1. Data Controller

Virix Ltd (Company No. 16325097) operates Santa Video and is the data controller for your personal information.

Registered Office: 85 Great Portland Street, London, W1W 7LT, United Kingdom
Virtual Business Address: 5 Brayford Square, London, E1 0SG, United Kingdom
Data Protection Contact: general@virixlabs.com

2. Information We Collect

We collect the following categories of information:

Information You Provide

Email address
Phone number (optional)
Child's name and details for video personalization
Photos you upload

Automatically Collected Information

IP address
Browser type and version
Device information
Usage patterns and interactions with our website

Third-Party Sources

Payment processors (Stripe)
Analytics services

3. How We Use Your Information

We use your information to:

Create personalized video greetings
Process transactions and payments
Deliver your video via email
Communicate with you about your order
Improve our services and website
Comply with legal obligations

4. Cookie Policy

We use cookies to improve your experience on our website. Only essential cookies are activated initially. You can accept or decline analytics and marketing cookies through our cookie consent banner.

Essential cookies are necessary for the website to function and cannot be disabled.

5. Data Retention

Photos and personal information used to create videos are deleted within 90 days after video delivery. We retain transaction records as required by law for accounting purposes.

6. Data Protection

We implement appropriate security measures including:

SSL/TLS encryption for data transmission
Secure payment processing (PCI-DSS compliant via Stripe)
Role-based access controls
Regular security assessments

7. Your Rights (GDPR)

Under the UK GDPR and Data Protection Act 2018, you have the right to:

Access - Request a copy of your personal data
Rectification - Request correction of inaccurate data
Erasure - Request deletion of your data ("right to be forgotten")
Restriction - Request limitation of processing
Portability - Receive your data in a portable format
Objection - Object to processing of your data

To exercise any of these rights, please contact us at general@virixlabs.com. We will respond within 30 days.

8. Children's Privacy

Our service creates videos for children but we do not knowingly collect information directly from minors without parental involvement. Parents or legal guardians provide all information about children for video personalization.

9. Third-Party Services

We may share your data with:

Stripe - For payment processing
Email service providers - For video delivery
Analytics providers - For website improvement

We do not sell your personal information to third parties.

10. International Transfers

Your data may be processed outside the UK. Where this occurs, we ensure appropriate safeguards are in place in compliance with UK data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

For any questions about this Privacy Policy or to exercise your data rights, please contact us:

general@virixlabs.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.