Privacy Policy

1. Who we are

The data controller is WebFoto (“we”, “us”), based in the Algarve, Portugal. For any privacy request, contact info@webfoto.algarit.pt.

2. What we collect

• Client account data — name and email, created by us so you can access your private proofing gallery.
• Authentication data — a hashed password and a login session cookie.
• Photographs — images we take for you, stored privately and only visible to you.
• Server logs — standard technical logs (IP address, timestamp) kept for security.

We do not use advertising, profiling or third-party tracking cookies.

3. Why & legal basis (GDPR)

• Provide the proofing service — performance of a contract (Art. 6(1)(b)).
• Security & fraud prevention — legitimate interests (Art. 6(1)(f)).
• Legal obligations — e.g. accounting, where applicable (Art. 6(1)(c)).

4. Retention

We keep client accounts and galleries for as long as the working relationship requires, and delete or anonymise data when it is no longer needed or on valid request.

5. Sharing

We do not sell your personal data. We share it only with infrastructure providers (hosting) acting as processors under appropriate agreements, or where required by law.

6. Your rights — EU/UK/Portugal (GDPR)

You have the right to access, rectify, erase, restrict or object to processing, and to data portability. You may withdraw consent at any time and lodge a complaint with the Portuguese supervisory authority, the CNPD (cnpd.pt).

7. Your rights — United States (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of “sale” or “sharing” of personal information. We do not sell or share personal information. We will not discriminate against you for exercising your rights. Residents of other US states with similar laws (e.g. Virginia, Colorado) have comparable rights.

8. International transfers

Where data is processed outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

9. Contact

To exercise any right, email info@webfoto.algarit.pt. See also our Cookie Policy.