Privacy Policy

Last updated: 2026

Protecting your personal data is a priority for GREAT AGE PHOTOGRAPHY. This privacy policy explains transparently how we handle the information you entrust to us during your visit and purchases.

1. Who collects your data? The data controller is the company: GREAT AGE PHOTOGRAPHY FZCO, 38th Floor, Media One Hotel – Office Tower, Dubai Media City, PO Box 334069, Dubai, United Arab Emirates. Contact email: secretariat@carluccio.fr

2. What data do we collect? We practice data minimization. We only collect what is strictly necessary to process your order. Since our site operates without creating a customer account (“Guest Checkout”), we only collect the following during purchase:

  • Identity information: Last name, First name.

  • Contact information: Email address (to receive your photos/invoices), Phone number.

  • Delivery/Billing information: Postal address.

  • Payment information: Transactions are managed by Stripe. We never have access to your full credit card numbers, only the last digits and the expiration date for accounting verification purposes.

  • Technical data: IP address and browser type (necessary for security and fraud prevention).

3. Why do we use your data? Your data is used exclusively for:

  • Contract execution: Processing your payment, generating your invoice, and delivering your products (digital files or prints).

  • Customer service: Responding to you in case of a problem with your order.

  • Legal obligations: Retaining invoices for accounting purposes (legal obligation).

We never resell your data. We do not use it for advertising purposes (no unsolicited newsletters, no retargeting).

4. Where is your data stored? Your privacy is protected by high-security hosting in Switzerland, a country recognized by the European Union for its adequate level of protection.

  • Site hosting: Infomaniak Network SA (Geneva, Switzerland).

  • Payment processing: Stripe (PCI-DSS Level 1 certified, the highest level of security).

Although our company is based in Dubai (Non-EU), the transfer of your data to our headquarters is strictly limited to the administrative management of your order, based on contractual necessity (Article 49 of the GDPR).

5. Retention Period

  • Order data: Kept for 10 years in accordance with legal accounting obligations.

  • Banking data: We do not retain this data. It is processed instantly by Stripe.

6. Cookies We respect your peace of mind: this site uses no advertising or tracking cookies (such as Google Analytics or Facebook Pixel). You therefore do not have a consent banner to validate. We only use technical cookies strictly necessary for the site to function:

  • WooCommerce: To keep items in your cart while you browse.

  • WPML: To remember your language choice (French or English).

  • Stripe: To secure the transaction and prevent fraud.

7. Your Rights In accordance with the GDPR and applicable laws, you have the right of access, rectification, erasure, and portability of your data. To exercise these rights, simply send us an email at secretariat@carluccio.fr.