Privacy policy
Last updated: 26 August 2026
This is a courtesy translation. The binding version is the Spanish one, as the contract is governed by Spanish law.
Who processes your data
- Controller
- [[NOMBRE Y APELLIDOS O RAZÓN SOCIAL]]
- Tax ID (NIF)
- [[NIF]]
- Address
- [[DOMICILIO FISCAL COMPLETO]]
- Contact
- hola@tanfiel.com
What we collect and why
We only ask for what we need to make your portrait and get it to you. There are no user accounts: we store no passwords.
- Email address
- To send the preview and order updates. Basis: performance of the contract.
- Name and delivery address
- To deliver the order. Collected by the payment gateway. Basis: performance of the contract.
- Photo of your pet
- To produce the portrait ordered. Basis: performance of the contract.
- Pet's name
- To print it on the portrait. Basis: performance of the contract.
- Payment details
- We never see or store them: Stripe handles them directly.
- Messages you send us
- To help you and keep a record of requested changes. Basis: performance of the contract.
How long we keep it
Order data for as long as the relationship lasts, and afterwards for the periods required by Spanish tax and commercial law — six years for accounting records, four for tax obligations.
The photo you send is kept while the portrait is made and for one year after delivery, in case you want a reprint. You can ask us to delete it sooner by writing to hola@tanfiel.com.
Who we share it with
We never sell or give away data. We do work with providers who process it on our behalf under a data processing agreement:
- Stripe
- Payment. Handles payment data as its own controller.
- Gelato
- Printing and shipping. Receives the delivery address and the portrait file.
- Neon
- Database. Servers in Frankfurt (EU).
- Cloudflare
- Photo storage, DNS and inbound email. Storage in European jurisdiction.
- Resend
- Sending order emails. Servers in Ireland (EU).
- Vercel
- Website hosting.
Transfers outside the EU
Some of these providers are companies headquartered outside the European Economic Area. Where that happens, the transfer relies on the standard contractual clauses approved by the European Commission or on an adequacy decision. You can ask us for a copy of the safeguards in place.
Your rights
You can ask us for access to your data, its rectification or erasure, and you can restrict or object to processing and request portability. An email to hola@tanfiel.com is enough.
If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Cookies
This site uses no analytics, advertising or profiling cookies. Only the storage strictly necessary for checkout to work, which is exempt from prior consent.