Privacy Policy
This Privacy Policy explains how Echo Portraits processes personal data when you use the website, make an inquiry, book a session, or communicate with us about product photography services.
GDPR Overview
Where the GDPR applies, we process personal data only on a lawful basis such as performance of a contract, compliance with legal obligations, legitimate interests, or consent where required. The relevant basis depends on the service requested and the context of the processing.
Your GDPR Rights
Where the GDPR applies, you may have rights to access your data, correct inaccurate data, request deletion, restrict processing, object to certain processing, and request portability where applicable. You may also withdraw consent where processing is based on consent, without affecting prior lawful processing.
Personal Data We Collect
We may process identification and contact details, inquiry content, booking and planning information, product and shot-list details, reference materials, communication records, payment-related information, delivery preferences, and technical data such as device, browser, and usage information. Where a session involves studio or on-location work, we may also process information needed to plan the shoot and manage file delivery.
How We Collect Data
We receive data from website forms, email, phone calls, planning calls, and messages exchanged during the booking and production process. We also generate data from our own records of service delivery, proof review, file preparation, and website use, including basic technical logs and cookie-related information.
Types of Cookies
We may use strictly necessary cookies for site operation, preference cookies to remember settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their purpose and technical function.
Cookie Controls
Where cookies are used, you can usually manage them through your browser settings and any cookie controls made available on the site. Blocking some cookies may affect site functions such as form handling, preference storage, or basic analytics where used.
Privacy Contact
Use the contact details below for privacy questions and rights requests.
You may have rights to receive information about our processing, obtain a copy of your data, request correction or deletion, and object to certain uses. Some requests may be limited where we must keep information for legal, contractual, or security reasons.
To exercise a privacy right, send a clear request describing the data or processing concerned. We may ask for additional information to verify identity and to locate the relevant records before responding.
We keep personal data only for as long as needed for the purpose for which it was collected, including booking administration, service delivery, accounting, dispute handling, and legal compliance. When data is no longer needed, we delete it or anonymize it where appropriate.
We may update this policy from time to time to reflect changes in our services, legal requirements, or operational practices. The revised version becomes effective when posted unless a different effective date is stated.
Purposes of Processing
We use personal data to respond to inquiries, assess project scope, prepare quotes, plan sessions, manage shot lists and approvals, produce and deliver edited files, handle payments and records, maintain website functionality, improve service quality, and meet legal and accounting obligations. We may also use limited technical data to secure the site and diagnose problems.
Service Providers and Partners
We may share personal data with trusted service providers that support website hosting, communications, file delivery, payment processing, record keeping, or technical maintenance. These parties may process data only for the services they provide to us and are expected to handle it under appropriate confidentiality and security obligations.
Legal Disclosures
We may disclose personal data where required to comply with law, a court order, or a lawful request from a public authority. We may also share information when needed to establish, exercise, or defend legal claims, or to protect our rights, users, or systems.