Privacy Policy

Bacco Photography LLC ("Bacco Photography," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website bframing.com (the "Website") or purchase our products and services.

By using our Website, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Website.

1. Information We Collect

Information You Provide Directly

When you place an order, create an account, contact us, or interact with our Website, we may collect:

• Contact information: Name, email address, phone number, and mailing/shipping address.
• Order information: Product selections, customization details (frame size, wood species, finish), order history, and special instructions.
• Payment information: Credit card or payment method details. Note: Full payment card data is processed and stored exclusively by Stripe. We do not have access to or store your complete card number.
• Communications: Messages you send us through our contact form, email, or phone, including any photographs or files you provide for framing orders.

Information Collected Automatically

When you visit our Website, we may automatically collect certain technical information, including:

• Device information: Browser type and version, operating system, device type, and screen resolution.
• Usage data: Pages visited, time spent on pages, referring URL, and click patterns.
• Network information: IP address and approximate geographic location (city/region level).

2. How We Use Your Information

We use the information we collect for the following purposes:

• Order fulfillment: To process, build, and ship your custom frame orders.
• Communication: To respond to your inquiries, send order confirmations and shipping updates, and provide customer support.
• Payment processing: To securely process transactions through our payment provider.
• Website improvement: To analyze how our Website is used and improve its functionality, content, and user experience.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.
• Fraud prevention: To detect and prevent fraudulent transactions and protect our business and customers.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Third-Party Services

We use trusted third-party services to operate our business. These providers have access to your personal information only to the extent necessary to perform their services and are obligated to protect it:

• Stripe (Payment Processing): Stripe processes all credit card and payment transactions. Stripe is PCI DSS Level 1 certified, the highest level of certification in the payment industry. Stripe's privacy policy: stripe.com/privacy
• Supabase (Data Storage): We use Supabase as our backend database to securely store order information, customer accounts, and related data. Supabase's privacy policy: supabase.com/privacy
• Resend (Email Communications): We use Resend to send transactional emails such as order confirmations, shipping notifications, and customer support replies. Resend's privacy policy: resend.com/legal/privacy-policy
• Shippo (Shipping & Logistics): We use Shippo to generate shipping labels, track packages, and manage delivery logistics. Your name and shipping address are shared with Shippo to fulfill your order. Shippo's privacy policy: goshippo.com/privacy

We may also share information with shipping carriers (USPS, UPS, FedEx, etc.) as required to deliver your order.

4. Cookies & Tracking Technologies

Our Website may use cookies and similar technologies to enhance your browsing experience. Cookies are small data files placed on your device when you visit a website.

We may use the following types of cookies:

• Essential cookies: Required for the Website to function properly, such as maintaining your shopping cart and session.
• Analytics cookies: Help us understand how visitors use our Website so we can improve it. These cookies collect anonymous, aggregated data.
• Functional cookies: Remember your preferences and settings to provide a personalized experience.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling cookies may affect the functionality of certain parts of our Website.

5. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purpose for which it was collected (e.g., completing and supporting your order).
• Comply with legal obligations, including tax and accounting requirements.
• Resolve disputes and enforce our agreements.

Order records and associated customer information are typically retained for a minimum of 7 years for tax and legal compliance purposes. You may request deletion of your personal data at any time (see "Your Rights" below), subject to our legal retention obligations.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS) and at rest.
• Secure payment processing through PCI-compliant Stripe.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security reviews of our systems and third-party providers.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Portability: You may request a copy of your data in a structured, machine-readable format.
• Objection: You may object to the processing of your personal information in certain circumstances.
• Restriction: You may request that we restrict the processing of your personal information.
• Withdraw consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at jon@bframing.com. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

For Connecticut Residents: Under the Connecticut Data Privacy Act (CTDPA), you have the right to access, correct, delete, and obtain a copy of your personal data, as well as the right to opt out of the sale of personal data and targeted advertising. We do not sell your personal data.

For EU/EEA Residents (GDPR): If you are located in the European Economic Area, our legal basis for processing your personal information is typically the performance of a contract (fulfilling your order), your consent, or our legitimate business interests. You have all the rights listed above and may also lodge a complaint with your local data protection authority.

8. Children's Privacy

Our Website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at jon@bframing.com.

9. Third-Party Links

Our Website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

10. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers and third-party service providers are located. If you are accessing our Website from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. For material changes, we may provide additional notice through our Website or by email. We encourage you to review this page periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Bacco Photography LLC
• 9 Purdy Road, Norwalk, CT 06850
• Phone: (203) 667-1773
• Email: jon@bframing.com
• Website: bframing.com