Privacy Policy (GDPR / RGPD)

I am committed to protecting your personal data. This policy explains how I handle information in compliance with the EU General Data Protection Regulation (GDPR).

Data Collection: I collect your name, email address, physical address, and (if provided) your Tax ID (NIF). Purpose: This data is processed exclusively for order fulfillment, digital delivery of your photos, and the issuance of legal invoices (Fatura-Recibo) as required by the Portuguese Tax Authority (Autoridade Tributária). Third-Party Processing: To provide a secure shopping experience, I use Pixieset for gallery hosting and Stripe for payment processing. Your payment details are handled directly by Stripe’s secure servers; I do not store your credit card information. Security: This website uses SSL/TLS encryption to protect the transmission of personal data and inquiries. Data Retention: Personal data related to purchases will be stored for 10 years to comply with Portuguese tax and accounting regulations. Your Rights: You have the right to access, rectify, or request the deletion of your personal data. Please contact me via the email: max.pointandshoot@gmail.com.