Privacy policy

Effective date: August 25, 2026

Legacy Film Lab (“Legacy Film Lab,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and retain personal information when you visit legacyfilmlab.com, place an order, use our film-processing or photography services, visit our store, subscribe to communications, or otherwise interact with us (collectively, the “Services”).

1. Personal Information We Collect

Depending on how you interact with us, we may collect the following information.

Information you provide

  • Your name, email address, telephone number, billing address, and shipping address.
  • Account credentials and account preferences.
  • Order details, products and services purchased, payment status, and transaction history.
  • Customer-service inquiries, messages, feedback, and other communications.
  • Email and marketing preferences.
  • Film, photographs, negatives, digital images, scans, videos, instructions, filenames, metadata, or other materials you submit for processing or related services (“Customer Media”).

Payment-card information is generally collected and processed directly by Shopify or the applicable payment processor. We may receive limited payment information, such as payment status, card type, and the last digits of a payment card.

Information collected automatically

When you use our online Services, Shopify and our service providers may automatically collect:

  • IP address and approximate location.
  • Browser, device, operating-system, and network information.
  • Device identifiers and online identifiers.
  • Pages viewed, links selected, referring pages, searches, cart activity, and interactions with the Services.
  • Dates, times, and duration of visits.
  • Cookie choices, privacy preferences, and information needed for security, fraud prevention, and operation of the website.

Information received from other sources

We may receive information from Shopify, payment processors, shipping and delivery providers, business-management services, fraud-prevention providers, communications platforms, or other providers involved in fulfilling your request or operating our business.

2. How We Use Personal Information

We may use personal information to:

  • Process, fulfill, deliver, and manage orders.
  • Develop, scan, print, digitize, store temporarily, or otherwise process Customer Media as requested.
  • Create and maintain customer accounts.
  • Communicate about orders, service requests, deliveries, problems, or customer support.
  • Process payments, refunds, returns, and disputes.
  • Operate, maintain, troubleshoot, and improve the Services.
  • Provide requested website functionality and remember preferences.
  • Measure store performance using Shopify’s native store functionality.
  • Detect and prevent fraud, abuse, security incidents, and unlawful activity.
  • Maintain business, accounting, tax, and transaction records.
  • Send promotional communications when permitted by law and consistent with your preferences.
  • Comply with legal obligations and enforce our terms and policies.
  • Protect the rights, safety, and property of our customers, Legacy Film Lab, and others.

We do not use Customer Media for public display or promotional purposes unless we obtain separate permission from you.

3. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary:

  • Shopify: Shopify hosts and operates our ecommerce store, checkout, payment, security, customer-account, and store-management systems.
  • Payment providers: To authorize payments, process refunds, and prevent payment fraud.
  • Shipping and delivery providers: To prepare, track, and deliver orders.
  • Operational service providers: Such as accounting, workflow automation, customer communications, forms, order management, hosting, technical support, and data-storage providers.
  • Professional advisers: Including accountants, insurers, auditors, attorneys, and other professional advisers.
  • Government authorities and other parties: When reasonably necessary to comply with law, legal process, or enforceable government requests; protect safety or legal rights; investigate fraud; or enforce our agreements.
  • Business-transaction recipients: In connection with a proposed or completed merger, financing, acquisition, reorganization, sale of assets, or similar business transaction.

These recipients may use personal information only for the purposes permitted by their agreements with us or as independently permitted or required by law.

4. Shopify and Enhanced Services

Our store is powered by Shopify. Shopify processes personal information to provide ecommerce hosting, checkout, payment processing, fraud prevention, security, store analytics, and related services.

We have enabled Shopify Network Intelligence. This allows Shopify to use information from customer interactions with our store, other merchants, and Shopify to provide certain enhanced features and services. Depending on the service and applicable law, some Shopify processing may be considered “sharing” of personal information or processing for targeted advertising.

Your use of Shopify services may also be governed by Shopify’s own privacy notices. More information is available in Shopify’s Consumer Privacy Policy. You can also use Shopify’s privacy portal to learn about and exercise applicable privacy rights regarding Shopify’s processing.

5. Cookies and Similar Technologies

We and Shopify use cookies and similar technologies to operate and secure the online store, remember preferences, maintain carts and sessions, process checkout, prevent fraud, and understand store performance.

The cookie controls presented on our website may include:

  • Required: Necessary for security, checkout, account access, shopping-cart functionality, and basic website operation.
  • Personalization: Used to remember choices and provide personalized functionality.
  • Analytics: Used to understand website usage and store performance.
  • Marketing: Used to support marketing or advertising-related functionality.

