1. IntroductionThis Data Protection Policy applies to "you" photo studio, operated by Daria Svalova, and outlines our practices regarding the collection, use, processing, and protection of personal information.
2. Data CollectionWe collect personal information through:
- Booking photography sessions via our website.
- Payments for services.
- User surveys, feedback forms, and direct communications.
- Taking photos in the studio using the equipment provided.
- Website interactions (refer to our Cookie Policy).
3. Legal Basis for Processing DataOur processing of personal data is based on:
- Contractual necessity for providing photography services.
- Legitimate business interests for administrative, analytical, and marketing purposes.
4. Types of Data Collected and Use- Photographs: We store photographs taken in our studio on a web drive, providing clients with access. These are automatically deleted after 7 days, starting the day after the session. We have access to these photos but do not typically view them unless necessary for service provision.
- Client Consent for Social Media: We may request permission to share client photos on our social media. These are only shared with explicit consent and removed upon request.
- Print Requests: Photos used for print requests are accessible to us solely for this purpose and are deleted within one week from the request fulfilment.
- Personal Information: Names, surnames, email addresses, and phone numbers are stored in our CRM for service provision, business administration, analysis, and marketing and communication purposes. All marketing emails include an unsubscribe option.
- Payment Information: We do not retain payment details post-transaction.
5. Data Sharing and DisclosureData may be shared with third-party service providers for operational purposes and with law enforcement if legally required.
6. Third-Party Service Providers- Tilda.cc: Website functionality and design.
- Stripe.com: Secure payment processing.
- AcuityScheduling.com: Online booking, scheduling, and gift certificates.
- Google Analytics: Website traffic and user interaction analysis.
- Facebook.com and Instagram.com: Marketing and advertisement.
- Other Services: We may engage additional services as needed without limiting to this list.
7. Children’s PrivacyWe do not knowingly collect or store data from individuals under 18.
Clients under 18 are requested to inform us about their age.
8. Data Security and Breach NotificationWe implement security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
In case of a data breach, affected individuals will be notified via email if applicable.
9. Your RightsYou have the right to access, correct, delete, or restrict the processing of your data and withdraw consent at any time.
10. Contact InformationFor any data-related concerns or to exercise your rights, contact us at
youphotostudiolondon@gmail.com.
11. Policy UpdatesThis policy may be updated; we recommend reviewing it periodically.
12. Effective DateEffective as of 17 January 2024.