Giving that consent will not be required to receive your gallery or buy anything from us.
If processing is based on consent, you may withdraw that consent. Withdrawal does not make processing already lawfully carried out before withdrawal unlawful.
Your gallery is accessed using a personal link.
You should treat that link as private. Anyone you give the link to may be able to view the gallery.
Please share it only with people you trust.
We use technical and organisational measures intended to prevent galleries from being openly browsed or indexed as public photo collections.
No internet service can guarantee absolute security, but access to family photographs is designed to be limited rather than public.
We share personal information only where necessary to operate the service.
This may include:
We may exchange limited session or support information with the operator where necessary to identify a session, resolve a gallery problem or deal with an issue relating to the original photography experience.
Where an order is produced by a fulfilment partner, we provide the photograph, product specification and other information required to manufacture the item.
A fulfilment provider receives only the information it needs for that purpose.
We provide the recipient name, delivery address and contact information required to deliver physical orders.
Our payment provider processes payment and transaction information.
We use service providers for functions such as:
A current list of these providers is available on request from hello@mantle.ie.
We may disclose information to accountants, legal advisers, insurers, regulators, law-enforcement bodies or other authorities where reasonably necessary or legally required.
We do not sell family photographs or personal information to advertisers or data brokers.
Some of the companies that provide technology or communications services to us may process information outside Ireland or outside the European Economic Area.
Where personal information is transferred to a country outside the European Economic Area, we use a lawful transfer mechanism where required. Depending on the destination and provider, this may include:
You can contact us at hello@mantle.ie if you want further information about safeguards used for international transfers relevant to your information.
We do not intend family galleries to become permanent photo archives.
The expiry date for your gallery is shown in the gallery itself.
We keep your gallery and the contact details you gave us for 12 months after your visit, after which they are deleted or anonymised.
After the gallery expires, the photographs are removed from normal gallery access and deleted in accordance with our retention process.
Copies may remain in protected backups for up to 35 days before being overwritten or deleted.
Files temporarily retained to complete ingest, matching, gallery creation, quality control or recovery are kept for up to 30 days, unless they need to be retained longer to resolve a specific problem.
Photographs and production files required to manufacture an order are kept for 90 days after fulfilment, unless they need to be retained longer to resolve an order problem.
Information needed for accounting, tax and business records may be retained for at least six years where required by Irish law.
We do not need to retain the underlying family photographs for six years merely because an order was placed.
These are normally retained for 24 months, or longer where necessary because a complaint, dispute, legal claim or regulatory matter remains open.
Where we rely on consent, we may retain a record of the consent and any subsequent withdrawal for as long as reasonably necessary to demonstrate compliance.
When information is no longer required, it is deleted or anonymised unless the law requires us to keep it.
Depending on the circumstances, you may have the right to:
These rights are not absolute in every situation. For example, we may need to retain certain order information because the law requires us to keep it.
If you object to processing based on legitimate interests, we will consider your circumstances and whether there are overriding legitimate grounds for continuing the processing.
If you are a parent or guardian and have a concern about a child's photograph, contact us at hello@mantle.ie.
Please tell us enough to identify the relevant gallery or photograph.
We may ask for information necessary to confirm identity, the relationship to the child or authority to make the request. We will ask only for what is reasonably necessary.
The rights and interests of the child remain important when we consider any request.
Contact hello@mantle.ie.
Please describe what you are asking us to do and, where relevant, provide the gallery or order number.
We may need to verify your identity before disclosing, changing or deleting information.
We will respond within the time required by data-protection law.
If you have a concern, we would prefer the opportunity to deal with it directly. Contact us at hello@mantle.ie.
You also have the right to complain to the Data Protection Commission, Ireland's independent data-protection authority.
Making a complaint to us first does not remove your right to contact the Data Protection Commission.
We may use cookies or similar local-storage technology that is necessary to:
We count visits to our pages so we can see how many people use the shop. The tool we use for this does not set a cookie, does not follow you to other websites, and does not identify you.
If we introduce advertising, or any other non-essential cookie that requires your consent, we will ask before using it.
We may update this Privacy Notice when the service, our providers or legal requirements change.
The current version will always show its latest update date.
Material changes affecting how existing family photographs are used will not be hidden inside an updated notice where the law requires something more, such as consent.
For privacy questions or requests: