Prism Portraits Prism Portraits 1. Introduction At Prism Portraits, your privacy and data security are of utmost importance to us. This Data Protection Policy sets forth the principles and practices we follow to ensure that your personal data is collected, processed, stored, and protected responsibly and transparently. We are committed to complying with all relevant data protection laws and regulations, such as the GDPR, CCPA, and other applicable legislation, to safeguard your information. 2. Personal Data We Collect We collect a range of personal data to provide and improve our services, including but not limited to: Personal identification details such as your full name, date of birth, and gender Contact information including email addresses, phone numbers, and postal addresses Payment information, such as credit card or bank details, used for processing transactions Account information like usernames, passwords, and user preferences Technical data including IP address, device type, browser version, operating system, and location data Interaction data such as communications with customer support, feedback, and survey responses Marketing data including your communication preferences and consent status We collect this information when you provide it directly, interact with our website, or through automated tools such as cookies and tracking technologies. 3. Methods of Data Collection Your personal data is obtained via: Submission of forms on our website or mobile applications Cookies, tracking pixels, and similar technologies during your online interactions Direct communications via email, telephone, or live chat with our customer service Third-party sources when you have given permission for your data to be shared 4. Purpose of Data Processing We use your personal information for the following purposes: To deliver and maintain the products and services you request To process orders, payments, and manage subscriptions or accounts To respond to inquiries, provide support, and handle complaints To send important service-related messages and promotional offers, where permitted To analyze site usage, enhance performance, and customize your experience To prevent fraudulent activities and protect our services and users To comply with legal obligations and enforce our terms and conditions 5. Legal Grounds for Data Processing Our processing of your data is lawful on the basis of: Your explicit consent, especially for marketing communications The necessity to perform contractual obligations with you Compliance with applicable legal and regulatory requirements Our legitimate interests in improving our services and protecting our business, balanced with your rights 6. Sharing Your Personal Data We may disclose your personal information to: Third-party service providers who assist with payment processing, email marketing, hosting, analytics, and customer support Professional advisors including lawyers and auditors Law enforcement or regulatory authorities if required by law or to protect our legal rights Potential buyers or investors during mergers, acquisitions, or asset sales, under confidentiality agreements 7. International Data Transfers If your personal data is transferred outside your country of residence, we ensure that adequate protections are in place, such as approved data transfer agreements or adherence to international data protection standards. 8. Data Retention We retain your personal data only for as long as necessary for the purposes outlined in this policy or as required by law. When data is no longer needed, it is securely deleted or anonymized to protect your privacy. 9. Data Security Practices Protecting your personal data is a top priority. We use a combination of technical safeguards, including encryption, firewalls, secure servers, and access controls, along with organizational measures such as staff training and confidentiality agreements to prevent unauthorized access, disclosure, or misuse. 10. Your Data Protection Rights Under applicable data protection laws, you have the right to: Access the personal data we hold about you Request corrections to any inaccurate or incomplete information Request erasure of your data, subject to certain conditions Object to or restrict processing in certain situations Withdraw consent at any time where processing is consent-based Receive a portable copy of your data in a structured format File a complaint with a data protection authority if you believe your rights have been violated To exercise these rights, please contact us at [email protected]. 11. Use of Cookies and Tracking Our website uses cookies to enhance functionality, analyze traffic, and personalize content. You can manage your cookie preferences through your browser or our cookie consent tool. For more details, see our Cookie Policy. 12. Children’s Privacy Our services are not designed for or marketed to children under the age of 16. We do not knowingly collect personal data from minors and will promptly delete any such data if identified. 13. Changes to This Policy We may update this Data Protection Policy from time to time to reflect changes in legal requirements, technological advances, or business practices. We encourage you to review this policy periodically. Significant updates will be communicated through our website or via direct contact.