Privacy Policy

At Timpson, we take the responsibility of looking after your personal information seriously.

This Privacy Policy explains what information we collect when you use Quick Prints, why we need it, how we use it, who we share it with, how long we keep it and the rights you have over your information.

1. Who we are

Quick Prints is operated by Timpson Limited, a company registered in England and Wales under company number 00675216.

Our registered office is:

Timpson Limited
Timpson House
Claverton Road
Wythenshawe
Manchester
M23 9TT

Timpson Limited is the data controller for the personal information processed through Quick Prints. If you have any questions about how we use your personal information, you can contact:

Data Compliance Manager
Timpson Group
Timpson House
Claverton Road
Wythenshawe
Manchester
M23 9TT

2. What is Quick Prints?

Quick Prints is an online photo-printing service.

You may enter the service through a QR code, the Timpson website or a referral link.

You currently send your photographs and communicate with Quick Prints through WhatsApp. We may introduce other messaging services in the future.

Quick Prints uses artificial intelligence to help operate the chat service and may also use AI to improve the quality of photographs before printing.

You can choose not to have AI used to enhance your photographs and can still use Quick Prints.

3. What information do we collect?

Depending on how you use Quick Prints, we may collect:

• your name;
• your mobile telephone number;
• your delivery address;
• information about your order, including what you order and the price;
• photographs and other images you submit for printing;
• your conversations with the Quick Prints service;
• your choice about receiving marketing;
• limited technical information about an image, such as its resolution; and
• information required to process your payment.

Payments are processed through Stripe. Timpson does not store your full payment-card details.

We do not extract other metadata from your photographs beyond the technical information required to provide the service.

4. Why do we use your information?

We use your information to:

• provide the Quick Prints service;
• receive and process the photographs you send us;
• communicate with you about your order;
• help you through the ordering process;
• improve the quality of photographs for printing where AI enhancement is used;
• crop and position photographs appropriately;
• take payment;
• prepare and produce your prints;
• arrange delivery;
• provide customer service and deal with problems or complaints;
• keep appropriate order and financial records;
• keep the service secure and prevent fraud or misuse;
• comply with our legal obligations; and
• send marketing where you have specifically chosen to receive it.

Our lawful bases

We process information needed to provide Quick Prints because it is normally necessary to perform our contract with you, or to take steps at your request before entering into that contract.

We may rely on our legitimate interests where processing is necessary to operate, improve or protect the service, including improving print quality, keeping the service secure, troubleshooting problems and preventing fraud. We will only do this where our interests do not override your rights and interests.

Where we need to keep information because the law requires us to do so, we process it to comply with a legal obligation.

Where we send optional marketing communications, we rely on your consent.

5. How Quick Prints uses AI

We want to be clear when artificial intelligence is involved in providing the service.

AI-assisted chat

Quick Prints uses technology provided by Anthropic to help power our chat experience and guide you through the Quick Prints process.

Anthropic receives the content of the conversation required to provide that service.

We do not separately send Anthropic your photographs, payment-card information, delivery address or Quick Prints order number as part of the AI chat process.

Please remember, however, that if you choose to include personal information within something you type into the chat, that information forms part of the conversation being processed.

Anthropic does not use Quick Prints API conversations to train its general AI models under its standard commercial service arrangements.

AI image enhancement

Where our system identifies that a photograph could benefit from enhancement, we may use fal.ai to improve it before printing.

fal.ai receives the photograph that needs to be enhanced but is not provided with your name, telephone number, address, payment information or Quick Prints order number alongside the image.

Quick Prints has configured a 30-day retention period for images processed through this service.

Your photographs will not be used by Timpson for AI model training.

You can opt out of AI image enhancement and still use Quick Prints.

6. Face detection is not facial recognition

Quick Prints uses a local technical process that can identify the position of a face within a photograph so that the picture can be centred and cropped appropriately.

This does not identify who the person is.

Quick Prints does not:

• use facial recognition;
• create a biometric template of your face;
• compare a face with photographs of other people; or
• use face detection to establish someone’s identity.

The process is used only to help position the photograph correctly for printing.

7. Who do we share information with?

We only share information where it is necessary to provide Quick Prints, operate the service or meet our legal obligations.

This includes:

WhatsApp and Meta

Quick Prints currently communicates with customers using the official WhatsApp Business service, without an additional third-party messaging provider.

Messages and images sent through WhatsApp benefit from the protections provided by WhatsApp, including end-to-end encryption where applicable.

WhatsApp and Meta also process information associated with your use of their services under their own terms and privacy policies.

Anthropic

Anthropic provides the AI technology used to support the Quick Prints chat service. It receives the conversational content necessary to provide that service, but we do not separately provide it with your customer images, order number, delivery address or payment details.

fal.ai

fal.ai provides AI image-enhancement services.

It receives the photograph being enhanced but does not receive the customer contact details or Quick Prints order identifier associated with it.

Stripe

Stripe processes the information necessary to take your payment and capture your delivery information.

