Privacy policy
ADI PAN SRL ("we," "us," or "our") operates https://www.toscanoportraits.com. This policy explains how we collect, use, and protect your personal information when you use our services.
What we collect
We collect the following types of information:
Personal details. When you place an order, we collect your name, email address, phone number, shipping address, and payment details. Payment information is processed securely through Stripe — we never store full card numbers.
Photos you upload. To create your porcelain portrait, we collect images you upload. These are processed to meet design and print requirements.
Technical data. We automatically collect your IP address, browser type, device identifiers, and operating system. We also use cookies and similar technologies (see our cookie policy) to improve site functionality.
How we use your information
To fulfil your order (legal basis: contractual necessity). We process your details to complete transactions, ship products, and handle any replacements.
To create your portrait (legal basis: contractual necessity). We use image editing tools and software to resize, colour-correct, and adjust your uploaded photos to meet production requirements.
To improve our service (legal basis: legitimate interest). We analyse usage patterns and feedback to improve the website and customer support.
To send marketing communications (legal basis: consent). With your permission, we may send emails about new products or updates. You can unsubscribe at any time.
To measure advertising (legal basis: consent). We share anonymised data with Google Ads and Meta to measure ad performance and deliver relevant campaigns.
To comply with the law (legal basis: legal obligation). We use data as required by tax, accounting, or other legal requirements.
Who we share data with
Payment processing. Stripe processes your payments securely.
Hosting and infrastructure. Vercel (US-based) hosts the website and provides traffic and performance analytics through Vercel Analytics and Speed Insights. Supabase stores order data, customer accounts, and uploaded images.
Product analytics. With your consent, PostHog (EU region) provides session analytics, session replay, error monitoring, and feature-flag infrastructure.
Email and SMS. Resend sends transactional emails such as order confirmations and shipment updates. sms.to delivers transactional SMS notifications where applicable.
Advertising partners. With your consent, we share anonymised or pseudonymised data with Google and Meta to measure campaign performance.
Legal requirements. We may disclose information when required by law or to protect our rights.
All third-party providers are contractually obligated to handle your data confidentially and only for the purposes we specify.
Data security
All data is transmitted over encrypted connections (SSL/TLS). Access to personal information is restricted to authorised personnel. Our third-party providers undergo regular security audits. While we take every reasonable precaution, no system can guarantee absolute security.
Your rights
Under the GDPR and applicable data protection laws, you have the right to:
- Access a copy of the personal data we hold about you.
- Correct inaccurate information.
- Delete your data, subject to legal retention requirements.
- Object to processing based on legitimate interest.
- Withdraw consent for marketing at any time by clicking "Unsubscribe" in any email.
- Lodge a complaint with your local data protection authority if you believe your rights have been violated.
To exercise any of these rights, contact us at support@toscanoportraits.com.
International data transfers
Your data may be processed in countries outside your jurisdiction, including the United States, where some of our service providers operate. We ensure such transfers comply with applicable laws, including GDPR Standard Contractual Clauses where required.
Data retention
- Order and payment records: 7 years (tax and accounting requirements).
- Uploaded images: 12 months after order completion (to support reorders and customer service).
- Marketing data: until you unsubscribe or withdraw consent.
Children's privacy
Our services are not intended for individuals under 18. We do not knowingly collect data from minors. If you believe a child has provided us with personal information, please contact us for removal.
Contact
ADI PAN SRL
Str. b-dul Unirii, bl. 16C, ap. 5, Buzau, Romania
Email: support@toscanoportraits.com