PRIVACY POLICY

My Luxury Photo (MLP)

Website: https://www.myluxuryphoto.com/
Online Store: https://shop.myluxuryphoto.com/
Last updated: 12 October 2026

1. INTRODUCTION

My Luxury Photo (“MLP”, “we”, “us” or “our”) is committed to protecting the privacy and personal data of visitors to our website and customers of our online store.

This Privacy Policy explains how we collect, use, store, protect and disclose personal data when you visit our website, browse our online store, contact us, place an order, purchase a gift card or submit a photograph for the creation of a personalised photographic artwork.

My Luxury Photo specialises in handcrafted photographic artworks using platinum printing techniques enhanced with 24-karat gold leaf or silver leaf. As our creations may be made from photographs supplied by customers, we recognise the importance of treating these photographs and the personal information they may contain with care and confidentiality.

This Privacy Policy applies to our website, our Shopify-powered online store and our related customer communications.

We process personal data in accordance with applicable data protection legislation, including:

Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”).
Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”).
Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (“LSSI-CE”), where applicable.

2. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

The data controller responsible for the processing of personal data described in this Privacy Policy is:

Nathalie Louvel
Trading as My Luxury Photo (MLP)
NIF: Y6376036J

Postal address: Calle Llop 23, Apartado 49, 17412 Maçanet de la Selva, Girona, Spain

Email: myluxuryphotomlp@gmail.com
Telephone: +34 623 767 625

For any questions concerning this Privacy Policy or the processing of your personal data, please contact us using the details above.

3. PERSONAL DATA WE COLLECT

Depending on how you interact with MLP, we may collect and process the following categories of personal data.

3.1. Identification and contact information

This may include your first and last name, email address, telephone number, billing address, delivery address and other contact details you provide when contacting us or placing an order.

3.2. Order and transaction information

When you purchase products or services from our online store, we may process information relating to your order, including the products purchased, order number, order history, purchase amount, applicable taxes, delivery details, payment status, gift card transactions, refund information and customer service correspondence.

Payment transactions are processed through the payment providers available at checkout. Depending on the payment method selected, payment information may be processed directly by the relevant provider. MLP does not intentionally collect or store complete payment card details where these are processed directly by a payment provider.

3.3. Photographs and other customer-submitted content

To create a personalised artwork, you may provide us with a photograph or other material required for the production process (“Customer Content”).

Customer Content may contain images of you or other identifiable individuals and may therefore include personal data.

We process Customer Content only to the extent necessary for purposes such as:

Receiving and reviewing the submitted photograph.
Assessing whether the photograph is suitable for the requested artwork.
Preparing and making the personalised photographic print.
Performing necessary technical adjustments to the image.
Communicating with you about your order.
Managing production, delivery, customer service and any related claim.

We will not use your photograph for advertising, social media, portfolio presentations, exhibitions or other promotional purposes unless we have obtained the appropriate separate permission or another valid legal basis applies.

You should not submit photographs or other material that you are not authorised to provide to us.

3.4. Communications and enquiries

If you contact us by email, telephone or through a contact form, we may process your name, contact details, the contents of your message and any information you voluntarily provide.

We use this information to respond to your enquiry, provide assistance and maintain records of relevant customer communications.

3.5. Technical information and browsing data

When you visit our website or online store, certain technical information may be collected by the relevant website or platform providers. Depending on the services and settings in use, this may include your IP address, browser type, device information, pages visited, browsing activity, referral information, approximate location and cookie identifiers.

Such information may be collected through cookies or similar technologies, subject to applicable consent requirements.

3.6. Marketing preferences

If you subscribe to our newsletter or otherwise agree to receive marketing communications, we may process your email address and your communication preferences to send you information about MLP, our artworks, new products, exhibitions or promotional offers.

You may unsubscribe at any time using the unsubscribe link in the communication or by contacting us directly.

3.7. Special categories of personal data

MLP does not intentionally request special categories of personal data, such as health information, biometric data used for unique identification, political opinions or religious beliefs.

However, photographs supplied by customers may incidentally reveal sensitive information about identifiable individuals. Please avoid submitting information that is not necessary for the creation of your artwork.

4. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

Directly from you when you contact us, place an order, subscribe to communications or submit Customer Content.
Automatically through your use of our website and online store, subject to applicable cookie and privacy requirements.
Through Shopify and the payment, delivery and other service providers involved in processing your order.
Through service providers that support the operation, security, maintenance or analysis of our website, where applicable.

Where personal data are obtained indirectly, we will provide the information required by applicable data protection law.

5. PURPOSES AND LEGAL BASES FOR PROCESSING

We process personal data only where a valid legal basis exists under the GDPR.

