This Privacy Policy explains how Moments & Memories processes personal data in connection with its photography studio services, website use, and related client communications.
This summary highlights how to navigate the information provided in this policy.
Depending on your location and the way your data is processed, you may have rights to obtain information about our processing, request correction, ask for deletion, object to certain uses, or request restriction of processing. Some requests may be limited where we must keep data for legal, contractual, or security reasons.
To protect privacy and security, we may ask for information needed to verify your identity and understand your request. We will review the request and respond within the period required by applicable law, subject to any lawful extensions or exceptions.
We keep personal data only for as long as it is needed for the relevant purpose, including project administration, accounting, legal compliance, dispute handling, and secure business records. When data is no longer needed, it is deleted, anonymised, or otherwise disposed of in a reasonable and secure manner.
We may update this Privacy Policy from time to time to reflect changes in our services, processing practices, or legal requirements. The revised version will apply from the date it is published unless a different effective date is stated.
We process contact details, inquiry content, booking information, project briefs, shot lists, product delivery details, proofing feedback, invoice and payment records, and technical data such as device and usage information. Where needed for studio work, we may also process product images and related reference materials provided by clients.
We receive personal data from contact forms, email, planning calls, booking and project communications, product intake arrangements, proof gallery review, payment processing, and file delivery. We also collect limited technical data automatically when the website is used, and we may receive information from service providers involved in hosting, payment, or file transfer.
We may use essential cookies for site operation, security, and form functionality, and limited preference or analytics cookies where enabled. These cookies help remember settings, support page performance, and understand general site use. We do not use cookies to collect more data than is needed for these purposes.
We use browser settings and similar controls to manage non-essential cookies. If cookies are blocked or removed, some site functions may not work as intended. Essential cookies may still be used where they are necessary for the operation and security of the website.
Where the GDPR applies, we process personal data only when we have a lawful basis, such as performance of a contract, compliance with legal obligations, legitimate interests, or consent where required. We apply data minimisation and purpose limitation to the information we handle.
If you are in the European Economic Area, the GDPR may apply to our processing of your personal data.
Where the GDPR applies, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability in appropriate cases. If processing is based on consent, you may withdraw consent for future processing without affecting prior lawful processing.
We use personal data to respond to inquiries, assess project scope, prepare quotes and delivery plans, manage bookings, review shot lists and sample setups, produce and edit images, deliver files, process payments, maintain records, operate the website, secure our systems, and meet legal or accounting obligations. We may also use limited data to manage client communication during proof review and final delivery.
We may share personal data with trusted service providers that support website hosting, communications, payment processing, file transfer, storage, and similar operational functions. These parties act on our instructions or under their own legal obligations and are expected to handle data appropriately for the services they provide.
We may disclose personal data where required to comply with law, respond to lawful requests, protect our rights, or support the establishment, exercise, or defence of legal claims. We may also share information when necessary to prevent fraud, misuse, or security incidents.
