Privacy Policy

Last updated: August 18, 2026

This policy explains what personal information photographycheatsheets.com collects, why, who it is shared with, how long it is kept, and what you can ask us to do with it. It is written to be read, not to be survived.

1. Who is responsible for your data

We are established in France, so we handle personal data under the EU General Data Protection Regulation, and we extend the same rights to every customer wherever they live. We have not appointed a Data Protection Officer, which is not required for an activity of this size.

2. What we collect and why

When you buy something

Collected: first name, last name, email address, billing country, purchase history, invoice.
Why: to process your order, deliver your files, issue an invoice, and answer you afterwards.
Basis: performing our contract with you, and our legal accounting obligations.

Your card number never reaches us. Payment details are entered directly with Stripe. We only ever see that a payment succeeded, and the last four digits.

When you subscribe to our emails

Collected: email address, first name if you give it, and whether you opened or clicked.
Why: to send you the photography emails you asked for.
Basis: your consent. Every email carries an unsubscribe link that works immediately.

When you buy from us

Collected: the email address and name you used at checkout.
Why: once you have bought from us, we add you to our customer mailing list, so we can tell you about updates to what you own and about our other photography material.
Basis: our legitimate interest in staying in touch with our own customers. You did not have to tick a box for this, so we make leaving just as easy: every email carries a one-click unsubscribe link, and unsubscribing has no effect on the files you bought — they stay yours.

When you simply browse

Collected: pages viewed, approximate region, browser and device type, referring site.
Why: to understand which pages are useful and to keep the site working.
Basis: our legitimate interest in running and improving the site, and your consent where the law requires it.

Advertising measurement

We advertise on Meta platforms (Facebook and Instagram). Where you consent, we use the Meta pixel and Meta’s Conversions API to measure which advertisements lead to a visit or a purchase. This involves sharing a limited set of data with Meta, including a hashed version of your email address for purchase events.

You can refuse this at any time through the cookie banner, and you can control advertising personalisation in your own Meta account settings.

3. Cookies

We use cookies that are strictly necessary for the site to work — keeping your cart, keeping you signed in, remembering your cookie choice. These do not require consent.

Measurement and advertising cookies are only set after you accept them. Refusing them does not prevent you from buying or from reading anything.

You can also block or delete cookies in your browser settings at any time.

4. Who your data is shared with

Recipient	Purpose	Where
Stripe	Payment processing	United States / Ireland
SureCart	Checkout, orders, file delivery	United States
o2switch	Website hosting	France
MailPoet	Sending our emails	European Union
Meta	Advertising measurement, with your consent	United States / Ireland

We never sell your personal information, and we never rent or trade our email list. Data is shared only with the providers above, only for the purposes listed, and only to the extent they need it.

5. International transfers

Some of these providers are established in the United States. Transfers rely on the European Commission’s standard contractual clauses or on an adequacy decision, together with the safeguards those providers put in place.

6. How long we keep it

• Order data: 5 years from the purchase.
• Invoices: 10 years, as accounting law requires.
• Email subscription: until you unsubscribe, and then up to 3 years of inactivity.
• Audience measurement: 13 months at most.
• Support messages: 3 years after our last exchange.

7. Your rights

Wherever you live, you can ask us to:

• see the personal information we hold about you, and get a copy of it;
• correct anything inaccurate;
• delete your data, unless we must keep it for accounting or legal reasons;
• stop using it for marketing, or withdraw a consent you gave;
• receive it in a portable, machine-readable format.

Use our contact form. We answer within one month. We may ask you to confirm your identity before acting on a request, so that nobody else can act in your name.

If you live in California

You may ask what categories of personal information we collected about you in the past 12 months, why, and who received it; ask for it to be deleted or corrected; and ask us not to share it for cross-context behavioural advertising. We do not sell personal information. The advertising measurement described in section 2 may count as “sharing” under California law: refusing advertising cookies in the banner is how you opt out, and you can also write to us. We will never treat you differently for exercising these rights.

If you live in the European Union or the United Kingdom

You also have the right to object to processing based on our legitimate interest, the right to restrict processing, and the right to lodge a complaint with your supervisory authority — in France, the CNIL.

8. Do Not Track

Browsers can send a “Do Not Track” signal. There is still no shared standard for how sites should answer it, so we do not respond to it specifically. Our cookie banner gives you a clearer and more reliable choice.

9. Children

This site is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has given us data, write to us and we will delete it.

10. Security

The site is served over HTTPS, access to the administration is restricted and protected by strong passwords, and payment data never transits through our servers. No system is perfect, but we take this seriously and we will tell you without delay if a breach ever affects your data.

11. Changes to this policy

If we change how we handle personal data, we update this page and change the date at the top. Significant changes are announced by email to our subscribers.

12. Contact

STUDIO 538 — 200 rue de la Croix Nivert, 75015 Paris, France
Contact form

Already a customer? Find your files, orders and invoices in My account.

← Back to the site