PurposeLegal basisProcessing purchases, payments, orders and deliveriesPerformance of a contract or steps taken at your request before entering into a contractReceiving and using photographs to create personalised artworksPerformance of a contract or steps taken at your request before entering into a contractResponding to enquiries and providing customer supportPerformance of a contract, pre-contractual measures or legitimate interests, depending on the circumstancesMaintaining invoices, accounting records and other legally required documentationCompliance with legal obligationsPreventing fraud, securing our website and defending legal claimsLegitimate interests, where applicable, or compliance with legal obligationsSending newsletters and promotional communicationsConsent where required by law, or another lawful basis expressly permitted by applicable legislationUsing non-essential cookies, analytics or advertising technologiesConsent where required by applicable lawImproving our website, store and customer experienceLegitimate interests or consent, depending on the activity and technology used

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Where personal data are necessary to fulfil an order or comply with a legal obligation, failure to provide the required information may prevent us from processing the order or providing the requested service.

6. CUSTOMER PHOTOGRAPHS: CONFIDENTIALITY AND USE

Photographs submitted to MLP are an essential part of our personalised creation process. We understand that they may depict private, family or otherwise personal moments.

Accordingly:

Purpose limitation: We use the photograph for the requested artwork and related order administration, including necessary technical adjustments.
Confidentiality: We do not intentionally publish or publicly display customer photographs without the appropriate permission or another valid legal basis.
Restricted access: Access to submitted photographs is limited to the extent reasonably necessary for creating the artwork and managing the order.
Service providers: Where necessary, photographs may be processed using service providers involved in file transfer, storage, website operation or production. We will take appropriate steps to ensure that such processing is subject to applicable data protection requirements.
Retention: We retain photographs only for as long as reasonably necessary for the creation of the artwork, the administration of the order and any applicable legal or claims-related requirements, subject to technical and legal retention constraints.
Promotional use: Use of a customer photograph for advertising, social media, exhibitions or portfolio purposes requires an appropriate separate permission or another valid legal basis. Submitting a photograph for an order does not, by itself, constitute permission for promotional use.

Customers are responsible for ensuring that they have the necessary rights and permissions to submit the photograph and request the creation of the artwork. This responsibility does not remove any obligations MLP may have under applicable data protection law.

If you wish to enquire about the retention or deletion of a submitted photograph, please contact us at myluxuryphotomlp@gmail.com. We will assess your request in accordance with applicable law and any obligations requiring us to retain relevant information.

7. SHOPIFY AND THIRD-PARTY SERVICE PROVIDERS

7.1. Shopify

Our online store is powered by Shopify, which provides the e-commerce platform used to display products, process orders and support the operation of the store.

When you use our Shopify store, Shopify and relevant service providers may process personal data as necessary to provide their services, operate the platform, support checkout and payments, maintain security, prevent fraud and comply with applicable legal requirements.

Depending on the service concerned, Shopify may process personal data on our behalf and may also process certain information for its own purposes under its own privacy terms.

For further information, please consult:

Shopify Privacy Policy: https://www.shopify.com/legal/privacy
Shopify Privacy and Security documentation: https://help.shopify.com/en/manual/privacy-and-security/privacy

7.2. Website hosting and technical services

Our main website is created using Hostinger and hosted through OVH. These providers may process technical information and personal data to the extent necessary to host, maintain, secure or support the website and its associated services.

7.3. Payment providers

Payments are processed using the payment methods made available at checkout, which may include Stripe or other payment providers depending on the configuration of the store.

The relevant payment provider may process transaction and payment information in accordance with its own privacy policy and applicable legal requirements.

7.4. Other service providers

Where applicable, we may use service providers for website analytics, email communications, customer support, fraud prevention, delivery, accounting or other business functions.

Personal data are shared only to the extent reasonably necessary for the relevant purpose, subject to applicable law and appropriate contractual or other safeguards.

The specific providers involved depend on the tools and services actually enabled on our website and Shopify store.

8. INTERNATIONAL DATA TRANSFERS

Some of our service providers, including Shopify and certain payment or technical service providers, may process personal data outside Spain or the European Economic Area (“EEA”).

Where personal data are transferred outside the EEA, we will rely on an applicable legal transfer mechanism where required, such as an adequacy decision adopted by the European Commission, appropriate safeguards including Standard Contractual Clauses, or another lawful mechanism under the GDPR.

Information about the applicable transfer arrangements may be available in the privacy documentation of the relevant service provider.

For more information about Shopify's international data transfers, please consult:

https://help.shopify.com/en/manual/privacy-and-security/privacy/international-data-transfers

9. DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which they were collected, taking into account the nature of the information, the purpose of processing, applicable legal requirements and the need to establish, exercise or defend legal claims.

In particular:

Order and customer records: retained for the period necessary to manage the customer relationship and comply with applicable accounting, tax and other legal obligations.
Customer photographs and submitted files: retained for the period necessary to create the artwork, manage the order and address relevant claims, subject to any applicable legal requirements.
Customer enquiries and correspondence: retained for as long as necessary to respond to the enquiry and maintain appropriate business records.
Marketing information: retained until you unsubscribe or withdraw your consent, where consent is the applicable legal basis, or until the relevant lawful basis no longer applies.
Technical and cookie data: retained in accordance with the relevant cookie settings, the applicable consent choices and the retention periods of the technologies concerned.

When personal data are no longer necessary, we will delete them or take appropriate steps to anonymise them, unless their retention is required by law or justified by another valid legal basis.

10. COOKIES AND SIMILAR TECHNOLOGIES

Our website and online store may use cookies and similar technologies to support essential functions, maintain security, remember preferences, analyse website usage or provide other services.

