Privacy policy
Last updated: May 2026
Your privacy matters to us. This policy explains what personal information we collect, how we use it, and your rights — in plain language.
1. Who We Are
Flavia Nasser is a Brazilian company that produces personalized photo products. We operate the international website at flavianasser.com and are the data controller for the personal information you provide.
Contact: hello@flavianasser.com
2. What Information We Collect
2.1 Information You Give Us
When you place an order, we collect:
- Your name
- Email address
- Shipping address
- Phone number (for delivery and SMS notifications)
- Payment information (processed securely by Stripe or PayPal — we never store card details)
- Photos and personal content you upload to create your product
- Messages and communications you send us
2.2 Information Collected Automatically
When you visit our website, we may collect:
- IP address and browser type
- Pages viewed and time on site
- Device type and operating system
- Referral source (how you found us)
This data is used for analytics and website improvement only.
3. How We Use Your Information
We use your personal information to:
- Process and fulfill your order
- Communicate with you about your order (confirmation, layout preview, dispatch, delivery)
- Respond to your questions and support requests
- Send transactional emails and SMS notifications related to your order
- Comply with legal and regulatory obligations
With your consent, we may also send marketing communications about new products and promotions. You can opt out at any time.
4. How We Share Your Information
We do not sell your personal information. We may share it with:
- Shipping carriers (DHL, FedEx) — to deliver your order
- Payment processors (Stripe, PayPal) — to handle payment securely
- Email marketing platform (Klaviyo) — to send transactional and promotional email communications
- SMS service provider (Twilio) — to send order-related SMS and customer support messages
- Customer support tools (Chatwoot) — to manage support requests
- Analytics tools (Google Analytics) — to understand website usage
All third-party partners are contractually required to protect your data and use it only for the purpose of providing their service to us.
5. Your Photos & Personal Content
Photos you submit are used solely to produce your ordered product. We do not share your photos with third parties for any other purpose.
We may retain photos on our secure servers for a limited period after delivery in case a replacement or reprint is needed. You may request deletion of your photos at any time by contacting us.
6. Data Retention
- Order data: retained for up to 5 years for accounting and legal compliance purposes
- Photos and creative files: retained for up to 12 months after delivery, then deleted
- Marketing preferences: retained until you opt out or request deletion
7. Your Rights
Depending on your country of residence, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate data
- Request deletion of your data (right to be forgotten)
- Object to or restrict certain uses of your data
- Receive a copy of your data in a portable format
- Withdraw consent for marketing communications at any time
To exercise any of these rights, email hello@flavianasser.com. We will respond within 30 days.
7.1 EU / EEA Residents (GDPR)
If you are in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing is primarily contract performance (to fulfill your order) and, for marketing, your explicit consent. You also have the right to lodge a complaint with your national data protection authority.
7.2 California Residents (CCPA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell your personal information.
8. Cookies
Our website uses cookies to improve your experience and collect analytics data. You can manage cookie preferences through your browser settings. Disabling cookies may affect some website functionality.
9. Data Security
We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse. All payment data is processed by PCI-DSS compliant providers. No system is completely secure, and we cannot guarantee absolute security.
10. International Data Transfers
As a Brazilian company serving international customers, your personal data may be processed in Brazil and by third-party providers in other countries. We ensure appropriate safeguards are in place in compliance with applicable data protection laws.
SMS Communications
When you provide your phone number through our SMS signup form, customer support form, or during checkout (with your explicit consent), you agree to receive SMS messages from Flávia Nasser. These messages may include:
- Order confirmations and shipping updates
- Photo file submission reminders required to start production
- Customer support responses
- Other transactional notifications related to your purchase
Message frequency varies based on your order activity. Message and data rates may apply. You can opt out at any time by replying STOP to any of our SMS messages, or reply HELP for help.
We use Twilio as our SMS service provider. Phone numbers and SMS opt-in data are stored securely and are NOT shared with third parties or affiliates for marketing or promotional purposes. Phone numbers are used exclusively to communicate with you about your orders and support requests, and to comply with applicable laws.
If you wish to delete your phone number from our records, please email hello@flavianasser.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always on our website. Material changes will be communicated by email.
12. Contact
Flavia Nasser — hello@flavianasser.com