Required technologies cannot ordinarily be disabled because the store cannot function properly without them. Where consent is required, you can accept or decline nonessential categories through our cookie banner. You can revisit your selections through the cookie-preferences link or privacy controls available on the website.

You may also restrict cookies through your browser. Blocking required cookies may prevent parts of the Services from functioning properly.

At the effective date of this Policy, our online-store measurement is provided through Shopify’s native store functionality. Nonessential uses of Shopify data are subject to the privacy choices described in this Policy where required.

6. Sale, Sharing, and Targeted Advertising

We do not sell personal information in exchange for money.

Certain processing performed through Shopify Network Intelligence or Shopify Enhanced Services may be considered “sharing,” targeted advertising, or a similar activity under some privacy laws.

Where applicable, you may opt out through our Data Sharing Opt-Out page or through the “Your Privacy Choices” link available on our website.

Where required and supported by Shopify, we also process recognized browser-based opt-out preference signals, such as Global Privacy Control. Because there is no universally accepted standard for traditional “Do Not Track” signals, the website may not respond to other Do Not Track settings.

We do not knowingly sell or share the personal information of individuals under 16 in a manner requiring affirmative authorization.

7. Customer Media

Customer Media may contain personal information about you or other individuals appearing in the material you submit. We process Customer Media to fulfill your requested services, provide support, manage redelivery or quality concerns, prevent misuse, and comply with applicable legal obligations.

You are responsible for having the rights or permission necessary to submit Customer Media to us. Please do not submit unlawful content or material that infringes another person’s rights.

We do not sell Customer Media or use it for targeted advertising.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including order fulfillment, customer support, accounting, tax, fraud prevention, dispute resolution, and legal compliance.

Retention periods depend on the nature of the information and why it was collected. Customer Media is retained according to our operational needs for processing, delivery, quality control, customer support, backups, and dispute resolution. Information may remain in backups for a limited period after it is removed from active systems.

We may retain information for longer when required by law or reasonably necessary to establish, exercise, or defend legal claims.

9. Security

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information. Nevertheless, no website, storage system, or method of electronic transmission can be guaranteed completely secure.

You are responsible for maintaining the confidentiality of your account credentials and notifying us if you suspect unauthorized account activity.

10. Your Privacy Choices and Rights

Depending on where you live and the law that applies, you may have the right to:

  • Request information about personal information we collect, use, or disclose.
  • Request access to or a copy of personal information.
  • Request correction of inaccurate personal information.
  • Request deletion of personal information, subject to applicable exceptions.
  • Opt out of certain sharing or targeted-advertising processing.
  • Withdraw consent where processing is based on consent.
  • Appeal a decision concerning a privacy request, where applicable.
  • Exercise privacy rights without unlawful discrimination.

To submit an access, correction, or deletion request, contact us at info@legacyfilmlab.com or (714) 258-7080. To opt out of applicable data sharing or targeted advertising, use our Data Sharing Opt-Out page.

We may need to verify your identity before completing certain requests. Verification may require matching information you provide with information in our records. We will use verification information only for that purpose.

Where permitted by law, an authorized agent may submit a request for you. We may ask for evidence of the agent’s authority and may verify your identity directly. Rights are subject to legal limitations and exceptions.

11. Marketing Communications

You may unsubscribe from promotional emails by using the unsubscribe link in the message or contacting us. Even after unsubscribing from promotional communications, you may still receive non-promotional messages concerning orders, accounts, transactions, or customer-service matters.

12. Children’s Privacy

Our online Services are not directed to children under 13, and we do not knowingly solicit personal information directly from children under 13. If you believe a child has submitted personal information to us without appropriate authorization, contact us so that we can review the matter.

Customer Media submitted by an adult may contain images of children. We process that material only as Customer Media under this Policy.

13. Third-Party Websites and Services

The Services may contain links to websites or services operated by others, including social-media platforms and external photo-ordering services. Their privacy practices are governed by their own policies, not this Policy. We encourage you to review those policies before providing personal information.

14. International Processing

Shopify and other service providers may process information in the United States, Canada, or other countries. Privacy laws in those locations may differ from those where you live. Where required, appropriate safeguards are used for international transfers.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, services, or legal obligations. We will post the revised Policy on this page and update the effective date. If required by law, we will provide additional notice of material changes.

16. Contact Us

For privacy questions, concerns, or requests, contact:

Legacy Film Lab
Attn: Privacy
15012 Red Hill Avenue, Suite A
Tustin, California 92780
United States

Email: info@legacyfilmlab.com
Telephone: (714) 258-7080