Privacy Policy

1. Who We Are

Philus Photography is the data controller responsible for your personal information. We operate the website at philusphotography.org and provide professional photography services including sports, event, portrait, and documentary photography. If you have any questions about this privacy policy or our data practices, please contact us through our Contact page.

2. What Personal Data We Collect

We collect and process the following categories of personal data:

• Identity and contact data: name, email address, and any information you provide when contacting us or creating an account.
• Transaction data: details of purchases you make through our site, including order references and payment confirmation data.
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform, device identifiers, and other technology on the devices you use to access this website.
• Usage data: information about how you use our website, products, and services, including pages visited and time spent.
• Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• To provide our services: processing your orders, delivering digital downloads, and managing your account.
• To improve our website: administering and protecting our business and this website, troubleshooting, data analysis, testing, and research.
• To communicate with you: responding to your inquiries, sending order confirmations, and providing customer support.
• For security and fraud prevention: protecting against fraudulent transactions and ensuring the security of our services.
• For marketing (with consent): sending you updates about new collections, offers, and events where you have opted in.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract performance: where processing is necessary to fulfill a contract with you (e.g., delivering a photo purchase).
• Legitimate interests: where processing is necessary for our legitimate business interests, such as improving our services and preventing fraud, provided these interests are not overridden by your rights.
• Consent: where you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing communications).
• Legal obligation: where we need to comply with a legal or regulatory obligation.

5. Data Sharing and Recipients

We may share your personal data with the following categories of recipients:

• Service providers: hosting providers, analytics services, and customer support tools who process data on our behalf under strict confidentiality agreements.
• Payment processor: Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides payment processing, subscription management, tax compliance, and invoicing services, and handles customer service inquiries related to payments. View Paddle's Privacy Policy.
• Professional advisers: legal, accounting, and other professional advisers where necessary.
• Authorities: law enforcement or regulatory authorities where required by applicable law.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For transaction data, we typically retain records for 7 years to comply with tax and accounting obligations. When your data is no longer needed, we will securely delete or anonymize it.

7. Your Data Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of any inaccurate or incomplete data.
• Erasure: request deletion of your personal data in certain circumstances.
• Restriction: request restriction of processing in certain circumstances.
• Data portability: request transfer of your data to another controller.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: withdraw your consent at any time where we rely on consent.

To exercise any of these rights, please contact us through our Contact page. We will respond to all requests within one month.

8. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit, access controls, and regular security assessments.

9. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from. Essential cookies are necessary for the website to function properly. Analytics cookies help us understand how visitors interact with our website. You can manage your cookie preferences through your browser settings.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to review this page periodically for the latest information on our privacy practices.