Privacy Policy
Your privacy is important to us. This policy explains how MockupKit collects, uses, and protects your personal data in compliance with UK GDPR and the Data Protection Act 2018.
Last updated: 6 December 2025
1. Information We Collect
1.1 Personal Information
We collect personal information that you voluntarily provide to us when you:
- Create an account or register for our services
- Upload PSD files and artwork for mockup generation
- Contact us for support or inquiries
- Subscribe to our newsletter or marketing communications
- Participate in surveys or feedback forms
1.2 Types of Data Collected
Account Information
- • Name and email address
- • Password (encrypted)
- • Company name (if applicable)
- • Billing address
Usage Data
- • IP address and location
- • Browser type and version
- • Pages visited and time spent
- • Mockup generation history
1.3 File Data
When you upload PSD files and artwork, we temporarily store this data to process your mockups. Files are automatically deleted from our servers after processing, typically within 24 hours.
1.4 Generated Mockups
Mockup images generated from your artwork are stored on our servers for a maximum of 48 hours to allow you to download them. After this period, all generated mockup files are automatically and permanently deleted from our systems.
2. How We Use Your Information
We use your personal information for the following purposes:
Service Delivery
- • Process and generate mockups
- • Provide customer support
- • Manage your account
- • Process payments
Communication
- • Send service updates
- • Respond to inquiries
- • Send marketing emails (with consent)
- • Provide technical support
2.1 Legal Basis for Processing
Under UK GDPR, we process your personal data based on:
- Contract performance: To provide our mockup generation services
- Legitimate interests: To improve our services and prevent fraud
- Consent: For marketing communications and non-essential cookies
- Legal obligation: To comply with UK tax and accounting requirements
3. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:
- Service Providers: Trusted third-party services that help us operate our platform (e.g., cloud storage, payment processing)
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In the event of a merger, acquisition, or sale of assets
- Consent: When you have given explicit consent for specific sharing
4. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
Encryption
All personal data is encrypted in transit and at rest using industry-standard protocols
Access Controls
Strict access controls and authentication mechanisms
Monitoring
Continuous monitoring and security auditing
5. Your Rights Under UK GDPR
As a UK resident, you have the following rights regarding your personal data:
Right of Access
Request a copy of your personal data we hold
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data
Right to Restrict Processing
Limit how we use your data
Right to Data Portability
Receive your data in a structured format
Right to Object
Object to processing for marketing purposes
6. Data Retention
We retain your personal data only for as long as necessary:
- Account Data: Until you delete your account or request deletion
- Uploaded Files: Automatically deleted within 24 hours of processing
- Generated Mockups: Automatically deleted after 48 hours
- Usage Data: Retained for up to 2 years for analytics purposes
- Billing Records: Retained for 7 years as required by UK law
7. Cookies and Tracking
We use cookies and similar technologies to enhance your experience:
Essential Cookies
Required for basic website functionality and security
Analytics Cookies
Help us understand how you use our website
Preference Cookies
Remember your settings and preferences
8. International Data Transfers
Some of our service providers may be located outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:
- Adequacy decisions by the UK government
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules
- Certification schemes and codes of conduct
9. Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification to registered users
- Displaying a prominent notice on our platform
11. Contact Us
If you have any questions about this privacy policy or wish to exercise your rights, please contact us:
Data Protection Contact
12. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK's data protection authority: