Privacy Policy

1. Who We Are

Martric Visuals is the data controller responsible for your personal data. We are a photography brand based in Lisbon, Portugal, offering fine art prints and Lightroom preset packs.

You can reach us at: hello@martricvisuals.com

2. Personal Data We Collect

We collect only the data that is necessary to provide our services. Depending on how you interact with us, this may include:

• Identity data — your name, as provided during checkout or when contacting us.
• Contact data — your e-mail address and, for physical orders, your postal address and phone number.
• Transaction data — details of purchases and order history. Payment transactions are processed securely by our payment provider (e.g. Stripe). We never see or store your full card number, CVV, or banking credentials.
• Technical data — your IP address, browser type, device information, and pages visited, collected via cookies and server logs.
• Communications data — messages you send us through our contact form or by e-mail.

We do not collect special category data (health, ethnicity, political views, etc.) and we do not knowingly collect data from individuals under the age of 16.

3. Legal Basis and How We Use Your Data

Under the GDPR, we rely on the following legal bases to process your personal data:

• Performance of a contract (Article 6(1)(b)) — to process and fulfil your orders, deliver digital files, arrange shipping for prints, and handle refunds or complaints.
• Legitimate interests (Article 6(1)(f)) — to maintain the security of our website, prevent fraud, and improve our services. We balance these interests against your rights and will not override them.
• Consent (Article 6(1)(a)) — if you opt in to receive our newsletter or marketing communications. You may withdraw consent at any time.
• Legal obligation (Article 6(1)(c)) — to comply with tax, accounting, and other applicable legal requirements.

We will never use your data for purposes incompatible with those listed above, and we will never sell your data to third parties.

4. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purpose it was collected:

• Order and transaction records are kept for 10 years in accordance with Portuguese tax law (Código do IVA and Código do IRC).
• Contact form messages are kept for up to 2 years, unless further correspondence is required.
• Technical and analytics data (logs, cookies) is retained for a maximum of 13 months.
• Marketing consent records are kept until you withdraw consent, plus 3 years for legal compliance.

After these periods, data is securely deleted or anonymised.

5. Who We Share Your Data With

We work with a small number of trusted service providers who process data on our behalf as data processors under written agreements:

• Payment processors — to handle transactions securely. Your card details are processed directly by them and never stored by us.
• Print fulfilment partners — your name and shipping address are shared with our production partner solely to fulfil and deliver your print order.
• Email service providers — to send transactional e-mails (order confirmations, download links) and, with your consent, marketing communications.
• Website hosting and infrastructure — our website and content management system run on servers within the European Economic Area (EEA).
• Analytics providers — we may use anonymised, aggregated data to understand how visitors use our website. Where personal data is involved, it is processed under a data processing agreement.

We do not transfer your personal data outside the EEA unless appropriate safeguards are in place (e.g. Standard Contractual Clauses approved by the European Commission).

6. Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access (Article 15) — you may request a copy of the personal data we hold about you.
• Right to rectification (Article 16) — you may ask us to correct inaccurate or incomplete data.
• Right to erasure / "right to be forgotten" (Article 17) — you may request that we delete your data, subject to legal retention obligations.
• Right to restriction of processing (Article 18) — you may ask us to pause processing of your data in certain circumstances.
• Right to data portability (Article 20) — where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object (Article 21) — you may object to processing based on legitimate interests, including for direct marketing purposes.
• Rights related to automated decision-making (Article 22) — we do not make solely automated decisions that significantly affect you.

To exercise any of these rights, please contact us at hello@martricvisuals.com. We will respond within 30 days in accordance with GDPR requirements. We may need to verify your identity before fulfilling your request.

If you believe your rights have not been respected, you have the right to lodge a complaint with the Portuguese data protection supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include:

• Encrypted connections (HTTPS/TLS) across our entire website.
• Access controls limiting who within our organisation can access personal data.
• Use of reputable, security-certified third-party services for payment processing and data storage.
• Regular review of our data handling practices.

While we do everything reasonably within our control to protect your data, no method of transmission over the internet or electronic storage is completely secure. In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the CNPD within 72 hours as required by Article 33 of the GDPR, and we will inform you without undue delay if the breach is likely to result in a high risk to you.

8. Cookies

Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help us operate the site and understand how it is used.

• Strictly necessary cookies — required for the website to function (e.g. shopping cart, session authentication). These cannot be disabled.
• Analytics cookies — used to measure traffic and understand visitor behaviour. Enabled only with your consent.
• Marketing cookies — used to deliver relevant advertisements. Enabled only with your consent.

You can manage your cookie preferences at any time through the cookie banner on our website, or through your browser settings. Withdrawing consent for non-essential cookies will not affect your ability to use the site.

9. Third-Party Links

Our website may contain links to external sites (e.g. social media profiles). These sites have their own privacy policies, and we are not responsible for their content or practices. We encourage you to review the privacy policy of any site you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify you by e-mail or by a prominent notice on our website.

Continued use of our website after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact us:

• E-mail: hello@martricvisuals.com
• Website: martricvisuals.com/contact

We are committed to working with you to resolve any concerns about your privacy fairly and promptly.