Privacy Policy

Privacy Policy

Last updated: 05/09/2026

This Privacy Policy describes how BA visuals LLC (“we”, “us”, or “our”) collects, uses, and protects personal data when you visit or use the website https://ba-visuals.com (the “Website”).


1. Controller Information

For the purposes of applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where applicable, the data controller is:

Business name: BA visuals LLC
Registered address: 5 E 3rd St, Sheridan 82801, Wyoming, USA
Company ID (TIN): 41-3356160
E-mail: [email protected]

We operate globally and provide services to users worldwide, including in the European Union. Where required, we comply with the GDPR and other applicable data protection laws.


2. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identification data (such as name or username, if provided)

  • Contact data (such as email address)

  • Technical data (such as IP address, browser type, device information)

  • Usage data (such as interactions with the Website)

  • Any other information you voluntarily provide to us


3. Comments

When visitors leave comments on the Website, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to help with spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to determine whether you are using it. Gravatar’s privacy policy is available at: https://automattic.com/privacy/

After approval of your comment, your profile picture may be visible to the public in the context of your comment.


4. Media

If you upload images to the Website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the Website can download and extract any location data from images.


5. Cookies and Tracking Technologies

We use cookies and similar technologies to ensure the proper functioning of the Website and to provide the best possible user experience.

Some cookies are strictly necessary for the operation of the Website. Other cookies may be used only with your consent.

You can manage your cookie preferences at any time via our cookie banner or your browser settings.

For detailed information about the cookies we use, their purposes, and their retention periods, please refer to our Cookie Policy, which is generated and managed by our consent management platform.


6. Embedded Content from Other Websites

Articles or pages on this Website may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves in the same way as if you had visited the other website directly.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including tracking your interaction if you have an account and are logged in to that website.


7. Who We Share Your Data With

We do not sell your personal data.

We may share your data with trusted service providers strictly on a need-to-know basis and under appropriate contractual safeguards, such as:

  • Hosting and infrastructure providers (EU-based hosting provider)

  • Security and maintenance providers

  • Spam detection services (for example, for comment moderation)

If you request a password reset, your IP address may be included in the password reset email.


8. How Long We Retain Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

  • Comments and related metadata are retained indefinitely unless you request deletion.

  • User account data (if applicable) is retained for as long as the account remains active.

  • Server logs are retained for a limited period for security and maintenance purposes.


9. Your Rights

Depending on your location and applicable law (including GDPR), you may have the right to:

  • Request access to your personal data

  • Request correction of inaccurate or incomplete data

  • Request erasure of your personal data

  • Request restriction of processing

  • Object to processing

  • Request data portability

These rights are not absolute and may be subject to legal limitations.

To exercise your rights, please contact us at: [email protected]


10. International Data Transfers

Your data may be processed in countries outside your country of residence, including the United States.

Where required by law, we implement appropriate safeguards, such as standard contractual clauses or equivalent legal mechanisms, to protect your personal data.


11. Legal Basis for Processing (GDPR)

Where GDPR applies, we process your personal data under one or more of the following legal bases:

  • Your consent

  • Performance of a contract

  • Compliance with legal obligations

  • Legitimate interests (such as ensuring website security, preventing fraud and abuse)


12. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

These measures include, among others:

  • HTTPS/SSL encryption

  • Access control mechanisms

  • Regular backups

  • Security monitoring and updates


13. United States residents (CCPA/CPRA and other state privacy laws)

If you are a resident of California or another U.S. state with a comprehensive privacy law (for example Virginia, Colorado, Connecticut, Utah, Texas or Oregon), the following applies in addition to the rest of this policy.

Categories of personal information we collect: identifiers (name, e-mail address), commercial information (orders and payments, processed by the Gumroad marketplace), internet activity (cookies, analytics, device and browser data) and any content you send us (for example your logo). We collect this information directly from you and through cookies, and we use it only for the purposes described in this policy.

We do not sell your personal information and we do not share it for cross-context behavioural advertising, and we have not done so in the preceding 12 months. We do not collect sensitive personal information and we do not knowingly collect personal information from anyone under 16 years of age. Because we do not sell or share personal information, a browser opt-out preference signal has no additional effect.

Your rights: the right to know what personal information we collect, use and disclose; the right to access it; the right to correct inaccurate information; the right to delete it; the right to opt out of sale or sharing (not applicable, as we do not sell or share); the right to limit the use of sensitive personal information (not applicable, as we do not collect it); and the right not to be discriminated against for exercising any of these rights.

How to exercise your rights: e-mail us at [email protected]. We will verify your request using the e-mail address associated with your data and respond within 45 days. You may authorise an agent to submit a request on your behalf; we may ask for proof of that authorisation.


14. Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the competent data protection authority.

For users in the European Union, this is your local data protection authority.


15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.


If you have any questions about this Privacy Policy, please contact us at: [email protected]