Last updated: 02.05.2026
1. Data controller
The controller of personal data collected through rg.photo is Julia Sherman. Contact for data-related matters: hello@rg.photo.
2. Data we collect
Personal data is collected when you use the forms on the site, and automatically as you browse:
- Order form — gymnast's name, birth year, email address, phone number (optional), and the chosen competition and package. This data is necessary to accept and fulfil your order.
- Contact form / email correspondence — name, email or phone, and message content.
- IP address, browser type, operating system — stored in Cloudflare server logs for security purposes.
- Cookies set by Cloudflare for security (anti-bot).
3. Purpose and legal basis
- Accepting and fulfilling your order and related contact — Art. 6(1)(b) GDPR (performance of a contract).
- Invoicing and tax obligations — Art. 6(1)(c) GDPR (legal obligation).
- Site security and proper operation — Art. 6(1)(f) GDPR (legitimate interest).
- Replying to your messages — Art. 6(1)(b)/(f) GDPR.
4. Retention period
- Order data — for the duration of fulfilment and the period required by law (incl. tax and accounting rules).
- Cloudflare server logs — 30 days.
- Email correspondence — until the matter is resolved or you request deletion.
5. Recipients of data
Data may be processed by:
- Cloudflare, Inc. — hosting and DDoS protection (US / EEA).
- Resend (or Brevo) — email service provider for the domain.
6. Your rights
You have the right to access, rectify, erase, restrict processing of, port, and object to processing of your data. You may also lodge a complaint with the supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO).
7. Cookies
The site uses only strictly necessary cookies (Cloudflare anti-bot). No analytics or marketing cookies are used.
8. Contact
For data-related questions: hello@rg.photo.