Royal Mail

Royal Mail receives the name, address and other information necessary to deliver your order.

Timpson order and fulfilment systems

Information needed to process and fulfil your order may also be handled within Timpson’s existing order-management and production systems.

We may also share information where required by law, to prevent or investigate fraud or unlawful activity, to protect our legal rights, or in connection with a sale or restructuring of all or part of our business.

8. How long do we keep your information?

We do not keep personal information for longer than we need it. Our normal Quick Prints retention periods are:

Information	Normal retention period
Photographs forming part of a completed order	Up to 30 days
Photographs and draft order information where an order is not placed	Up to 7 days
Customer and completed order information, such as name, address and order details	Up to 1 year after your most recent interaction
Quick Prints conversation history	Up to 30 days
Anthropic API conversation inputs and outputs	Normally deleted within 30 days
Images processed through fal.ai	Up to 30 days
Returned or undelivered physical prints	Securely disposed of within 30 days

Certain financial and accounting information is handled through Timpson’s existing order-management and financial systems and may need to be retained for longer in accordance with our normal retention policies and legal obligations.

We may also need to retain limited information for longer where this is necessary to deal with a dispute, establish or defend a legal claim, prevent fraud or comply with the law.

9. Reprints and deleted photographs

Once the photograph-retention period has passed, we cannot reprint your photographs from our records.

If you would like another print after your photograph has been deleted, you will need to send the photograph to us again.

We therefore recommend that you keep your own copy of every photograph you send to Quick Prints.

10. Deleting your information

You can ask us to delete personal information that we hold about you.

Where you have the right to have information deleted, we will remove it from our systems and take appropriate steps in relation to information being processed for us by our service providers.

There may be circumstances where we must retain some information despite a request for deletion. For example, we may need to keep financial records required by law or information necessary to establish or defend a legal claim.

If you ask us to delete information while your order is still being processed, we may no longer be able to complete your order.

11. Children and young people

Quick Prints may be used by younger customers as well as adults.

If you are under 18, we encourage you to ask a parent or guardian to read this Privacy Policy with you if there is anything you do not understand.

If you access Quick Prints through WhatsApp, you must also be entitled to use WhatsApp under its own age requirements and terms.

We aim to collect only the information that we need to provide Quick Prints.

AI image enhancement is optional, and marketing is also optional and kept separate from the service itself.

12. Marketing

Messages that we need to send to provide Quick Prints or deal with your order are service messages. They are separate from marketing.

We will only use your contact details for Quick Prints marketing where you have made a separate, positive choice to receive it.

You do not need to agree to marketing in order to use Quick Prints.

You can withdraw your marketing consent at any time. Doing so will not stop service messages that we need to send about an enquiry or order.

We will never use photographs submitted by Quick Prints customers in Timpson marketing.

13. International processing

Some of the technology providers involved in Quick Prints operate internationally and may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, appropriate safeguards must be used in accordance with UK data protection law.

These may include processing in a country recognised as providing adequate protection or the use of approved contractual safeguards.

You can contact our Data Compliance Manager if you would like further information about the safeguards applying to your information.

14. How do we protect your information?

We use appropriate technical and organisational measures designed to protect the personal information handled through Quick Prints.

In particular:

• photographs are not stored on Quick Prints kiosks or other local branch devices;
• ordinary Quick Prints administrative users cannot view customer photographs through the Quick Prints back-office system;
• service providers receive only the information needed for the particular service they provide;
• customer contact details and order identifiers are not supplied to fal.ai with photographs submitted for enhancement;
• retention periods are used so information is deleted when it is no longer required; and
• access to personal information is limited to those who need it to operate or support the service.

No internet-based service can be guaranteed to be completely secure, but we regularly review the safeguards used to protect personal information.

15. Your data protection rights

Depending on the circumstances and the reason we are using your information, you may have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your personal information;
• ask us to restrict the way we use your information;
• object to certain uses of your information;
• receive certain information you have given us in a portable format; and
• withdraw your consent at any time where we rely on consent.

These rights do not apply in every circumstance.

To exercise any of your rights, please contact the Data Compliance Manager using the details at the beginning of this policy.

Your right to object

Where we rely on our legitimate interests to use your personal information, you have the right to object to that processing.

If you object, we will consider your circumstances and whether we have compelling legitimate reasons to continue processing the information.

16. Automated decision-making

Quick Prints uses automation and AI to help provide the service, including the AI-assisted chat service, image enhancement and the technical positioning of photographs.

Quick Prints does not use solely automated decision-making to make decisions about you that have legal or similarly significant effects.

17. The Timpson website and cookies

If you access Quick Prints through the Timpson website, the main Timpson Privacy and Cookies Policy also apply to information collected through the website, including the use of cookies and similar technologies.

18. Complaints

If you are unhappy with the way we have used your personal information, please contact our Data Compliance Manager first so that we can investigate your concerns.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including where Quick Prints changes, new messaging services or technology are introduced, or our legal obligations change.

The latest version will show the date on which it was last updated.