Privacy Policy

Privacy & Cookie Policy

Last updated: [DD Month YYYY]

I respect your privacy. This Policy explains what personal data I collect, how I use it, and your choices—including cookies.

1) Who I Am (Data Controller)

Charlotte Paola Maria (“I”, “me”, “my”). Contact: [insert email] · Postal: [insert address]

2) The Data I Collect

• Contact & inquiry data: name, email, message, project details, preferences.
• Booking & billing: dates, services, invoices, payment confirmation (no card details stored on this site).
• Communications: emails and notes needed to manage your project.
• Images: photographs created for/with you, stored securely.
• Usage data: pages viewed, device/browser info, approximate location (via analytics/cookies).
• Social/embedded content: platforms may collect data if you interact with embeds.

Children: I work with minors only with guardian consent. This site is not directed to children.

3) Why I Use Your Data (Legal Bases)

• To respond to inquiries and deliver services (contract).
• To manage scheduling, billing, and project communication (contract/legitimate interests).
• To improve the site and portfolio (legitimate interests; portfolio only with your consent).
• To comply with legal obligations (tax/accounting).
• Marketing: very limited updates, only with your consent; opt out anytime.

4) Sharing & Processors

I share data only when necessary:

• Hosting & email providers
• Website analytics tools
• Project vendors you agree to (e.g., studio, HMU, styling)
• Legal or regulatory requests where required by law

All processors are bound by agreements to protect your data.

5) International Transfers

If data is transferred outside your country, I use safeguards such as standard contractual clauses or equivalent measures.

6) Retention

• Inquiry emails: up to 12 months after last contact if no project proceeds.
• Project records & invoices: 7 years (or as law requires).
• Images: retained for a reasonable period for delivery/backups; portfolio images only with consent and removable on request.

7) Your Rights

Depending on your location (e.g., EU/UK GDPR, California), you may have rights to: access, correct, delete, or download your data; withdraw consent; object/restrict certain processing; and complain to a data-protection authority. Contact me at [insert email].

8) Security

I use reasonable administrative and technical measures (secure hosting, access controls, encrypted transfers where available). No method is 100% secure.

9) Cookies

Cookies are small files stored on your device. I use them to make the site work, remember preferences, and understand how the site is used. Similar tech includes local storage and pixels.

Cookie Categories

• Strictly necessary – required for basic site and form functions.
• Preferences/functional – remember choices (e.g., cookie consent).
• Analytics – understand visits and improve content (aggregated).
• Embedded/third-party – set by services like Vimeo/YouTube when used.

Example Cookies

Your Choices

• On first visit, a cookie banner lets you accept or manage categories (except strictly necessary).
• Change or withdraw consent anytime via Cookie Settings (link in the footer).
• You can block/delete cookies in your browser settings.
• Google Analytics opt-out tools are also available from Google.

Do Not Track: the site currently does not respond to DNT signals.

10) Third-Party Links

Links to other sites have their own privacy practices; please review their policies.

11) Changes to This Policy

I may update this Policy. Material changes will be highlighted on the site. Check the “Last updated” date.

12) Contact