This privacy policy explains how Lens & Light Studio processes personal data when you use sharechefstring.digital, submit an inquiry, or arrange photography services. It follows the data lifecycle from collection through use, disclosure, retention, and deletion.
This section outlines how information handling, individual rights, and support channels are addressed within this notice.
We may process your name, email address, phone number if you provide it, inquiry message, shoot requirements, and preferred date or session details. We also process technical data such as server request metadata and browser or device information when you visit the website.
We receive personal data from contact form submissions, email, phone calls, planning calls, and other direct communications. Technical information is collected automatically through the website and its security and delivery functions.
The website uses essential cookies needed for operation and preference cookies used to remember privacy choices. We do not confirm analytics or marketing cookies as active on this site.
We use essential cookies for site operation and cookies that remember privacy preferences. Where your browser allows it, you can block or delete cookies, but some site functions may not work as intended if essential cookies are disabled.
We use personal data to respond to contact form submissions, review event requirements, confirm booking details, manage communication, support website security, and deliver technical functions needed for the site to operate. Where a session is arranged, the same information may also be used to coordinate planning, access checks, and gallery delivery.
We may share data with service providers that support website operation, technical delivery, security, or communication handling. These recipients are expected to process data only for the services they provide to us and to use appropriate confidentiality and security measures.
We may disclose personal data when necessary to comply with legal obligations, respond to lawful requests, protect our rights, or address security incidents. Any disclosure is limited to what is reasonably necessary for the relevant purpose.
You may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, or ask for restriction or portability where those rights apply. Some requests may be limited by contract, security needs, or legal retention duties.
To exercise a privacy right, send a clear request through one of the contact channels listed in this policy and identify the data or issue concerned. We may need to verify your identity and may respond with clarification, a copy of the relevant data, a correction, deletion where permitted, or an explanation if we cannot comply in full.
We retain inquiry records, booking details, and related communications for as long as needed to manage the request, confirm the session, deliver the service, handle follow-up, and maintain business records. Technical data is kept for security and operational purposes for a period appropriate to those functions, and then deleted or anonymised when it is no longer needed.
If we make material changes, we will update the policy text on the website and use reasonable steps to make the change visible. The updated version applies from the date it is published unless a different effective date is stated.
GDPR requires a lawful basis, transparent processing, data minimisation, and respect for user rights. We process personal data only for the operational, security, and communication purposes described in this policy, and we limit use to what is necessary for those purposes.
If you are in the European Economic Area, your personal data is processed under GDPR principles where they apply to this website and the services we provide.
Where GDPR applies, you may request access, correction, deletion, restriction, objection, or portability of your personal data. We may ask for information needed to verify the request and to assess whether any legal exception applies before taking action.
