Privacy notice

This notice says what Yearcrest, run by Ben Amato, a sole proprietor in South Africa, trading as Yearcrest, collects about you, why, and who else sees it. We are the responsible party for your information under South Africa's Protection of Personal Information Act (POPIA).

What we collect

• Your account: your name, email address and password, or the Google or Facebook account you sign in with.
• What you make: your crests and what is on them — photos, names, dates, events and words — and the groups you make or join.
• What you bring in when you ask: events from a Google Calendar you connect, and birthdays and profile photos of Facebook friends who use the app, when you import them.
• Orders: the delivery name, address and phone number for a framed print, and what you bought. We never see or store your card details.
• How the site is used: what our servers record to run and protect it, such as your IP address and browser, and the cookies that keep you signed in.

Why we use it

To run your account and save and show your crests; to share them with the people and groups you choose; to render PDFs and print and deliver framed orders; to take payment and keep records of packs and orders; to send you emails about your account, your orders and packs, such as a reminder before a pack ends; and to keep the site secure. We don't sell your information, and we don't use it for advertising.

Who else sees it

Only what each needs for its part:

• Paddle, which sells packs as merchant of record and takes their payment.
• Paystack, which takes payment for framed prints.
• Our print partner, which receives the print file and delivery details of a framed order.
• Google and Facebook, when you sign in with them or import from them, under their own privacy policies.
• Unsplash, when you search its photos in the studio.
• The people and groups you share a crest with, and anyone you give its display link.

Some of these process information outside South Africa; where they do, it is under protections comparable to POPIA's.

How long we keep it

As long as you have an account. A crest you delete is deleted. Order and payment records are kept as long as the law requires for tax and accounting. If you ask us to delete your account, we delete it and what you made, apart from those records.

Your rights

You can ask to see the information we hold about you, have it corrected or deleted, or object to how we use it. Disconnect Google Calendar or Facebook at any time, in the studio or in their own settings. Write to support@yearcrest.com. If you're not satisfied with our answer, you can complain to South Africa's Information Regulator (inforegulator.org.za).

Changes

We'll update this notice when what we do changes; the date below says when it last did.