Privacy Policy
This Privacy Policy explains how Lens Legacy processes personal data when you visit the website, make an inquiry, book a studio session, use the private gallery, or otherwise interact with our photography services.
This summary highlights how to navigate the information provided in this policy.
Contact Information
How We Use Personal Data
We use personal data to respond to inquiries, assess project scope, prepare quotes and delivery plans, schedule appointments, manage product and shot-list details, produce and deliver images, operate the private selection gallery, process payments, maintain records, secure our systems, and meet legal or accounting obligations. We may also use limited technical data to improve site reliability and understand basic usage patterns.
Service Providers and Partners
We may share personal data with service providers that support website hosting, communications, payment processing, gallery delivery, file storage, or technical maintenance. Where a third party acts on our behalf, it is expected to use the data only for the agreed service and to apply appropriate confidentiality and security measures. We do not share data for unrelated purposes.
Legal Disclosures
We may disclose personal data to comply with legal obligations, respond to lawful requests, protect our rights, investigate security or fraud issues, or support the establishment, exercise, or defense of legal claims. Any disclosure is limited to what is reasonably necessary for the relevant purpose.
Personal Data We Collect
We may collect identification and contact details, booking and project information, communication content, payment-related records, gallery and selection preferences, and technical data such as device and browser information. In a studio context, we may also process product details, shot-list instructions, reference materials, and delivery preferences provided during the photography process.
Sources of Personal Data
We receive data when you submit an inquiry, request a consultation, book a session, exchange messages, review a proof gallery, or complete payment. We also collect limited technical data automatically when you visit the website or use the private gallery, and we may receive product and project details that you choose to provide for the session.
Cookies We Use
We may use essential cookies to support site security and core functions, preference cookies to remember settings, and analytics cookies to understand how the site is used. If a private gallery or booking tool relies on session cookies, those cookies may be needed to maintain access and complete the requested action.
Cookie Controls
You can manage cookies through your browser settings and, where available, through the site’s cookie controls. Essential cookies may remain necessary for basic site functions, while analytics or preference cookies can usually be adjusted or disabled. Limiting cookies may affect some features, including gallery access or saved preferences.
GDPR Overview
Lens Legacy processes personal data under GDPR principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. We rely on a lawful basis that depends on the context, such as performance of a contract, legitimate interests, legal obligation, or consent where required.
Where GDPR applies, it governs our processing of personal data for users in the European Economic Area and, in some cases, related cross-border services.
GDPR Rights
Where GDPR applies, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability in appropriate cases. If processing is based on consent, you may withdraw it for future processing. Some requests may be limited by legal obligations, security needs, or the need to retain records connected to a booking or transaction.
Subject to applicable law, you may request access to your personal data, correction of inaccurate information, deletion in appropriate cases, restriction of processing, objection to certain processing, and portability where the conditions are met. You may also raise concerns about how your data is handled and ask for clarification about the processing carried out in connection with your booking or website use.
To exercise a privacy right, send a clear request using the contact details in this policy and describe the data or activity concerned. We may ask for information needed to verify your identity and to locate the relevant records. If a request is refused in whole or in part, we will explain the reason where the law requires us to do so.
We keep personal data only for as long as needed for the relevant inquiry, booking, delivery, accounting, dispute-handling, or legal compliance purpose. When data is no longer required, we delete it or anonymize it where appropriate. Some records may be retained longer if law, tax rules, or contractual obligations require it.
Updates take effect when posted unless a different effective date is stated. If a change is material, we will take reasonable steps to draw attention to it through the website or other appropriate communication channels. The version in force is the one published most recently.