Cookies may be operated by MLP or by third-party providers, including Shopify or providers of analytics and marketing tools, depending on the configuration of the website and store.

Strictly necessary cookies may be used where permitted by law. Non-essential cookies and similar technologies will be activated only in accordance with applicable consent requirements.

Where consent is required, you will be given the opportunity to accept or reject non-essential cookies and to manage your preferences. You may also change your preferences through the available cookie settings.

Disabling certain cookies may affect the availability or functionality of some website or store features.

For more information about cookies and how to manage them, please consult our Cookie Policy or the cookie preference interface made available on the website.

11. DISCLOSURE OF PERSONAL DATA

MLP does not sell customers' personal data.

We may disclose personal data to the following categories of recipients where necessary and lawful:

Shopify and relevant e-commerce service providers.
Payment processors and financial service providers.
Website hosting and technical service providers, including Hostinger and OVH where applicable.
Delivery and logistics companies.
Providers of customer communication, file storage, analytics or marketing tools, where used.
Accountants, legal advisers and professional service providers where necessary.
Public authorities, courts or regulatory bodies where disclosure is required by law or necessary to establish, exercise or defend legal claims.

We limit disclosures to the information reasonably necessary for the relevant purpose and apply appropriate safeguards where required.

12. YOUR RIGHTS UNDER THE GDPR

Subject to the conditions and exceptions provided by applicable law, you have the right to:

Access: obtain confirmation as to whether we process your personal data and request access to those data.
Rectification: request correction of inaccurate or incomplete personal data.
Erasure: request deletion of your personal data where the legal conditions are met.
Restriction: request restriction of processing in certain circumstances.
Data portability: receive certain personal data in a structured, commonly used and machine-readable format and, where legally applicable, request their transmission to another controller.
Object: object to processing based on our legitimate interests on grounds relating to your particular situation. You may object at any time to processing for direct marketing purposes.
Withdraw consent: withdraw consent at any time where processing is based on consent.
Automated decision-making: benefit from the rights and safeguards applicable to decisions based solely on automated processing, including profiling, where such decisions fall within Article 22 of the GDPR.
Lodge a complaint: submit a complaint to a competent data protection supervisory authority.

These rights are not absolute and may be subject to legal conditions or exceptions.

How to exercise your rights

To exercise your rights, please contact us at:

Email: myluxuryphotomlp@gmail.com

Postal address: Calle Llop 23, Apartado 49, 17412 Maçanet de la Selva, Girona, Spain

Please describe your request clearly and provide sufficient information for us to identify the relevant data and respond appropriately. We may request additional information where reasonably necessary to verify your identity and protect your personal data.

We will respond within the time limits established by applicable data protection law.

13. COMPLAINTS TO THE SUPERVISORY AUTHORITY

If you believe that your personal data have been processed in breach of applicable data protection law, you may lodge a complaint with the competent supervisory authority.

In Spain, the competent authority is the Agencia Española de Protección de Datos (AEPD).

Website: https://www.aepd.es/

You may also contact another competent supervisory authority where permitted by applicable law, including the authority in your habitual place of residence or work.

14. DATA SECURITY

MLP implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include access restrictions, secure communication channels, appropriate handling of customer files and the use of service providers offering relevant security measures.

Our website and online store may use SSL/TLS encryption to protect data transmitted through supported secure connections.

However, no method of transmission or electronic storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we take reasonable steps to protect the personal data entrusted to us.

15. PERSONAL DATA RELATING TO MINORS

Our products and services are not specifically directed at children.

Under Spanish law, a person aged 14 or over may generally consent to the processing of their personal data, subject to applicable legal requirements and exceptions. For children under 14, consent from a parent or legal guardian is generally required where consent is the applicable legal basis.

If you submit a photograph depicting a minor, you must ensure that you are authorised to provide it for the requested purpose and that any necessary permissions have been obtained.

If we become aware that personal data have been submitted unlawfully, we will assess the circumstances and take appropriate action in accordance with applicable law.

16. LINKS TO THIRD-PARTY WEBSITES

Our website or online store may contain links to third-party websites or services.

These websites are operated independently of MLP, and we do not control their privacy practices. We encourage you to review their respective privacy policies before providing personal data.

This Privacy Policy applies only to the processing activities for which MLP is responsible.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our business, website, online store, service providers or applicable legal requirements.

The updated version will be published on our website with a revised “Last updated” date.

Where required by law, we will provide additional information or obtain consent before introducing processing activities that require it.

We encourage you to review this page periodically to remain informed about how we protect your personal data.

18. CONTACT

If you have any questions about this Privacy Policy, the handling of your personal data or the use of photographs submitted for personalised artworks, please contact:

My Luxury Photo (MLP)
Nathalie Louvel
Email: myluxuryphotomlp@gmail.com
Telephone: +34 623 767 625
Postal address: Calle Llop 23, Apartado 49, 17412 Maçanet de la Selva, Girona, Spain

Website: https://www.myluxuryphoto.com/
Online Store: https://shop.myluxuryphoto.com/