Last updated: 21 September 2025

Who We Are

Querton.com is a photography portfolio and online shop operated by a private photographer based in Switzerland. We specialise in selling limited edition photographic prints to customers worldwide.

Our website address is: www.querton.com

For general enquiries, please visit our contact page at www.querton.com/contact

What Personal Data We Collect and Why We Collect It

Information You Provide to Us

When you make a purchase, we collect:
– Full name (required for order processing and delivery)
– Email address (required for order confirmations and customer service)
– Postal/delivery address (required for shipping)
– Phone number (required for delivery coordination)
– Payment information (processed securely by our payment providers)

Legal basis: Processing is necessary for the performance of a contract (your purchase order).

When you create an account, we collect:
– Username and password (for account access)
– Email address (for account management and security)
– Any optional profile information you choose to provide

Legal basis: Processing is based on your consent and our legitimate interest in providing account services.

Contact Forms

When you submit our contact form at www.querton.com/contact, we collect:
– Your name and email address
– Any information contained in your message
– Time and date of submission

Why we collect it: To respond to your enquiry and provide customer support.
Legal basis: Processing is based on your consent and our legitimate interest in responding to enquiries.
Retention:Contact form submissions are kept for 2 years for customer service purposes. We do not use this information for marketing purposes.

Cookies

Our website uses the following types of cookies:

Essential Cookies:
– Shopping cart functionality
– User login sessions
– Security and fraud prevention
– Website preferences

Analytics Cookies:
– Google Analytics cookies to understand website usage
– These track pages visited, time spent, general location, and device information

Social Media Cookies:
– May be set by social media platforms if you interact with social media features on our site

Your cookie choices: You can control cookies through your browser settings. However, disabling essential cookies may affect website functionality.

Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects information such as:
– Pages you visit and time spent
– Your general location (country/city level)
– Device and browser information
– How you found our website

Opt-out:You can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on available at: https://tools.google.com/dlpage/gaoptout

Google’s Privacy Policy: https://policies.google.com/privacy

Who We Share Your Data With

We share your personal data with the following third parties:

The Print Space (Print Fulfilment Partner)
– We share your name, delivery address, and order details
– Purpose: To print and ship your orders
– Location: London, UK
– Their privacy policy: [Link to The Print Space privacy policy]

Payment Processors
– Google Pay, Apple Pay, and other payment providers
– We share transaction information required for payment processing
– These services have their own privacy policies and security measures

Shipping Partners
– Royal Mail (UK), Deutsche Post (EU), DHL Express (Worldwide)
– We share your name, address, and tracking information
– Purpose: To deliver your orders

Analytics Providers
– Google Analytics receives anonymised usage data
– No personally identifiable information is shared

Legal Compliance**
– We may share data when required by law or to protect our rights

By default, we do not share personal data with anyone else.

How Long We Retain Your Data

Order Information: 7 years (for accounting, tax, and legal compliance)
Contact Form Submissions: 2 years (for customer service follow-up)
User Accounts:Until you request deletion or remain inactive for 3 years
Analytics Data: As determined by Google Analytics retention settings (currently 26 months)
Website Logs: 12 months (for security and technical purposes)

What Rights You Have Over Your Data

For EU/EEA Residents (GDPR Rights):
– Access: Request a copy of your personal data
– Rectification: Request correction of inaccurate data
– Erasure: Request deletion of your data (subject to legal obligations)
– Restriction: Request limitation of processing
– Portability: Request transfer of your data
– Object: Object to processing based on legitimate interests
– Withdraw consent: Where processing is based on consent

For All Users:
– Request information about what data we hold
– Request correction of inaccurate information
– Request deletion of your account and data (subject to legal retention requirements)
– Object to marketing communications (though we don’t send marketing emails by default)

Exercising your rights: Contact us via www.querton.com/contact with “Data Request” in the subject line.

Where Your Data Is Sent

As we serve customers worldwide and work with international partners, your data may be transferred outside your country of residence:

Transfers Outside EU/EEA:
– Switzerland: Recognised as providing adequate protection
– UK(The Print Space): Adequacy decision in place
– Other countries: We ensure appropriate safeguards through standard contractual clauses or other approved mechanisms

Safeguards: We ensure all international transfers meet European data protection standards through approved transfer mechanisms.

How We Protect Your Data

We implement appropriate technical and organisational measures to protect your personal information:

Technical Measures:
– SSL encryption for data transmission
– Secure hosting with regular security updates
– Regular website security monitoring
– Secure payment processing (we do not store full payment card details)

Organisational Measures:
– Access to personal data limited to necessary personnel only
– Regular review of data processing activities
– Privacy by design principles in new features

Note: No internet transmission is 100% secure, and we cannot guarantee absolute security.

What Data Breach Procedures We Have in Place

In the event of a data breach:

Internal Procedures:
– Immediate containment and assessment of the breach
– Documentation of the incident and affected data
– Risk assessment for affected individuals

External Notifications:
– Notification to relevant supervisory authorities within 72 hours (where required)
– Notification to affected individuals without undue delay (where high risk to rights and freedoms)
– Coordination with third-party providers if breach involves their systems

Contact: If you suspect a data breach, contact us immediately via www.querton.com/contact

What Third Parties We Receive Data From

We do not receive personal data about users from third parties, advertisers, or data brokers. All personal data we process is provided directly by you or generated through your use of our website.

What Automated Decision Making and/or Profiling We Do With User Data

We do not engage in automated decision-making or profiling. All customer service decisions and order processing involve human review.

Contact Information

For privacy-specific concerns, please contact us via www.querton.com/contact and include “Privacy” in your subject line.

General Contact: www.querton.com/contact

As we are a small photography business, we handle all data protection enquiries personally and aim to respond within 72 hours.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
– Posting the updated policy on this page
– Updating the “Last updated” date
– For significant changes, we may notify you via email (if we have your contact details)

Legal Basis for Processing (EU/EEA Residents)

We process your personal data under the following legal bases:
– Contract: To fulfil orders and provide services you’ve requested
– LegitimateInterest: To improve our services, prevent fraud, and provide customer support
– Consent: For contact form submissions and any optional features
– LegalObligation: To comply with accounting, tax, and other legal requirements