This Privacy Policy explains how Piran Portraits processes personal data in connection with its website and photography services for small brands.
We use personal data to respond to inquiries, assess project scope, prepare quotes and delivery plans, coordinate product counts and shot lists, arrange sample setup approval, conduct photography sessions, manage proof gallery review, edit and deliver files, process payments, maintain records, secure the website, and meet legal or accounting obligations. We may also use limited technical data to improve site reliability and understand how the site is used.
We may share personal data with trusted service providers that support website hosting, communications, file storage, payment processing, scheduling, and similar operational tasks. These parties act on our instructions or under their own applicable legal obligations and are expected to use the data only for the services they provide. We do not sell personal data.
We may disclose personal data to public authorities, courts, or other parties when necessary to comply with legal obligations, enforce agreements, protect rights, or respond to lawful requests. We may also share information where disclosure is needed to prevent fraud, address security incidents, or support the establishment, exercise, or defense of legal claims.
We may process contact details, business details, project information, product descriptions, shot lists, reference materials, booking preferences, payment-related records, communication history, proof gallery selections, and technical data such as device and usage information. Where a client provides images or product samples for a session, we also process the information contained in those materials to plan, produce, review, and deliver the work.
We receive personal data from website forms, email, phone calls, planning calls, and messages exchanged during project coordination. We also collect data when you review a private selection gallery, approve a shot list or sample setup, make a payment, or otherwise interact with the website and our service workflow. Some technical data is generated automatically when the site is used.
The site may use session cookies, persistent cookies, and similar technologies. These may be necessary for core site functions, help remember form or gallery preferences, support security and fraud prevention, and provide limited measurement of site performance. We do not rely on cookies to collect more information than is needed for these purposes.
You can manage or delete cookies through your browser settings and, where available, through any cookie controls presented on the site. Blocking certain cookies may limit basic functions such as form submission, session continuity, or preference storage. Browser controls do not remove processing that is necessary for security or for the operation of requested services.
Where the GDPR applies, we process personal data on a lawful basis such as performance of a contract, steps taken before entering into a contract, compliance with legal obligations, legitimate interests, or consent where required. The relevant basis depends on the context, including inquiry handling, booking administration, image production, file delivery, and website operation.
If you are located in the European Economic Area, the General Data Protection Regulation may apply to our processing of your personal data.
Where applicable, you may have the right to access your data, request correction, request deletion, restrict processing, object to processing based on legitimate interests, and request data portability. If processing is based on consent, you may withdraw consent for future processing. You may also raise concerns with the competent supervisory authority under GDPR rules.
Subject to applicable law, you may request access to your personal data, correction of inaccurate information, deletion of data that is no longer needed, restriction of processing in certain cases, and information about how your data is used. Where processing is based on legitimate interests, you may object on grounds relating to your situation.
Requests should describe the data or processing concern clearly so we can locate the relevant records and respond appropriately. If a request is incomplete or unclear, we may ask for additional information before taking action. We aim to respond within the period required by applicable law.
We keep personal data only as long as needed for the purpose for which it was collected, including inquiry handling, project administration, accounting, dispute handling, and legal compliance. When data is no longer needed, we delete it or anonymize it unless a longer retention period is required by law or justified by a legitimate business need.
The current version applies from the date it is published on the site. If we make material changes, we will update the policy text and may provide an additional notice where appropriate. Continued use of the site after an update means the revised policy applies to future processing.
