Privacy & Terms

Elite AI Portraits ("we", "us", "our") is a UK-based luxury AI portrait service. We operate the website at eliteaiportraits.com and related domains. Our contact email is [email protected].

We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect the following categories of personal data when you use our service:

• ✦Contact information: Your email address, provided when you place an order or make an enquiry.
• ✦Photographs: The photos you upload for the purpose of creating your AI portraits. These are stored securely on our cloud servers and used solely to produce your commissioned portraits.
• ✦Order preferences: Your selected portrait styles and any visual direction or instructions you provide.
• ✦Payment data: Payment is processed entirely by Stripe. We do not store your card number, CVV, or any raw payment credentials on our servers. We receive only a transaction reference and confirmation of payment.
• ✦Technical data: Standard server logs including IP address, browser type, and pages visited, collected automatically for security and performance purposes.

We use your personal data for the following purposes:

• ✦To create and deliver your commissioned AI portraits.
• ✦To communicate with you about your order, including delivery confirmation and any follow-up queries.
• ✦To process your payment securely via Stripe.
• ✦To comply with our legal and regulatory obligations.
• ✦To improve the quality and performance of our service.

We do not use your photographs for any purpose other than creating your portraits. We do not use them for training AI models, marketing materials, or any third-party purpose without your explicit written consent.

We process your personal data on the following legal bases under UK GDPR:

• ✦Contract performance: Processing your photos and delivering portraits is necessary to fulfil the contract you enter into when placing an order.
• ✦Legitimate interests: We process technical data for website security and service improvement, where this does not override your rights and freedoms.
• ✦Legal obligation: We may retain certain records to comply with financial and tax regulations.

Your photographs and order details are retained for a period of 30 days after delivery of your completed portraits, after which they are permanently deleted from our servers. You may request earlier deletion at any time by contacting us. Payment records are retained for 7 years in accordance with UK tax and accounting requirements.

We do not sell, rent, or share your personal data with third parties for marketing purposes. We share data only with the following trusted service providers, strictly as necessary to deliver our service:

• ✦Stripe: Secure payment processing. Stripe is PCI-DSS compliant and processes all card transactions on our behalf.
• ✦Cloud storage provider: Secure storage of uploaded photographs during the portrait creation process.

All third-party providers are contractually required to handle your data securely and in accordance with UK GDPR.

Under UK GDPR, you have the following rights regarding your personal data:

• ✦Right of access: You may request a copy of the personal data we hold about you.
• ✦Right to rectification: You may request correction of inaccurate or incomplete data.
• ✦Right to erasure: You may request deletion of your personal data, subject to our legal obligations.
• ✦Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
• ✦Right to data portability: You may request your data in a structured, machine-readable format.
• ✦Right to object: You may object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We use only essential session cookies necessary for the secure operation of our website, including authentication and payment processing. We do not use tracking, advertising, or analytics cookies. No cookie consent banner is required as we rely solely on strictly necessary cookies.

We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated effective date. Continued use of our service after changes constitutes acceptance of the revised policy. This policy was last updated on 3 April 2026.