1. Data controller
EYEstunning Tenerife, Avenida Las Américas 2, Parque Santiago III, 38660 Playa de las Américas, Santa Cruz de Tenerife, Spain. Privacy enquiries and rights requests: info@eyestunning.com.
2. Information we process
Depending on the service, this may include the iris photograph and artwork, a random private retrieval code, optional customer name and email, product and price information, payment status, download history, expiry date, and short-lived security records used to prevent code guessing. EYEstunning does not store full card details.
3. Why we use it
- To create and deliver the artwork you requested and perform our contract with you.
- To confirm payment, provide secure downloads and answer service requests.
- To protect private images and prevent fraud or unauthorised code searches.
- To meet accounting, consumer-protection and other legal obligations.
4. Private photographs and retention
High-resolution originals and protected previews are stored separately from the public website. Each record has a configurable expiry period, normally 30, 60, 90 or 180 days. When the record is permanently deleted, the original, preview and associated delivery record are removed, except for limited transaction information that must be retained to meet legal obligations.
5. Service providers
We use professional providers for website hosting, private object storage and payment processing. Stripe processes card and wallet payments under its own privacy information. Providers receive only the data needed to perform their service and are subject to appropriate contractual and security safeguards.
6. International transfers
Where a provider processes data outside the European Economic Area, we require a lawful transfer mechanism and appropriate safeguards, such as an adequacy decision or approved standard contractual clauses.
7. Your rights
You may request access, correction, deletion, restriction, portability or objection where applicable. You may also complain to the Spanish Data Protection Agency (AEPD). To protect your photograph, we may ask you to verify your private code or identity before fulfilling a request.
8. Security
We use encrypted connections, private storage, random non-sequential codes, rate limiting, server-confirmed payments and temporary download access. No online system is risk-free, but access is limited to what is necessary for delivery and administration.
9. Children
For a child’s photograph, the accompanying parent or legal guardian must authorise the service and any related data processing. We do not offer iris photography to children under four years old.
10. Contact
For a privacy request or question, email info@eyestunning.com.
Last updated: 27 August 2026