AANANTO PRIVACY NOTICE

1. Who we are

AANANTO is operated by Steven Dobrowski, trading as AANANTO and PhotoGraphixDesigns, at PhotoGraphixDesign Studios, Broomside, Bishop Auckland, County Durham, DL14 8PX, United Kingdom.

For the purposes of UK data-protection law, Steven Dobrowski is the controller of the personal information described in this Notice.

Privacy and data-protection enquiries should be sent to:

support@aananto.com

2. Personal information we may collect

The information we process depends on how you use AANANTO.

Account information

We may process:

• your name;
• email address;
• username or account identifier;
• registration and login status;
• membership-group information; and
• account and access status.

Membership and payment information

Where you use paid AANANTO services, we may process:

• the membership or upgrade you selected;
• whether the purchase is Annual or Lifetime;
• payment amount and currency;
• PayPal subscription, order, capture, sale, refund, reversal, chargeback or dispute references;
• payment and entitlement status;
• payment, activation, cancellation, renewal, refund and reversal dates; and
• records needed to provide, suspend, restore or remove Full Artisan or Artisan Create access.

AANANTO does not receive or store your full debit-card or credit-card details. Payment-card and PayPal-account information is processed by PayPal.

Purchase consent and confirmation information

When you make a qualifying paid purchase, we may also record:

• whether you expressly requested immediate supply of the paid digital content;
• the date and time that consent was given;
• the version of the consent wording presented to you;
• the Terms version applying to the purchase;
• the date and time your paid access was activated;
• the applicable AANANTO 72-hour change-of-mind refund deadline;
• the registered AANANTO email address to which your purchase confirmation is to be sent;
• confirmation-delivery status and delivery attempts;
• confirmation date and message/reference information; and
• information needed to show that the confirmation was sent to the correct registered account.

After successful confirmation delivery, AANANTO may remove the full recipient email address from the purchase-confirmation record while retaining a masked address and one-way cryptographic identifier as evidence of where the confirmation was sent.

Your normal registered email address remains part of your AANANTO account unless separately changed or deleted in accordance with applicable account and legal requirements.

Artisan Create — My Jigsaws information

If you use Artisan Create — My Jigsaws, we may process:

• images you choose to upload;
• private puzzle and thumbnail images created from those uploads;
• titles and information associated with your personal jigsaws;
• creation, retirement, restoration and permanent-removal information;
• information needed to apply the My Jigsaws retained-jigsaw allowance; and
• technical information needed to process, store and privately deliver your personal jigsaws.

Uploaded originals are processed to create the private jigsaw files required by the service and are normally discarded after successful processing.

My Jigsaws is not intended to be used as a backup service for your original images. You should keep your own copies of any images that matter to you.

An uploaded image may contain personal information about you or other identifiable people. You should only upload images that you are entitled to use and should consider the privacy of other people shown in them.

AANANTO does not use uploaded My Jigsaws images for facial recognition or biometric identification.

Technical and security information

We may process:

• IP address;
• browser and device information;
• session identifiers;
• date and time of access;
• server and security logs;
• failed login or checkout information;
• fraud-prevention information; and
• information concerning suspected misuse or interference.

Customer-service information

We may process:

• emails and other communications sent to AANANTO;
• activation, cancellation, refund or complaint requests;
• payment or PayPal dispute enquiries;
• licensing enquiries; and
• information supplied to help identify an account or transaction.

Game and browser-storage information

AANANTO games may store preferences, settings, best scores, last-game information and saved progress in your browser or device storage.

Examples may include game-mode preferences, sound and display settings, puzzle selection, timer or move information and locally saved puzzle state.

Information stored solely on your device is not normally available to AANANTO unless it is later supplied to us for support or synchronised through an account-based feature.

Please also see our Cookie & Browser Storage Notice.

