Privacy policy

Brutal Studio, sole proprietorship of Christian Dubois. SIRET 101 311 504 00019. 20 rue Marie Curie, 93400 Saint-Ouen-sur-Seine, France.

For any question about your data, write to me at contact@brutalstudio.click.

When you book a session or buy a gift card, I receive your name, your email address and your billing address. For a gift card, I also receive the email of the person you are giving it to, if you provide it.

When you use a gift card or suggest a collaboration, I ask for your name, your email and, if you wish, your phone number.

When you write to me through the contact form, I receive your name, your email and your message. Your IP address is only used to block abusive submissions: it stays in memory for one hour and is never stored.

After the session, your photos are placed in your client area. To access it, you receive a code by email. No password is created.

Payment goes through Stripe, and Klarna if you pay in instalments. I never see your card number and I do not keep it. I only receive the payment confirmation, your name, your email and your billing address, to issue the invoice.

Your data is used to organise your session, deliver your photos, send you the emails related to your order, issue invoices and answer your messages.

I do not do any marketing and I do not sign you up to any newsletter. I do not use your data for advertising.

Only me, and the services the site needs to run. Hetzner hosts the site, the database and your photos, in Germany. Stripe handles payments. Resend sends emails. Qonto, my bank, issues invoices.

Each of these services only accesses the data needed for its task. Stripe and Resend may process some data outside the European Union, with the safeguards required by the GDPR.

The whole site is encrypted (HTTPS). Your client area can only be accessed with a one-time code, sent to your email address and valid for 10 minutes. Your photos are stored on a private server: only you and I can see them. Payment is handled by Stripe, certified to the highest level of card payment security (PCI DSS).

Your photos stay in your client area for as long as Brutal Studio exists, as set out in the terms and conditions. You can ask for them to be deleted at any time.

Invoices are kept for 10 years, as required by law. Your account and booking history are kept for 3 years after your last session, unless your photos are still in your client area. Messages received through the contact form are kept for 3 years.

I do not publish any of your photos without your consent. You give it, or withdraw it, from your client area. If you withdraw it, I no longer publish new photos, and I remove those already online on my site.

The site only sets two technical cookies: one keeps you signed in to your client area, the other remembers your language. There are no advertising or tracking cookies, so there is no banner to accept.

To know which pages are read, I use Umami, which I host myself. It sets no cookies and collects no data that could identify you.

You can at any time access your data, correct it, delete it, ask for a copy or object to its use.

Write to me at contact@brutalstudio.click. I will reply within one month at the latest.

If you believe your rights are not respected, you can contact the CNIL, the French data protection authority, at cnil.fr.