1. Introduction
This Data Protection Policy applies to "you" photo studio, operated by Daria Svalova, and outlines our practices regarding the collection, use, processing, and protection of personal information.

2. Data Collection
We collect personal information through:

• Booking photography sessions via our website.
• Payments for services.
• User surveys, feedback forms, and direct communications.
• Taking photos in the studio using the equipment provided.
• Website interactions (refer to our Cookie Policy).

3. Legal Basis for Processing Data
Our processing of personal data is based on:

• Contractual necessity for providing photography services.
• Legitimate business interests for administrative, analytical, and marketing purposes.

4. Types of Data Collected and Use

• Photographs: We store photographs taken in our studio on a web drive, providing clients with access. These are automatically deleted after 7 days, starting the day after the session. We have access to these photos but do not typically view them unless necessary for service provision.
• Client Consent for Social Media: We may request permission to share client photos on our social media. These are only shared with explicit consent and removed upon request.
• Print Requests: Photos used for print requests are accessible to us solely for this purpose and are deleted within one week from the request fulfilment.
• Personal Information: Names, surnames, email addresses, and phone numbers are stored in our CRM for service provision, business administration, analysis, and marketing and communication purposes. All marketing emails include an unsubscribe option.
• Payment Information: We do not retain payment details post-transaction.

5. Data Sharing and Disclosure
Data may be shared with third-party service providers for operational purposes and with law enforcement if legally required.

6. Third-Party Service Providers

• Tilda.cc: Website functionality and design.
• Stripe.com: Secure payment processing.
• AcuityScheduling.com: Online booking, scheduling, and gift certificates.
• Google Analytics: Website traffic and user interaction analysis.
• Facebook.com and Instagram.com: Marketing and advertisement.
• Other Services: We may engage additional services as needed without limiting to this list.

7. Children’s Privacy
We do not knowingly collect or store data from individuals under 18.
Clients under 18 are requested to inform us about their age.

8. Data Security and Breach Notification
We implement security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
In case of a data breach, affected individuals will be notified via email if applicable.

9. Your Rights
You have the right to access, correct, delete, or restrict the processing of your data and withdraw consent at any time.

10. Contact Information
For any data-related concerns or to exercise your rights, contact us at youphotostudiolondon@gmail.com.

11. Policy Updates
This policy may be updated; we recommend reviewing it periodically.

12. Effective Date
Effective as of 17 January 2024.