Marmalade

Privacy Policy

Last updated: October 2026

1. Who We Are

Marmalade is a private family sharing service with a printed edition. The data controller is East Hill SASU, a company registered in France (RCS Paris 130 366 065), 173 rue de Courcelles, 75017 Paris. You can reach us at admin@marmalade.family.

2. What We Collect

We collect the following personal data:

3. Lawful Basis for Processing

Two laws protect your data: the UK GDPR, because Marmalade is offered to people in the United Kingdom, and the EU GDPR, because East Hill is established in France. We process your data under the following lawful bases, which are the same in both:

4. How We Use Your Data

We use your data to operate the Marmalade service, prepare and print your family’s editions, process payments, send notifications you have opted into, improve the service, and prevent abuse. We never use anyone’s photos or captions for marketing, for advertising or to train models, and we do not use face recognition.

5. Who We Share Data With

Members of your family see what you share, and the person who receives the edition reads what is printed in it. We may disclose data where the law requires it. We share your data with the service providers who help us run Marmalade:

We never sell your personal data. We never share your data with advertisers.

6. International Transfers

East Hill is based in France and Marmalade’s main database is in the European Union. Your editions are prepared and printed in the United Kingdom. The United Kingdom and the European Union each recognise the other’s data protection law as adequate, and data moves between them on that basis. Some of our providers are in the United States. Those transfers rely on the EU-US Data Privacy Framework and its UK extension where the provider is certified, and otherwise on the European Commission’s standard contractual clauses with the UK addendum. You can ask us for a copy of these safeguards at admin@marmalade.family.

7. Data Retention

8. Your Rights

Under the UK GDPR and the EU GDPR, you have the right to access, rectify, erase, restrict processing, port your data, and object to processing. You can exercise some of these rights directly in the app (delete your account). For any other requests, including data export, email us at admin@marmalade.family. We answer within one month. You can withdraw a consent or object at any time, and you can tell us what should happen to your data after your death. We make no automated decision that has a legal effect on you. To complain, write to admin@marmalade.family; we acknowledge within 30 days.

If you are a parent or guardian, you may exercise data rights on behalf of your child, including requesting access to, correction of, or deletion of your child’s personal data that appears in photos or captions. If your child is now an adult, they may exercise these rights directly. We give particular weight to erasure requests relating to data collected about someone as a child, in line with ICO guidance.

9. Children

Marmalade is designed for adults. Only people aged 18 and over may create accounts. Children do not create accounts or use the service directly.

We recognise that parents and guardians share photos that include their children within private families. This is a core part of how families use Marmalade. We process this data under legitimate interests — the shared interest of the family and Marmalade in providing a private family sharing service with a printed edition, balanced against the child’s rights under UK GDPR.

Children’s data is only used within private families to provide the service. We never use children’s data for marketing, advertising, profiling, or any purpose beyond the core family-sharing service.

If you are not a member of a Marmalade family but believe a photo of your child has been shared without your consent, please contact us at admin@marmalade.family. We will investigate and remove the content where appropriate.

10. Cookies and Tracking

The Marmalade app uses no cookies. We do not use advertising cookies or collect the IDFA (Identifier for Advertisers). Usage events (for example, app opened or moment shared) stay in our own database with your account id and are deleted after 180 days. Crash and performance reports go to Sentry with your account id, never your photos, your captions or your name. Our website, marmalade.family, uses Google Analytics only if you agree; the copy of this policy published there explains how.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes through the app or by email, with reasonable notice before changes take effect.

12. Contact and Complaints

For questions about this policy or your data, email us at admin@marmalade.family.

You also have the right to complain to a data protection authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk). Because East Hill is established in France, you can also contact the French authority, the CNIL (cnil.fr).

13. This Website

This section is about the website marmalade.family. The rest of this policy is about the Marmalade app.

The website asks before it uses Google Analytics. If you choose "Agree", Google Analytics sets cookies in your browser (their names start with _ga) and tells us which pages are visited, roughly where visitors are, what kind of device they use, and which website or link they came from. We use this only to see how people find Marmalade. Lawful basis: consent. The provider is Google Ireland Limited, and the data may be processed in the United States under the safeguards described above.

If you choose "No thanks", Google Analytics does not load and no cookie is set. Your choice is kept in your browser's own storage, not in a cookie. To change it, clear the site data for marmalade.family in your browser and the website will ask again.

The website is served by Cloudflare, which processes technical data such as your IP address to deliver the pages and to protect the site. The website has no account, no form and no advertising.