How Bareface Handles Your Data: Privacy Policy Overview

At Bareface, your privacy matters. When you commission a portrait, you trust us with personal information — your name, your photos, your payment details. This page explains exactly what data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it. We’ve written this in plain language so you know what to expect, without having to parse legal text. If you have any privacy-related questions, email us at privacy@bareface.io and we’ll respond within 30 days. Last updated: January 6, 2026

---

​

What Data We Collect

When you use our website or place an order, we collect the following: Information you provide directly:

• Your name and email address
• Billing address and payment information
• Company name (for Teams Program orders)
• Reference photos you upload for your portrait commission
• Messages and correspondence with our team

Information collected automatically:

• IP address, browser type, and device information
• Pages visited, time spent on site, and referring sources
• Cookie and tracking data (see Cookies below)

We do not collect sensitive personal information beyond what’s necessary to process your order and deliver your portrait.

---

​

How We Use Your Data

We use the information we collect to:

• Process and fulfill your portrait commission
• Communicate with you about your order status and delivery
• Provide customer support and respond to your inquiries
• Send marketing emails (only if you’ve opted in)
• Display completed portraits in our portfolio (unless you’ve opted out)
• Prevent fraud and maintain accurate business records
• Comply with applicable legal obligations

We do not sell your personal information to third parties.

---

​

Third-Party Services We Use

We work with trusted service providers to operate our business. These partners process data on our behalf:

---

​

How Long We Keep Your Data

We retain your personal information only as long as necessary for the purpose it was collected: You can request early deletion by emailing privacy@bareface.io. We may need to retain certain records to comply with legal obligations even after a deletion request.

---

​

Security

We take your data security seriously and implement the following protections:

• SSL/TLS encryption for all data transmitted to our website
• AES-256 encryption for stored files
• PCI-compliant payment processing via Stripe
• Access to your data is limited to authorized personnel only

No method of transmission over the internet is completely secure, but we are committed to using industry-standard measures to protect your information.

---

​

Cookies

Bareface uses cookies to enhance your browsing experience and understand how our site is used. Types of cookies we use:

• Essential cookies — maintain your shopping cart and account session
• Analytics cookies — Google Analytics tracks site traffic and usage patterns
• Advertising cookies — Meta Pixel and Google Ads measure ad effectiveness

You can control or disable cookies through your browser settings. Disabling cookies may limit some website functionality. To opt out of advertising cookies specifically:

• Google: adssettings.google.com
• Meta/Facebook: facebook.com/settings?tab=ads

---

​

Your Rights

Regardless of where you’re located, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information in your account
• Delete your personal data (subject to legal retention requirements)
• Opt out of marketing emails at any time

California residents (CCPA/CPRA): You have additional rights, including the right to know what personal data we collect, request deletion, correct inaccurate data, limit use of sensitive personal information, and opt out of any data “sale” or “sharing” under California law. Bareface does not sell your personal information, but certain disclosures to advertising partners may qualify as “sharing” under California law. You can opt out of this by contacting us. EU residents (GDPR): You have the rights of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, email privacy@bareface.io. We will respond within 30–45 days depending on your location and the nature of your request.

---

​

International Data Transfers

Bareface is based in Ontario, Canada. If you access our services from outside Canada, your information may be transferred to and processed in Canada or the United States. By using our services, you consent to this transfer.

---

​

Children’s Privacy

Our services are intended for adults only. We do not knowingly collect personal information from anyone under 18. If you believe a child has submitted information to us, contact privacy@bareface.io immediately and we will remove it promptly.

---

​

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we’ll notify you by email or with a prominent notice on our website. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

---

​

Contact

Questions or concerns about your privacy? Reach us at: privacy@bareface.io Bareface Inc. — Ontario, Canada