Privacy Policy | LTV CarnivalLTV Carnival | Carnival Photos & Video Reels Worldwide

Privacy Policy

Last updated: May 2026

[Registered Company Name Ltd] (“LTV Carnival”, “we”, “us”) takes your privacy seriously. This policy explains what data we collect, why, how we use it and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

We are the data controller for the personal information processed via ltvcarnival.com. You can contact our data team at support@ltvcarnival.com.

2. What we collect

  • Account data — name, email, profile picture when you sign up (including via Google sign-in).
  • Purchase data — billing address, items purchased, transaction IDs. Card details are handled directly by Stripe; we never see or store full card numbers.
  • Photos and biometric data — if you use our Face Search feature, your selfie is sent to AWS Rekognition to identify matching carnival photos. The face template is processed in-region and not retained beyond the search session. We rely on your explicit consent as the lawful basis (UK GDPR Art. 9(2)(a)).
  • Marketing preferences — your subscription state for our Klaviyo-managed newsletters.
  • Technical data — IP, browser, device type, anonymous analytics via Google Analytics and Meta Pixel for advertising attribution.

3. Why we use it (lawful bases)

  • Contract — to fulfil photo/video purchases and bookings.
  • Consent — Face Search biometrics, marketing emails, non-essential cookies.
  • Legitimate interests — fraud prevention, service improvement, transactional emails.
  • Legal obligation — tax records, KYC where required.

4. Sharing your data

We share data only with the processors needed to run the service:

  • Stripe — payment processing
  • Cloudflare R2 / Stream — media hosting
  • AWS Rekognition (eu-west-2) — face matching, only if you initiate it
  • Klaviyo — email delivery and marketing automation
  • Google Analytics & Meta Pixel — anonymised performance/ads tracking
  • Emergent — hosting infrastructure

We do not sell your personal data.

5. International transfers

Some of our processors are based in the United States. Where data is transferred outside the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses to provide an essentially equivalent level of protection.

6. How long we keep your data

  • Account & orders — for the life of your account plus 7 years for tax records.
  • Face Search inputs — deleted within 24 hours of the search.
  • Marketing data — until you unsubscribe (one-click link in every email).
  • Anonymous analytics — 14 months.

7. Your rights

Under UK GDPR you have the right to:

  • Access a copy of your personal data
  • Correct inaccurate data
  • Erase your data (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these, email support@ltvcarnival.com. We respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use strictly necessary cookies (login, cart) without consent, and ask for consent for analytics & advertising cookies. You can change your preferences at any time via the cookie banner.

9. Marketing emails

We use Klaviyo to send marketing emails. Every email contains a one-click unsubscribe link managed by Klaviyo. You can also email us to be removed.

10. Changes to this policy

We'll update this page if our practices change. The “Last updated” date at the top reflects when it last changed.