Privacy & Cookie Policy
Last updated: July 2026
1. Data Controller
This website is operated by Miguel Bellido López ("we", "us", "our"), a wildlife photographer based in Spain. For any privacy-related enquiries please contact: miguel.blopez93@gmail.com
2. What Data We Collect
We do not operate user accounts or a registration system. Personal data is processed only in the following cases:
- Email enquiries. When you contact us via the email address provided on the site, your name, email address and message are processed solely to respond to your enquiry.
- Print quote requests. When you request a print quote, your email address and the details you provide are used exclusively to respond to that request.
- Print orders. When you buy a print, we collect your name, email address, and billing and shipping addresses, along with the details of your order, in order to take payment and to fulfil and deliver your order. Your payment card details are entered directly on Stripe's secure checkout page and are never received or stored by us.
We do not sell, rent or share your personal data with third parties for marketing purposes.
3. Legal Basis for Processing (GDPR)
Depending on the interaction, we rely on the following legal bases under Article 6(1) of the General Data Protection Regulation (GDPR):
- Enquiries and quote requests — our legitimate interest in responding to your direct request (Art. 6(1)(f)).
- Print orders — performance of the purchase contract with you (Art. 6(1)(b)), and compliance with our legal obligations such as tax and accounting record-keeping (Art. 6(1)(c)).
Where processing is based on legitimate interest, you may object at any time by emailing us.
4. Payment and Service Providers
We rely on the following third-party processors, who act on our behalf and receive only the data needed to provide their service:
- Stripe — processes payments and collects your billing and shipping details when you buy a print. Your card data is handled directly on Stripe's own secure infrastructure. See Stripe's Privacy Policy.
- EmailJS — delivers the contact, quote and enquiry messages you submit through the site's forms. See EmailJS's Privacy Policy.
Some of these providers are based outside the European Economic Area (for example, in the United States). Where personal data is transferred internationally, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
5. Cookies and Local Storage
This website stores the following small items on your device. None of them track you across other sites.
| Name | Purpose | Duration |
|---|---|---|
preferredLang | Remembers the language you selected (EN / ES). | Session / localStorage |
bagItems | Remembers the prints you have added to your bag so it survives page reloads. Held in your browser only and never sent to us. | localStorage (until cleared) |
shipCountry | Remembers the shipping country you chose, so an order being put together does not lose its destination when you reload. Discarded as soon as your bag is empty. | localStorage (while your bag has prints in it) |
detectedCountry | Remembers which country you appeared to be in, so prices can be shown with shipping and VAT included without asking you first. Only ever a country — never a town, an address or a coordinate — and overridden the moment you choose a country yourself. | localStorage (24 hours) |
Typefaces are served from our own domain. Viewing this site makes no request to any third-party server, so your IP address is not shared with anyone as you browse. To show you a delivered price, our own hosting provider resolves your IP address to a country and tells us only that two-letter code; your IP address itself is not stored by us, and no location finer than the country is available to us.
When you proceed to checkout you are redirected to Stripe's secure payment page, which sets its own cookies for payment processing and fraud prevention, governed by Stripe's Privacy Policy.
No analytics, advertising, or third-party tracking cookies are currently used on this site.
6. Data Retention
Email correspondence is retained for a maximum of 12 months and then deleted. Records relating to print orders and payments are retained for as long as required by applicable tax and accounting law (generally several years under Spanish law), after which they are deleted.
7. Your Rights
Under the GDPR and Spanish data protection law (LOPDGDD), you have the right to:
- Access the personal data we hold about you.
- Request rectification of inaccurate data.
- Request erasure of your data ("right to be forgotten").
- Object to processing or request restriction of processing.
- Lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD).
To exercise any of these rights, please contact us at miguel.blopez93@gmail.com.
8. Security
This website is served over HTTPS (TLS encryption). We take reasonable technical and organisational measures to protect any personal data against unauthorised access, loss or disclosure.
9. Third-Party Links
This site contains links to external platforms (Instagram, Facebook). We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.
10. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the updated policy.