Legal

Privacy Policy

Last updated: March 3, 2026

DeluxeFX ("we", "us", "our") operates the DeluxeFX mobile application ("App") and the website at deluxefx.co.uk ("Website"). This Privacy Policy explains how we collect, use, and protect your information when you use our services.

We are committed to protecting your privacy. DeluxeFX is built with a privacy-first approach — your photos and videos are processed entirely on your device and are never uploaded to our servers.

1. Data controller

DeluxeFX is the data controller responsible for your personal data. We are based in London, United Kingdom, and are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information we collect

2.1 Information we do NOT collect

We want to be clear about what we do not collect:

• Photos and videos — All media processing happens locally on your device. We never access, upload, store, or transmit your photos or videos.
• Personal accounts — The App does not require registration, login, or any account creation.
• Location data — We do not collect or access your location.
• Contacts or calendar — We do not access your contacts, calendar, or any other personal data on your device.
• Advertising identifiers — We do not use advertising tracking or IDFA.

2.2 Subscription data

If you purchase a DeluxeFX Pro subscription, the following data is processed:

• Purchase transaction data — Processed by Apple through the App Store. We do not have access to your payment details (credit card number, billing address, etc.).
• Subscription status — We use RevenueCat, a third-party subscription management service, to verify your subscription status. RevenueCat receives an anonymous app user ID and subscription receipt data from Apple. RevenueCat does not receive your name, email, or other personal information. See RevenueCat's Privacy Policy.

2.3 App analytics

We do not use third-party analytics or tracking SDKs in the App. We may use Apple's built-in App Analytics, which provides aggregate, anonymized usage data (such as app launches, device type, and OS version). This data cannot identify individual users and is governed by Apple's Privacy Policy.

2.4 Website data

When you visit our Website, our hosting provider may automatically collect standard server log data, including your IP address, browser type, pages visited, and visit timestamps. This data is used solely for maintaining the security and performance of the Website. We do not use tracking cookies or third-party analytics on our Website.

2.5 Contact information

If you contact us via email, we collect your email address and the contents of your message solely to respond to your inquiry. We do not add you to mailing lists or share your contact information with third parties.

3. Legal basis for processing

Under UK GDPR, we process personal data on the following legal bases:

• Contract performance — Processing subscription data is necessary to provide you with the DeluxeFX Pro service you have purchased.
• Legitimate interests — Processing server logs is necessary for the security and operation of our Website.
• Consent — Where you voluntarily contact us or provide information to us.

4. How we use your information

The limited data we collect is used exclusively to:

• Verify and manage your subscription status
• Respond to your support inquiries
• Maintain the security and performance of our Website
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties. We do not use your data for advertising, profiling, or automated decision-making.

5. Data sharing

We share data only with the following parties, strictly as necessary:

• Apple — Processes App Store purchases and provides anonymized analytics. See Apple's Privacy Policy.
• RevenueCat — Manages subscription verification using anonymous identifiers. See RevenueCat's Privacy Policy.
• Hosting provider — Our Website hosting provider processes server logs as a data processor on our behalf.

We may also disclose information if required by law, regulation, or legal process.

6. Data retention

• Subscription data — Retained by RevenueCat for the duration of your subscription plus any period required for refund processing. You can request deletion at any time.
• Email correspondence — Retained for up to 24 months after your last communication, then deleted.
• Server logs — Automatically deleted after 90 days.

7. International data transfers

RevenueCat and Apple may process data in the United States. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO) and the UK International Data Transfer Agreement (IDTA).

8. Data security

We implement appropriate technical and organisational measures to protect your data, including encrypted communications (HTTPS/TLS), access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — Request a copy of the personal data we hold about you.
• Right to rectification — Request correction of inaccurate or incomplete data.
• Right to erasure — Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing — Request that we limit how we use your data.
• Right to data portability — Request your data in a structured, machine-readable format.
• Right to object — Object to processing based on legitimate interests.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at info@iamtravelr.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.

10. Children's privacy

The App is not directed at children under 13. We do not knowingly collect personal data from children under 13. The App does not require any personal information to function. If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete it promptly.

11. Cookies

Our Website does not use tracking cookies or third-party cookies. We may use essential cookies strictly necessary for the functioning of the Website (such as session management). These do not require consent under UK law.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically. Your continued use of the App or Website after changes constitutes acceptance of the updated policy.

13. Contact us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

DeluxeFX
Email: info@iamtravelr.com
Website: deluxefx.co.uk