Care and privacy

Privacy policy

How we handle and protect your personal details, photographs and order information.

Last updated: 22 October 2026

Who we are

Ettermæle is operated by BRAVES GLOBAL AS, company no. 917 187 525, Storgaten 29A, 4876 Grimstad, Norway. For questions about your personal data, contact [email protected].

Your photographs and account

We process the photographs you upload, your chosen styles, account and contact details, order information and any messages you send us to provide previews, Studio, printed portraits and customer care. We use Stripe to process payment securely. Our Norwegian shop also offers Vipps. Payment providers process the payment and transaction details needed to complete your purchase and prevent fraud, separately from optional statistics and advertising. We do not sell your uploaded photographs. Using an image publicly as a customer example requires your separate, voluntary consent, which you can withdraw.

Private previews

When you request a preview, we store your photograph, browser session information and IP address to provide the service, investigate errors and prevent misuse. Free previews are limited. You may choose to enter an email address to unlock an extra draft. We send an offer or follow-up only when you separately opt in.

Unfinished preview drafts are normally removed after seven days. A separate private copy linked to an email address is normally removed after 30 days unless it becomes part of an order. Studio images remain in your private account until removed in accordance with your request and our applicable retention obligations.

Why we process data

Our legal bases are performance of our agreement with you, our legitimate interests in service security and support, legal obligations such as accounting, and your consent where required for optional marketing or cookies. You can withdraw marketing consent at any time without affecting your order.

Service providers

We use hosting, image-processing, payment, email, production and delivery providers as needed to deliver the service. Image processing may involve OpenAI; print production and fulfilment may involve Gelato. Providers receive only the information needed for their role. Where data is transferred outside the EEA or UK, we must use the safeguards required by applicable data protection law.

Cookies and privacy choices

Necessary cookies and browser storage support sign-in, your cart, payments and private preview sessions. A currency choice is remembered for 30 days. These functions are necessary to provide the service you request.

Optional statistics and advertising tracking stay off until you consent. You can accept or reject both, or choose them separately. You can use the shop regardless of your choice. The consent box appears after 20 seconds. Your choice is saved for 180 days and can be changed or withdrawn through Privacy choices at the bottom of the page.

With statistics consent, we measure visits to improve the website. With marketing consent, Meta receives information about visits and purchases to measure advertising and show relevant ads. We also measure which channels lead to orders, using cookies for the current browser session. Meta may use the cookies _fbp and _fbc, normally for up to 90 days. Read more in Meta’s privacy policy.

We keep a record of your privacy choices, including the purposes you selected, the time and the consent version, linked to a random identifier in a necessary cookie. We respect Do Not Track and Global Privacy Control by keeping optional tracking off.

Retention

We retain order records for applicable accounting requirements and other personal data only as long as needed for the stated purpose.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent. Contact us using the address above. You may also complain to a relevant data protection authority, including Norway’s Datatilsynet or the UK’s Information Commissioner’s Office.

We also keep a technical fingerprint (SHA-256 hash) of uploaded image files in a durable register with no automatic expiry. The register does not contain the image itself, its file path, an email address or an IP address. It contains timestamps, the number of recorded uploads and any one-time offer history. We use it to recognise the same file when uploaded again and prevent a one-time offer from being issued more than once. An offer may be linked to the current browser session and an order. Removing a draft or image file does not automatically remove its fingerprint. Offers appear in the shop and do not sign you up for email marketing.

Statistics

If you consent to statistics, we measure visits and screen and window sizes to improve the website. Screen measurements do not include names, email addresses, photographs or customer and order IDs. You can change or withdraw your consent through Privacy choices at the bottom of the page. We respect Do Not Track and Global Privacy Control.