3. How we use personal information

We use personal information where necessary to:

• create and administer AANANTO accounts;
• authenticate users and maintain login sessions;
• provide free and paid game access;
• process and verify membership payments;
• activate, maintain, cancel, restore, refund or revoke Full Artisan and Artisan Create entitlements;
• operate the private Artisan Create — My Jigsaws service;
• process uploaded images into private jigsaw and thumbnail files;
• store and privately deliver personal jigsaws to the member who owns the collection;
• apply My Jigsaws access and retained-jigsaw limits;
• send durable purchase and contract confirmations to the registered AANANTO email address;
• retain appropriate evidence of purchase, consent, confirmation delivery, refund and dispute events;
• respond to enquiries, complaints, refunds, payment disputes and licensing requests;
• detect fraud, account sharing, technical faults and security incidents;
• maintain transaction, tax, accounting and consumer-rights records;
• protect AANANTO, its users and its visual assets;
• diagnose faults and improve service reliability; and
• comply with legal and regulatory obligations.

How we use member-uploaded images

Images uploaded to Artisan Create are processed to provide your private My Jigsaws service.

AANANTO does not use your uploaded personal-jigsaw images, without your permission or a feature specifically initiated by you, for:

• public AANANTO galleries;
• advertising or marketing;
• sale to other people;
• licensing to other people;
• general display to other members; or
• training artificial-intelligence or machine-learning models.

Limited technical access may nevertheless be necessary for authorised AANANTO personnel or service providers where required to operate the service, investigate a fault or security issue, address misuse, or comply with the law.

4. Our lawful bases

UK data-protection law requires us to have an appropriate lawful basis for processing personal information.

Depending on the particular processing, we rely on the following.

Contract

We process information where this is necessary to:

• create and administer your account;
• provide the AANANTO services you request;
• provide Full Artisan membership;
• provide Artisan Create — My Jigsaws;
• process your uploaded images into private jigsaw files;
• administer payments and entitlements; and
• perform the contract entered into when a paid AANANTO membership or upgrade is purchased.

Legal obligation

We process information where necessary to:

• maintain records required by law;
• respond to statutory consumer rights;
• comply with tax and accounting requirements; and
• respond to lawful requests from public authorities.

Legitimate interests

We may process information where reasonably necessary to:

• secure the website and member accounts;
• prevent and investigate fraud and misuse;
• diagnose technical problems;
• maintain reliable services;
• maintain appropriate evidence of transactions, confirmations, refunds and disputes; and
• establish, exercise or defend legal rights.

When we rely on legitimate interests, we consider whether the processing is necessary and proportionate and whether the individual's interests or rights outweigh AANANTO's interests.

Consent

We use data-protection consent where it is required for optional processing such as certain cookies, browser-storage technologies, marketing communications or another genuinely optional use of personal information.

Where data-protection consent is relied upon, it can be withdrawn without affecting processing already carried out lawfully.

The immediate digital-access checkbox used during paid checkout serves a different purpose. It records your express consent and acknowledgement relating to immediate supply of paid digital content for consumer-contract purposes. AANANTO does not rely on that checkbox as the UK data-protection lawful basis for ordinary account, membership or payment processing.

5. Where the information comes from

We obtain personal information:

• directly from you when you register, communicate with us or use the service;
• from images and other content you choose to upload through Artisan Create;
• from your existing AANANTO account when we need, for example, your registered email address for a purchase confirmation;
• automatically from browser, device and server interactions;
• from PayPal when it confirms a payment, subscription, renewal, cancellation, refund, reversal, chargeback or dispute; and
• from hosting, email or other service providers where needed to operate and secure AANANTO.

6. Who we share information with

We only share information where there is a genuine reason to do so.

Relevant information may be shared with:

• PayPal, for payment processing, payment verification, subscriptions, refunds and disputes;
• website-hosting, storage, email and technical-service providers, where required to operate AANANTO;
• professional advisers, accountants or insurers where reasonably necessary;
• law-enforcement, regulatory or public authorities where legally required; and
• another person or organisation where reasonably necessary to protect legal rights or investigate suspected fraud or misuse.

Service providers involved in operating My Jigsaws may technically process member-uploaded images where this is necessary to host, store, transform, transmit, secure or back up the service.

AANANTO does not sell personal information to advertisers or data brokers.

We require service providers acting on our behalf to use personal information only for authorised purposes and to protect it appropriately.

7. International processing

Some service providers, including payment and technical-service providers, may process information outside the United Kingdom.

Where UK data-protection law requires safeguards for an international transfer, AANANTO will rely on an applicable lawful transfer mechanism or another protection recognised by UK law.

8. How long we retain information

We keep personal information only for as long as reasonably necessary for the purposes described in this Notice.

