guidegalleryGet the app

Privacy Policy

Last updated: July 2026 (UK & US coverage)

1. Overview

GuideGallery ("we", "us", "our") operates the GuideGallery platform for tour guides to share photos and receive optional tips. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service. By using GuideGallery, you agree to this policy.

GuideGallery is the data controller for personal information handled through the Service and is registered with the UK Information Commissioner's Office (ICO). This policy applies to guides and guests in both the United Kingdom and the United States. Depending on where you live, additional rights may apply to you under the UK GDPR, the EU GDPR, or United States state privacy laws such as the California Consumer Privacy Act as amended by the CPRA (see Section 8).

Our ICO registration number is ZC194329. You can verify our registration on the ICO register of fee payers.

2. Information We Collect

We collect information necessary to provide the service:

  • Account information: Email, name, phone number (optional), profile photo
  • Galleries and photos: Photos you upload, gallery metadata (name, location, share tokens)
  • Tips and transactions: Tip amounts, payout history, transaction records
  • Device information: Push notification tokens for tip notifications
  • Usage data: Gallery views, tip patterns for analytics and improving the service
  • Guest receipts (optional): When a guest enters an email during tipping, we use it only to send a tip confirmation email

3. How We Use Data

We use your data to: provide the GuideGallery service; process tips and payouts; send transactional emails (tip receipts, password reset); improve the service via analytics; provide support; maintain security; and comply with legal obligations.

4. Third-Party Processors

We use trusted third-party processors. We do not sell your personal data. Processors and their privacy policies:

GuideGallery does not store full card numbers or bank account details on our servers; these are handled by Stripe.

5. Data Retention

  • Photos: Configurable per gallery (default 7 days); photos may be automatically deleted after the retention period
  • Financial records: 7 years for regulatory compliance
  • Account data: Retained until you request deletion; we process deletion requests within 30 days

6. Data Sharing

We do not sell your personal data. We share data only with the processors listed above as necessary to operate the service, and when required by law or to protect rights and safety. Guest emails provided for receipts are used solely for tip confirmation emails.

7. Security

We use TLS encryption in transit and encryption at rest. Access is controlled via role-based permissions and unique tokens for gallery access. We maintain audit logs for compliance. Despite these measures, no system is completely secure.

8. Your Rights

UK & EU (UK GDPR / EU GDPR). If you are in the United Kingdom or European Union, you may have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restrict processing: Limit how we process your data
  • Data portability: Receive your data in a portable format
  • Object: Object to processing of your data
  • Withdraw consent: Withdraw consent at any time where processing is based on consent

You also have the right to lodge a complaint with a supervisory authority. In the UK this is the Information Commissioner's Office (ICO).

United States (California and similar state laws). If you are a California resident, the CCPA/CPRA gives you the right to:

  • Know / access: Request the categories and specific pieces of personal information we have collected about you
  • Delete: Request deletion of personal information we collected from you, subject to legal exceptions
  • Correct: Request correction of inaccurate personal information
  • Opt out of sale/sharing: We do not sell or share your personal information as those terms are defined under the CPRA
  • Limit sensitive information: We use financial and similar sensitive information only to provide the Service and as permitted by law
  • Non-discrimination: We will not discriminate against you for exercising your privacy rights

To exercise any of these rights, contact hello@guidegallery.app. You may use an authorised agent to submit a request on your behalf. We will verify your request and respond within the timeframe required by applicable law (generally within 30 days for UK/EU requests and 45 days for California requests, extendable where permitted). In the iOS app, go to Settings → Delete Account to permanently delete your account immediately once your payout balance is zero.

9. Cookies and Tracking

We use minimal cookies and tracking. Essential cookies are used for authentication and session management. We may use analytics to improve the service. We do not use third-party advertising cookies.

10. Children

The Service is not intended for users under 18. We do not knowingly collect data from anyone under 18. If you believe we have collected data from someone under 18, please contact us and we will delete it.

11. International Transfers

Your data may be processed in the United Kingdom, United States, European Union, or other jurisdictions where our processors operate. When we transfer personal data outside the UK or EU, we use appropriate safeguards (including the UK International Data Transfer Agreement/Addendum, EU standard contractual clauses, and applicable adequacy decisions) to protect your data.

12. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice. The "Last updated" date at the top reflects the most recent revision. Continued use after changes constitutes acceptance.

13. Contact

For questions, data requests, or privacy concerns, contact us at hello@guidegallery.app.

← Back to home