> ## Documentation Index
> Fetch the complete documentation index at: https://help.bareface.io/llms.txt
> Use this file to discover all available pages before exploring further.

# How Bareface Handles Your Data: Privacy Policy Overview

> Understand what data Bareface collects, how it's used, how long it's retained, and how to exercise your privacy rights as a customer.

At Bareface, your privacy matters. When you commission a portrait, you trust us with personal information — your name, your photos, your payment details. This page explains exactly what data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it. We've written this in plain language so you know what to expect, without having to parse legal text.

If you have any privacy-related questions, email us at [privacy@bareface.io](mailto:privacy@bareface.io) and we'll respond within 30 days.

*Last updated: January 6, 2026*

***

## What Data We Collect

When you use our website or place an order, we collect the following:

**Information you provide directly:**

* Your name and email address
* Billing address and payment information
* Company name (for Teams Program orders)
* Reference photos you upload for your portrait commission
* Messages and correspondence with our team

**Information collected automatically:**

* IP address, browser type, and device information
* Pages visited, time spent on site, and referring sources
* Cookie and tracking data (see [Cookies](#cookies) below)

We do not collect sensitive personal information beyond what's necessary to process your order and deliver your portrait.

***

## How We Use Your Data

We use the information we collect to:

* Process and fulfill your portrait commission
* Communicate with you about your order status and delivery
* Provide customer support and respond to your inquiries
* Send marketing emails (only if you've opted in)
* Display completed portraits in our portfolio (unless you've opted out)
* Prevent fraud and maintain accurate business records
* Comply with applicable legal obligations

We do not sell your personal information to third parties.

***

## Third-Party Services We Use

We work with trusted service providers to operate our business. These partners process data on our behalf:

<AccordionGroup>
  <Accordion title="E-commerce and payments">
    * **Shopify** — powers our storefront and processes orders
    * **Stripe** — handles payment processing securely

    We do not store your complete payment card information. All payment data is handled directly by Stripe using PCI-compliant infrastructure.
  </Accordion>

  <Accordion title="File management and delivery">
    * **Uploadcare** — manages reference photo uploads
    * **Dropbox** — stores and delivers your completed portrait files
  </Accordion>

  <Accordion title="Marketing and analytics">
    * **Klaviyo** — email marketing (only if you've opted in)
    * **Google Analytics** — website traffic and usage analytics
    * **Meta Pixel and Google Ads** — advertising measurement and personalization

    Advertising partners may use cookies and tracking technologies to measure ad effectiveness. You can opt out through your browser settings or via the platform controls linked in the [Cookies](#cookies) section below.
  </Accordion>

  <Accordion title="Customer support and proofing">
    * **HelpScout** — customer service and support communications
    * **GoVisually** — client proofing and portrait review
  </Accordion>
</AccordionGroup>

***

## How Long We Keep Your Data

We retain your personal information only as long as necessary for the purpose it was collected:

| Data type                            | Retention period                          |
| ------------------------------------ | ----------------------------------------- |
| Reference images                     | Deleted 30 days after project completion  |
| Completed portraits and source files | 1 year from purchase                      |
| Order and account records            | 7 years (legal compliance)                |
| Marketing email lists                | Until you unsubscribe or request deletion |
| Non-customer inquiries               | 2 years from submission                   |

You can request early deletion by emailing [privacy@bareface.io](mailto:privacy@bareface.io). We may need to retain certain records to comply with legal obligations even after a deletion request.

***

## Security

We take your data security seriously and implement the following protections:

* **SSL/TLS encryption** for all data transmitted to our website
* **AES-256 encryption** for stored files
* **PCI-compliant payment processing** via Stripe
* Access to your data is limited to authorized personnel only

No method of transmission over the internet is completely secure, but we are committed to using industry-standard measures to protect your information.

***

## Cookies

Bareface uses cookies to enhance your browsing experience and understand how our site is used.

**Types of cookies we use:**

* **Essential cookies** — maintain your shopping cart and account session
* **Analytics cookies** — Google Analytics tracks site traffic and usage patterns
* **Advertising cookies** — Meta Pixel and Google Ads measure ad effectiveness

You can control or disable cookies through your browser settings. Disabling cookies may limit some website functionality. To opt out of advertising cookies specifically:

* **Google:** [adssettings.google.com](https://adssettings.google.com)
* **Meta/Facebook:** [facebook.com/settings?tab=ads](https://www.facebook.com/settings?tab=ads)

<Note>
  Bareface recognizes Global Privacy Control (GPC) signals as a valid opt-out request for tracking and targeted advertising. If your browser sends a GPC signal, we will honor it.
</Note>

***

## Your Rights

Regardless of where you're located, you have the right to:

* **Access** the personal information we hold about you
* **Correct** inaccurate information in your account
* **Delete** your personal data (subject to legal retention requirements)
* **Opt out** of marketing emails at any time

**California residents (CCPA/CPRA):** You have additional rights, including the right to know what personal data we collect, request deletion, correct inaccurate data, limit use of sensitive personal information, and opt out of any data "sale" or "sharing" under California law. Bareface does not sell your personal information, but certain disclosures to advertising partners may qualify as "sharing" under California law. You can opt out of this by contacting us.

**EU residents (GDPR):** You have the rights of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. You also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, email [privacy@bareface.io](mailto:privacy@bareface.io). We will respond within 30–45 days depending on your location and the nature of your request.

***

## International Data Transfers

Bareface is based in Ontario, Canada. If you access our services from outside Canada, your information may be transferred to and processed in Canada or the United States. By using our services, you consent to this transfer.

***

## Children's Privacy

Our services are intended for adults only. We do not knowingly collect personal information from anyone under 18. If you believe a child has submitted information to us, contact [privacy@bareface.io](mailto:privacy@bareface.io) immediately and we will remove it promptly.

***

## Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we'll notify you by email or with a prominent notice on our website. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

***

## Contact

Questions or concerns about your privacy? Reach us at:

**[privacy@bareface.io](mailto:privacy@bareface.io)**

Bareface Inc. — Ontario, Canada