Privacy Policy

My Photography Portfolio ("we", "us", "My Photography Portfolio") respects your privacy. This policy explains what personal information we collect through this website, why, who sees it and the choices you have. We aim to follow the principles of the Data Protection Act, 2011 of Trinidad and Tobago.

1. Who is responsible

My Photography Portfolio

2. What we collect and why

• Account details (name, email address, password stored only as a one-way hash, optional phone number): to create and secure your account and contact you about your orders.
• Addresses you save or enter: to deliver prints and prepare quotations and invoices.
• Order requests, quotations, payments and messages: to quote, produce, deliver and invoice your order, and to keep records we are required to keep.
• Messages sent through the contact form (name, email and your message): to answer your enquiry.
• Saved photographs and print configurations: to provide your wishlist and saved designs.
• Technical and security data, such as your IP address and browser type, held briefly in server logs: to keep the website secure, prevent abuse and fix faults.
• Anonymous visit counts for each photograph: to understand which photographs are popular. These are totals per day; they are not linked to you, and no cookie or identifier is stored for them.

We do not run advertising or cross-site tracking, and we do not sell your information.

3. Cookies

We use only the cookies that are necessary for the website to work: a session cookie that keeps you signed in and a security cookie that protects forms from forgery. We also remember your light/dark theme choice in your browser. We do not use advertising or analytics cookies, so there is no cookie banner to dismiss.

4. Who we share it with

We share information only with the service providers that help us run the shop, and only as needed:

• website and application hosting providers;
• cloud storage for photographs;
• our email provider, to send account, quotation and order emails;
• couriers or delivery partners, who receive your name, address and phone number to deliver your order;
• professional advisers, and the authorities where the law requires it.

Some of these providers are outside Trinidad and Tobago, so your information may be processed abroad. We require them to protect it appropriately.

5. How long we keep it

We keep account and order records for as long as your account is open and then for the period needed for tax, accounting and legal purposes (normally several years). Contact-form messages are kept for as long as needed to deal with your enquiry and any follow-up. Server logs are kept for a short period.

6. Security

Passwords are stored as hashes, connections to the website are encrypted, and access to the administration area is limited to authorised people using two-factor authentication. No system is perfectly secure, so please use a strong, unique password.

7. Your rights

You can ask to see the personal information we hold about you, to correct it, or to ask us to delete it where we no longer need it. You can update most details yourself in your account. To make a request, contact us via the contact form on this website; we may need to confirm your identity first. If you are unhappy with how we handle your information you may also complain to the relevant authority in Trinidad and Tobago.

8. Children

This website is not directed at children and we do not knowingly collect their information.

9. Changes

If we change this policy in a way that matters, we will update the date above and, where appropriate, tell account holders.

10. Contact

Privacy questions: contact us via the contact form on this website.