Privacy Policy
This policy explains what personal data Bruno Spadoni Photography ("we", "us") collects when you visit this website, join our e-mail list, or purchase a print — and what your rights are, including under the UK and EU General Data Protection Regulation (GDPR).
Who we are
The data controller is Bruno Spadoni Photography (Bruno Spadoni, Brazil). For any privacy request, contact bspadonis@gmail.com.
What we collect, and why
- E-mail list (with your consent): name, e-mail address, country, and how you signed up (e.g. a Facebook form or this website). We use this to send you stories from the field, new work, and occasional offers. Legal basis: consent — you can withdraw it at any time via the unsubscribe link present in every e-mail.
- Orders: name, e-mail, shipping address, and purchase details, used to produce, ship, and confirm your order. Payments are processed by Stripe — we never see or store your card number. Legal basis: performance of a contract.
- Analytics & advertising: this site uses Google Analytics and the Meta (Facebook) Pixel, which set cookies to measure visits and ad performance. Legal basis: legitimate interest / consent where required.
Who we share data with
We share personal data only with the service providers that make this work, each acting under their own data-processing terms:
- MailerLite — e-mail list and newsletter delivery
- Supabase — our database (subscriber and order records)
- Stripe — payment processing
- Prodigi — print production and shipping (receives your name and address)
- Resend — transactional e-mail (order confirmations)
- Meta — advertising and lead forms, if you signed up through Facebook or Instagram
- Make.com — automation between the services above
- Netlify / Google — website hosting and analytics
We never sell your data.
How long we keep it
E-mail list data is kept until you unsubscribe or ask us to delete it. Order records are kept for as long as required for warranty, accounting, and legal obligations.
Your rights
You can, at any time: access the data we hold about you; correct it; ask for it to be deleted; withdraw consent to marketing (unsubscribe link in every e-mail, or just ask); or request a copy of your data. To exercise any of these rights, e-mail bspadonis@gmail.com — deletion requests are honoured across all systems listed above. If you are in the UK or EU, you also have the right to lodge a complaint with your supervisory authority (in the UK, the ICO).
Cookies
Cookies on this site come from the analytics and advertising tools listed above. You can block or delete cookies in your browser settings at any time; the site keeps working without them.