Legal

Privacy Policy

Last updated: 8 August 2026

This Privacy Policy explains how Aqua Fusion Media Ltd (“we”, “us”, “our”) collects, uses, shares and protects your personal data when you use Flipazine (the “Service”) at flipazine.com. We are the “data controller” for the personal data described here, and we process it in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. The data we collect

We collect and process the following categories of personal data:

• Account data — your name, email address, and a securely hashed version of your password. If you register a passkey, we store the passkey's public credential (we never receive your device's private key or biometrics).
• Team data — where you invite colleagues or are invited to a team, we process the email addresses and account details needed to manage that team.
• Content you upload — the PDF files you convert and the flipbooks, images, page text and settings generated from them. These may contain personal data if you choose to include it in your documents; you control that content.
• Billing data — your subscription plan, billing status and a customer reference held by our payment processor. We do not store your card details — card payments are handled entirely by Stripe (see section 4).
• Usage and technical data — API keys you create, request counts used for rate-limiting, log data, IP address, browser/device information and similar technical details generated when you use the Service.
• Communications — messages you send us through the contact or support forms, or by email, and our replies.

2. How and why we use your data

We only process your personal data where we have a lawful basis to do so under Article 6 of the UK GDPR:

3. Who we share your data with

We do not sell your personal data. We share it only with the service providers (“processors”) that we rely on to run Flipazine, each bound by contract to protect it and use it only on our instructions:

• Amazon Web Services (AWS) — file storage (S3), content delivery (CloudFront) and email delivery (SES). Your files and generated flipbooks are stored in the AWS London (eu-west-2) region.
• Neon — our managed PostgreSQL database, hosted on AWS in the London (eu-west-2) region.
• Google Cloud Platform — application hosting and background job processing (Cloud Run, Cloud Tasks).
• Cloudflare — content delivery and network security in front of the Service.
• Stripe — payment processing. Stripe is an independent controller of the card data you enter with them; see the Stripe Privacy Policy.

We may also disclose personal data where required by law, to enforce our Terms & Conditions, or in connection with a merger, acquisition or sale of assets (in which case we will notify you).

4. International transfers

We keep your account content and database within the UK/EU (AWS London) wherever we can. Some providers (for example Stripe and Google) may process limited data outside the UK. Where that happens, we rely on appropriate safeguards recognised under UK data protection law — such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

5. How long we keep it

We keep your account data and content for as long as your account is active. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records (for example billing and tax records, which we keep for the period required by law — generally six years). Backups are cycled out on a rolling basis.

6. Your rights

Under UK data protection law you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing in certain circumstances;
• data portability — receive your data in a portable format;
• withdraw consent at any time where we rely on consent; and
• lodge a complaint with a supervisory authority.

To exercise any of these rights, email support@flipazine.com. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to put things right first.

7. Cookies

We use a small number of cookies, almost all of which are strictly necessary to run the Service. For the full list and to change your preferences at any time, see our Cookie Policy.

8. Security

We take appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), hashing of passwords, access controls, and hosting with reputable, security-certified infrastructure providers. No system is ever completely secure, but we work to protect your data and to notify you and the ICO of any breach where we are legally required to do so.

9. Children

Flipazine is not directed to children and is not intended for use by anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you. Please review it periodically.

11. Contact us

Questions about this policy or your data? Email support@flipazine.com or write to Aqua Fusion Media Ltd at the registered office address above.