1. Who is responsible for your data
Gabriela Patru Photography is the “data controller” for the personal information described here. We are a photography studio based in Coventry, West Midlands, United Kingdom. For anything to do with your data, contact us at contact@gabrielapatru.co.uk.
2. What we collect
- Enquiry details — the name, email address, phone number and message you send through our contact form.
- Booking details — information needed to plan your session, such as session type, preferred dates and any notes you share.
- Photographs — the images created during your session.
- Technical data — basic, non-identifying information your browser sends when loading the site (see our Cookie Policy).
3. How and why we use it
- To respond to enquiries and arrange sessions — on the basis of taking steps to enter into, and perform, our contract with you.
- To deliver your photographs and provide your private gallery — again to perform our contract.
- To show selected work in our portfolio — only with your consent, which you can withdraw at any time.
- To keep records and meet legal or tax obligations — on the basis of our legitimate interests and legal duties.
4. Who we share it with
We never sell your data. We share it only with the trusted service providers that help us run the studio, each acting as a processor under contract:
- Supabase — hosts our database and stores enquiry messages and image files (London / EU region).
- Vercel — hosts and serves this website.
- Resend — delivers the email notification we receive when you submit the contact form.
We may also disclose information where required by law or to establish or defend legal claims.
5. International transfers
Our providers may process data outside the UK. Where they do, that transfer is protected by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent approved mechanisms.
6. How long we keep it
- Contact-form enquiries are kept while we’re in touch and for a reasonable period afterwards, then deleted.
- Booking and accounting records are kept for as long as required for tax and legal purposes (generally up to six years).
- Image files are kept for a limited period after delivery so we can re-send your gallery if needed — please back up your own copies.
7. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete your data, or restrict how we use it;
- object to processing based on our legitimate interests;
- withdraw consent (for example, to portfolio use) at any time;
- receive a copy of certain data in a portable format.
To exercise any of these, email contact@gabrielapatru.co.uk. We’ll respond within one month.
8. Keeping your data secure
Access to enquiries and images is protected by authentication and encrypted connections. While no system is perfectly secure, we take reasonable technical and organisational measures to protect your information.
9. Complaints
We hope to resolve any concern directly, so please contact us first. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk.
10. Changes to this policy
We may update this policy from time to time. Any changes will be published on this page with a revised “last updated” date.