Privacy & Cookie Policy
Last updated: October 2026
1. Data Controller
This website is operated by Miguel Bellido López ("we", "us", "our"), a wildlife photographer based in Spain. For any privacy-related enquiries please contact: hello@mikebellido.com
2. What Data We Collect
We do not operate user accounts or a registration system. Personal data is processed only in the following cases:
- Email enquiries. When you contact us via the email address provided on the site, your name, email address and message are processed solely to respond to your enquiry.
- Print quote requests. When you request a print quote, your email address and the details you provide are used exclusively to respond to that request.
- Print orders. When you buy a print, we collect your name, email address, and billing and shipping addresses, along with the details of your order, in order to take payment and to fulfil and deliver your order. Your payment card details are entered directly on Stripe's secure checkout page and are never received or stored by us.
- Letters from the savanna. If you join the list, we keep your email address and the language you signed up in, solely to send you those letters (the stories behind new photographs, new prints before they are released and safari dates). We first send you a confirmation email; your address is not added to the list until you click its link. Every letter carries a one-click unsubscribe link.
We do not sell, rent or share your personal data with third parties for marketing purposes.
3. Legal Basis for Processing (GDPR)
Depending on the interaction, we rely on the following legal bases under Article 6(1) of the General Data Protection Regulation (GDPR):
- Enquiries and quote requests — our legitimate interest in responding to your direct request (Art. 6(1)(f)).
- Print orders — performance of the purchase contract with you (Art. 6(1)(b)), and compliance with our legal obligations such as tax and accounting record-keeping (Art. 6(1)(c)).
- Letters from the savanna — your consent (Art. 6(1)(a)), given when you sign up and confirmed from your inbox. You can withdraw it at any time through the unsubscribe link in any letter, or by emailing us.
- Marketing cookies and advertising measurement — your consent (Art. 6(1)(a)), given in the cookie notice. None of it loads until you accept, and you can withdraw it at any time from “Cookie settings” in the footer.
Where processing is based on legitimate interest, you may object at any time by emailing us.
4. Payment and Service Providers
We rely on the following third-party processors, who act on our behalf and receive only the data needed to provide their service:
- Stripe — processes payments and collects your billing and shipping details when you buy a print. Your card data is handled directly on Stripe's own secure infrastructure. See Stripe's Privacy Policy.
- EmailJS — delivers the contact, quote and enquiry messages you submit through the site's forms. See EmailJS's Privacy Policy.
- Resend — sends our emails (your order confirmation and shipping notice, and the letters from the savanna) and keeps the list of people who receive the letters. See Resend's Privacy Policy.
- Meta Platforms Ireland Limited — only if you accept marketing cookies: receives which print pages you view, whether you add something to your bag and, if you buy, the order total together with the matching details set out in section 5.1, so that we can measure how our Facebook and Instagram ads perform. For that collection and transmission, Meta and we act as joint controllers; Meta alone is responsible for what it does with the data afterwards. See Meta's Privacy Policy. If you do not accept, nothing whatsoever is sent to Meta.
Some of these providers are based outside the European Economic Area (for example, in the United States). Where personal data is transferred internationally, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
5. Cookies and Local Storage
This website stores the following small items on your device. None of them track you across other sites.