How long information is retained depends on matters such as:

• how long your AANANTO account or membership remains active;
• whether information is needed to provide your service;
• customer-support and account-recovery requirements;
• tax, accounting and consumer-law obligations;
• fraud-prevention and security requirements;
• applicable legal limitation periods; and
• any continuing complaint, refund, PayPal dispute, chargeback or legal claim.

Payment and contractual records

Payment, refund, consent, purchase-confirmation and contractual records may normally be retained for up to six years where required for accounting, tax, consumer-law or legal purposes.

This may mean that some transaction evidence is retained after the membership or entitlement concerned has ended.

Purchase-confirmation records

The full registered recipient email may be held temporarily in a checkout-confirmation record while delivery is pending.

After confirmed delivery, the full email address may be removed from that confirmation record while limited evidence such as the masked recipient, one-way recipient identifier, message reference, Terms/consent versions and relevant dates is retained where needed for contractual, consumer-rights or dispute evidence.

Artisan Create — My Jigsaws

Uploaded original images are normally discarded after they have been successfully processed into the private jigsaw files needed by My Jigsaws.

The resulting private puzzle and thumbnail files are retained while they are needed to provide and administer your personal My Jigsaws collection.

If you permanently remove a personal jigsaw through the service, it is removed from your retained My Jigsaws collection and its retained-jigsaw slot becomes available again.

Ending Artisan Create access does not currently mean that personal-jigsaw files are deleted immediately. Files and related records may continue to be retained where reasonably necessary for account recovery, customer support, administration or legal purposes.

AANANTO will update this Privacy Notice when a fixed post-access recovery and deletion timetable is introduced.

Customer-service records

Support correspondence may normally be retained for up to 24 months after the matter is resolved, unless it forms part of a transaction, complaint, dispute or legal record that needs to be kept longer.

Security information

Server and security logs are normally retained only for the period needed for security, investigation and troubleshooting, but may be kept longer where they relate to an identified incident.

Browser storage

Browser storage remains on the user's device until it expires, is replaced, or is removed by the user or browser.

Our actual deletion, archive and backup practices should remain consistent with these retention principles.

9. Your rights

Depending on the circumstances, UK data-protection law may give you rights to:

• be informed about how your information is used;
• receive a copy of personal information held about you;
• correct inaccurate or incomplete information;
• request deletion;
• restrict certain processing;
• object to certain processing;
• receive portable data;
• withdraw consent where processing relies on data-protection consent; and
• challenge certain solely automated decisions.

These rights are subject to legal conditions and exceptions.

Requests should be sent to:

support@aananto.com

We may need reasonable information to verify your identity before responding.

10. Automated processing and access decisions

AANANTO uses automated systems to apply straightforward membership and entitlement rules.

For example:

• verified PayPal payment information may activate a paid entitlement;
• renewal, cancellation, refund or reversal information may change the status or duration of access;
• Full Artisan access may come from an authorised AANANTO membership group or a valid independent paid entitlement; and
• Artisan Create access depends on Full Artisan access together with a valid Artisan Create entitlement and an active My Jigsaws capability.

These rules are used to provide and administer the service you have requested. They are not used for behavioural profiling, credit scoring or advertising profiles.

Where a transaction, entitlement or access decision appears wrong or is disputed, you can contact AANANTO and request that it is reviewed by a person.

11. Security

AANANTO uses reasonable technical and organisational safeguards designed to protect personal information.

These may include:

• restricted administrative access;
• protected server-side configuration;
• encrypted HTTPS connections;
• private server-side storage and access-controlled delivery for personal My Jigsaws images;
• payment-token and transaction-reference controls;
• protected checkout intents;
• purchase and confirmation evidence controls;
• access and security logging;
• PayPal webhook verification; and
• database and file backups.

No internet service can guarantee absolute security.

Users should keep their login credentials confidential and contact AANANTO if they suspect unauthorised access.

12. Complaints

If you have a privacy or data-protection concern, please first contact:

support@aananto.com

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal information has been handled unlawfully.

13. Changes to this Notice

AANANTO may update this Privacy Notice to reflect changes in law, technology, providers or business practices.

The current version and effective date will be published on this page.

Where required, material new uses of personal information will be brought to affected users' attention before the new processing begins.