Last Updated: June 20th, 2025

PhotoPills Core SL, PhotoPills SL and PhotoPills Travel SL (“PhotoPills”, “we”, “us” or “our”) are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website https://www.photopills.com, use our services, or interact with us online.

1. Who We Are

This Privacy Policy applies to:

* PhotoPills Core SL, PhotoPills SL and PhotoPills Travel SL, registered in Spain (EU)
* Website: https://www.photopills.com
* Contact: [email protected]

We process personal data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable data protection laws.

2. What Information We Collect

We collect personal information in the following categories:

A. Information You Provide

* Full name, email address, phone number
* Billing and shipping address
* Travel preferences
* Any personal data submitted via forms or email

B. Automatically Collected Data

Using cookies and tracking technologies (see Section 6):

* IP address
* Browser type
* Device identifiers
* Pages visited and session duration
* Referring URLs

C. From Third Parties

* Meta Pixel & Conversions API (Facebook/Instagram)
* Google Ads and Google Tag
* Analytics services (e.g., Google Analytics)

3. How We Use Your Information

We use your information to:

* Provide, maintain, and improve our services
* Process bookings, payments, and customer support
* Communicate with you about upcoming expeditions, products or new content
* Send marketing and promotional materials (you may opt out)
* Analyze traffic and optimize ad targeting
* Fulfill legal obligations (e.g., accounting, taxes)

4. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases:

* Consent for marketing, cookies, and non-essential data
* Contractual necessity - to fulfill your expedition booking or product order
* Legal obligation - for compliance with tax and recordkeeping laws
* Legitimate interest - to run our business effectively and securely

You can withdraw consent at any time by contacting us or adjusting cookie preferences.

5. Who We Share Your Data With

We do not sell your personal data. We share it only with:

* Service Providers: e.g., email platforms (Mailchimp), analytics providers, payment processors
* Advertising Platforms: Meta (Facebook, Instagram), Google Ads, YouTube
* Travel Partners (where applicable): only with consent and for expedition coordination
* Legal/Regulatory Authorities: if required by law

6. Cookies and Tracking Technologies

We use first- and third-party cookies and similar technologies to improve user experience, analyze website usage, and serve relevant advertising.

Key Cookies/Trackers:

* Meta Pixel & Conversions API**: for tracking ad performance and conversions
* Google Analytics & Google Tag Manager**: to understand traffic and behavior
* YouTube Embeds: may collect usage data per Google’s policies

You can manage cookie preferences via the cookie banner or your browser settings.

For EU visitors, cookie usage is based on explicit consent via our Consent Management Platform (CMP).

7. International Data Transfers

Your data may be transferred outside the EU (e.g., to the US) to services such as Meta or Google. In such cases, we use:

* Standard Contractual Clauses (SCCs) approved by the European Commission
* Other legally recognized mechanisms ensuring adequate data protection

8. How We Protect Your Data

We implement appropriate technical and organizational measures, including:

* SSL encryption
* Access controls and authentication
* Secure cloud infrastructure and backups

However, no system is 100% secure. Please contact us if you suspect any issue.

9. Your Privacy Rights

Depending on your jurisdiction, you have the following rights:

Under GDPR (EU Residents)

* Right to access, correct, or delete your data
* Right to object to or restrict processing
* Right to data portability
* Right to withdraw consent
* Right to lodge a complaint with a data protection authority

Under CCPA/CPRA (California Residents)

* Right to know what data is collected and why
* Right to request access and deletion
* Right to opt-out of “sale” or “sharing” (we do not sell data)
* Right to non-discrimination for exercising rights

To exercise any rights, please email: [email protected]

10. Children's Privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal information from children.

11. Updates to This Privacy Policy

We may update this policy occasionally to reflect changes in our practices or laws. When we do, we’ll revise the "Last Updated" date above. If material changes are made, we will provide a prominent notice.

12. Contact Us

If you have questions about this Privacy Policy or your personal data:

Data Controller:
PhotoPills Core SL
c/ Gerreries 25
07760 Ciutadella de Menorca
Illes Balears
Spain
B56257652

Email: [email protected]