| Name | Purpose | Duration |
|---|---|---|
preferredLang | Remembers the language you selected (EN / ES). | Session / localStorage |
bagItems | Remembers the prints you have added to your bag so it survives page reloads. Held in your browser only and never sent to us. | localStorage (until cleared) |
shipCountry | Remembers the shipping country you chose, so an order being put together does not lose its destination when you reload. Discarded as soon as your bag is empty. | localStorage (while your bag has prints in it) |
detectedCountry | Remembers which country you appeared to be in, so prices can be shown with shipping and VAT included without asking you first. Only ever a country — never a town, an address or a coordinate — and overridden the moment you choose a country yourself. | localStorage (24 hours) |
cookieConsent | Stores what you answered in the cookie notice and when, so you are not asked again and so your decision can be evidenced. Necessary: it is stored whether you accept or reject. | localStorage (until cleared) |
lettersFromTheField | Remembers whether you have joined the letters from the savanna, or closed the invitation, so it is not shown to you again (for 30 days, if you closed it). It holds only that and the date — never your email address. | localStorage (until cleared) |
lettersShown | Stops the letters invitation appearing more than once in the same visit. | sessionStorage (until the tab is closed) |
printDrafts | Remembers the size and finish you chose on each print and have not yet added to the bag, so they are still there if you go back to it during the visit. | sessionStorage (until the tab is closed) |
_fbp (only with your consent) | Set by the Meta pixel. Identifies your browser to Meta so a visit or a purchase can be attributed to the ad that led to it. It exists only if you accept marketing cookies. | Meta cookie (90 days) |
visitorId (only with your consent) | A random number we generate to identify this browser, with no personal data inside it. It lets Meta recognise that a visit on one day and a purchase on another came from the same browser, so the sale is attributed to the right ad. Created only if you accept marketing cookies. | localStorage (until cleared) |
Typefaces are served from our own domain. Viewing this site makes no request to any third-party server, so your IP address is not shared with anyone as you browse. To show you a delivered price, our own hosting provider resolves your IP address to a country and tells us only that two-letter code; while you browse we do not store your IP address, and no location finer than the country is available to us. Buying is the one exception: if — and only if — you have accepted marketing cookies, your IP address and browser identifier are stored with the order when checkout begins, so that they can be included in the purchase notice sent to Meta (section 5.1). If you have not accepted them, neither is stored.
When you proceed to checkout you are redirected to Stripe's secure payment page, which sets its own cookies for payment processing and fraud prevention, governed by Stripe's Privacy Policy.
5.1. Marketing cookies (Meta)
If you accept in the cookie notice, this site loads the Meta pixel (Facebook and Instagram). From that point, Meta is told which print pages you visit, whether you add something to your bag and whether you start checkout, together with the _fbp cookie and your IP address. The purpose is a single one: to know which of our ads work and which do not.
When a purchase completes we also send, from our own server, a purchase notice carrying the order total and the prints in it, together with your contact and delivery details irreversibly hashed (SHA-256): email address, phone number if you gave one, first and last name, city, province or state, postcode and country. Alongside them, unhashed, go the _fbp cookie, the visitorId identifier, your IP address and the browser you used — Meta needs those as they are in order to match them. The purpose is the same single one: to check whether that purchase belongs to someone who saw the ad. That transmission likewise depends on your consent: without it, it does not happen.
None of this happens before you choose. Until you press Accept, no Meta resource is loaded and none of its cookies are set. You can change your mind at any time under “Cookie settings” in the footer of this page: rejecting stops the pixel being loaded immediately, and clearing your browser's cookies also removes an _fbp already set. Whatever Meta has already received is governed by its own retention policies.
What applies depends on where you are. If you are in the European Union, the EEA, the United Kingdom or Switzerland, the pixel does not load until you actively accept it: silence is not consent, and ignoring the notice leaves everything switched off. Outside those territories — where the applicable rule is opt-out rather than prior consent — the pixel loads from the start, the notice tells you so, and one click turns it off. While we do not yet know which country you are in, the strict rule applies and nothing loads.
No other analytics, advertising or third-party tracking cookies are used on this site. The visit statistics we do keep set no cookies and do not identify you.
6. Data Retention
Email correspondence is retained for a maximum of 12 months and then deleted. Records relating to print orders and payments are retained for as long as required by applicable tax and accounting law (generally several years under Spanish law), after which they are deleted. Your email address stays on the letters list until you unsubscribe.
7. Your Rights
Under the GDPR and Spanish data protection law (LOPDGDD), you have the right to:
- Access the personal data we hold about you.
- Request rectification of inaccurate data.
- Request erasure of your data ("right to be forgotten").
- Object to processing or request restriction of processing.
- Lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD).
To exercise any of these rights, please contact us at hello@mikebellido.com.
8. Security
This website is served over HTTPS (TLS encryption). We take reasonable technical and organisational measures to protect any personal data against unauthorised access, loss or disclosure.
9. Third-Party Links
This site contains links to external platforms (Instagram, Facebook). We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.
10. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the updated policy.